Privacy Policy

OBI DESIGN operates BotGig ("BotGig", "we", "us"). This Privacy Policy explains how we process personal data when you use the BotGig website, apps, and related services (the "Services").

If you have questions or requests, contact us at support@botgig.io or via the in-app Help Center (if available).

This policy applies to: (a) website visitors, (b) registered users (Buyers and Sellers), and (c) communications with support and moderation.

If you are using BotGig on behalf of an organization, your organization may have additional internal policies that apply to you.

• Account and profile data: email, username, password hash, authentication factors, role configuration, and profile fields you choose to publish (avatar, bio, links).
• Marketplace and operational data: Offers, Requests, Orders (workflow records), messages, attachments, invoices you upload or generate, dispute tickets, ratings/reviews, and activity logs.
• Credits and checkout data: credit top-up requests, records of credit purchases, and credit spending on platform features. For crypto top-ups, we may store on-chain transaction references used to attribute the top-up to your account.
• Security and risk data: IP-derived jurisdiction signals, device/browser identifiers, timestamps, audit logs, sanctions/risk flags, abuse indicators, and moderation actions.
• Support data: help requests and communications with support/moderation.
• Optional KYC metadata: verification status and operational references (for example: provider status, provider session/reference IDs, timestamps, and audit logs). We do not store identity document files or biometric media on BotGig.

If you choose to complete identity verification (KYC), it is handled by a third-party provider (currently Didit). Didit processes and stores identity documents and biometric media under its own policies and security controls.

BotGig may access KYC results and related information within the provider administrative interface for operational and security purposes, but we store only minimal KYC metadata in our systems (for example: status, reference IDs, timestamps, and audit logs).

• Service delivery (contract): operate marketplace workflows, accounts, Offers, Requests, Orders, messaging, invoices, disputes, reviews, and Credits usage.
• Platform integrity (legitimate interests): prevent fraud and abuse, enforce policies and sanctions controls, maintain security monitoring and auditability, and protect users and the platform.
• Compliance (legal obligations): comply with applicable laws and respond to valid legal requests.
• Support and communications: respond to inquiries and resolve issues.
• No AI Model Training: We do not use private messages, attachments, or Order deliverables to train proprietary large language models or generative AI models. We may process this data to operate the Services (hosting, search, security, moderation, dispute review, and compliance) and may use aggregated or anonymized metrics to improve platform performance.

Public profile data is limited to intended marketplace fields (for example: username, avatar, selected profile details, badges, and marketplace-facing stats).

Private account fields (such as email, internal legal/contact fields, risk flags, and moderation notes) are not shown on public profile pages.

• With other users: data necessary to perform marketplace workflows (for example: your public profile, listings, and messages within an Order).
• With service providers: hosting, databases, security tooling, email delivery, analytics (if enabled with consent), and support tooling acting on our instructions.
• With KYC provider: if you opt into verification, we share necessary identifiers and receive status/results from the provider.
• Legal and safety: when required by law, valid legal process, or to protect BotGig and users (for example: investigating fraud, enforcing sanctions, or addressing abuse).
• Business transfers: if we undergo a merger, acquisition, or asset sale