1. Who we are and what this covers
Disbot Inc (we, us, or our) provides the disbot website and business workspace and is responsible for the website, account, enquiry, and operational processing described here. We are a Colorado corporation, United States, with entity number 20268340419, incorporated on 2026-10-29.
Registered address: 1500 N Grant St, Ste R, Denver, CO 80203, USA. This is also the registered-agent address, not a staffed business office or customer visit location. Contact [email protected] for privacy matters.
This policy covers browsing the public site, creating an account, using the workspace, submitting enquiries, and contacting our public mailboxes. Business users decide which business-contact information to submit and its business purpose; we provide functions at their request. If a business user supplied your information, you may also contact that business about its processing grounds. We handle requests according to our actual role and applicable law, coordinating with that business where necessary.
2. Information we process
- Accounts and authentication: your registration name and email, account identifiers and timestamps, a password hash, and session tokens and cookies. Registration checks an invitation code. Registration email verification and password-reset email flows are not currently available.
- Technical and security information: IP addresses and browser information recorded by authentication, session and request times, rate-limit records, and operational errors. Infrastructure providers also process connection and request information.
- Website enquiries: the name, company or team, contact details, enquiry category, message, and submission time you provide. The form requires affirmative consent to process that enquiry; submissions are saved in our local database.
- Support and contact email: sender and recipient details, headers, subject, body, attachments you choose to send, and subsequent correspondence.
- Workspace information: company and product details, target markets and roles, company lists, source links, notes, and business contacts’ names, emails, telephone numbers, roles, countries, and time zones; contact permission and its source, unsubscribe and suppression records, drafts, approvals and sending status, task inputs and results, usage, and activity records.
- Data from enabled integrations: requested generated content and search results. If mailbox synchronization is configured and used, email headers, addresses, subjects, plain-text bodies, and synchronization status may be saved in the workspace database. API and mailbox credentials needed for connections are managed through server configuration.
Information primarily comes from what you submit, data business users are authorized to import, and records generated through use. Public search supplies additional results only when configured and requested. Public pages can be browsed without an account.
Provide only information needed for the task. Do not send passwords, verification codes, session tokens, identity documents, financial account credentials, or unrelated sensitive information such as health details through enquiry forms or support email. The website does not process payments or request payment-card details.
3. Purposes and processing grounds
We use account and session information to authenticate users, manage access, and maintain login sessions; workspace information to perform requested functions, save progress, and show results; enquiry and support information to respond to requests; and necessary technical and activity records to operate, troubleshoot, prevent abuse, and protect accounts. Relevant records may also be used and retained to meet legal obligations or address legal disputes.
Where applicable law requires a specified legal basis, the basis depends on the activity: performing our contract with you or taking steps at your request before a contract, your consent, compliance with legal obligations, or legitimate interests in operating and protecting the service and responding to business contacts. Reliance on legitimate interests requires consideration of the impact on your rights and interests. Business users must still establish appropriate grounds for the contact information and outreach they submit.
Enquiries and registration do not automatically subscribe you to marketing emails. Form consent is for handling the enquiry, not unrelated third-party marketing. We do not sell personal information or share it for cross-site targeted advertising.
Workspace feedback informs the inputs to requested profiles or drafts; it does not mean disbot is training a foundation model on that content. If AI is enabled, provider retention and use of requests depend on the applicable service terms. This policy is not a zero-retention or no-training assurance about an external provider.
4. Providers and external transfers
- Contabo: the application runs on one Contabo server, with the database in persistent storage on that server. Hosting involves the infrastructure holding data and technical information needed for operation.
- Cloudflare website services: we use Cloudflare DNS, CDN, and tunnel services. Connections and requests pass through the relevant infrastructure. Cloudflare can process IP addresses, requested URLs, browser and connection details, and traffic content needed to proxy and transmit website requests.
- Cloudflare and Google email services: messages to [email protected], [email protected], or [email protected] are routed through Cloudflare email forwarding to a mailbox processed by Google. These services process routing information, addresses, content, and attachments to deliver, store, and provide email. This support channel is separate from workspace SMTP / IMAP integrations.
- Optional AI, search, and workspace email: these integrations are disabled in the online instance as of this policy’s effective date. Relevant data is sent only after configuration and a corresponding requested operation. The current code supports DeepSeek receiving task inputs such as company details, targets, feedback, and a draft recipient’s name, role, and country; Brave Search receiving submitted search terms; and configured SMTP / IMAP services processing mailbox connections, outgoing mail, and incoming mail.
Workspace sending additionally requires recipient permission, human approval of the current draft, and sending configuration. When email operations are enabled, related inbox checks and sending tasks also execute as part of those requested operations. Simply browsing the site or submitting an enquiry does not invoke these optional AI, search, or workspace email services.
Website enquiries remain in our database and are not automatically forwarded by the form to external marketing platforms. Authorized administrators can read and respond to them; an email reply involves the email services. Necessary operational access supports maintenance and requests and does not make workspace content public to other users.
We may also disclose information where required by law, in response to valid legal process, or as lawfully necessary to protect users and service security. External services have their own processing rules. Before enabling a new integration, confirm the specific provider, data scope, and applicable terms.
5. Storage, international processing, and retention
Accounts, workspaces, and website enquiries are kept in a persistent SQLite database on the server, with daily database backups on the same server. Support email is stored separately by the email service. On-host backups are not off-site backups and do not guarantee recovery if the entire server is lost or damaged.
Our Colorado registered address does not mean the server is in Colorado or the United States. We do not promise storage exclusively in any one country. Hosting, network, and email providers may process information outside your country or region, where data protection rules may differ. Contact our privacy mailbox about processing locations relevant to your use. Before an additional integration involves a restricted international transfer, applicable legal requirements and necessary arrangements must be established.
Retention is purpose-based: account and workspace information supports the service and saved work; enquiry and support records support replies, follow-up, and the correspondence record; security, permission, suppression, and dispute records may be needed to prevent abuse or repeat contact and meet legal obligations. In deciding whether information is still needed, we consider the continuing purpose, sensitivity, deletion requests, and applicable legal requirements.
The current implementation has no general automatic expiry or deletion mechanism for these business records or database backups. Records and backups can persist until manually removed. Stopping use, closing a browser, or session expiry does not remove them. Data no longer needed and accepted deletion requests require manual handling; do not assume deletion occurs on an automatic schedule.
Deleting a record from the current database does not simultaneously erase existing backups or email copies. When handling a request, we assess relevant copies and legally required retention and explain available measures, limits, and reasons rather than promise immediate removal from every copy.
7. Your choices and privacy rights
You may browse public pages without creating an account, submitting an enquiry, or requesting external integrations. Depending on applicable law, you may request access or a copy, correction, deletion, restriction, portability, or objection to processing, and withdraw consent for consent-based processing. Withdrawal does not affect earlier lawful processing or necessarily stop processing with another lawful basis.
Email [email protected] with the type of request, the email or workspace you used to interact with us, and only the context needed to find the relevant information. We use reasonable verification proportionate to the request, relying where possible on existing contact or account details. Do not submit identity documents, passwords, or other security credentials through a public form.
There is currently no complete self-service flow that automatically fulfills these rights or deletes accounts. Requests are handled manually. We respond as required by applicable law and explain any lawful retention, inability to fulfill a request, or need for further verification. You may complain to a data protection authority with jurisdiction or pursue other legal remedies where available.
If a business user entered your contact details, you may contact that business directly or tell us which business and communication are involved. For mail sent through the service, use an unsubscribe link where provided or ask the sender to stop contacting you.
8. Minors
disbot is intended for business users authorized to carry out the relevant activity, not minors, and we do not intentionally solicit minors’ information. If you believe a minor has submitted personal information, contact our privacy mailbox so we can investigate and take appropriate action.
9. Updates and contact
We may update this policy as features, providers, purposes, or applicable requirements change. We will communicate material changes through a website notice or an available contact channel and obtain consent where required by law. The effective date at the top identifies this version.
Privacy questions and rights requests: [email protected]. Account and product support: [email protected]. General contact: [email protected], or visit our contact page.
Disbot Inc · Registered address: 1500 N Grant St, Ste R, Denver, CO 80203, USA. This address is for company registration and registered-agent purposes, not customer visits.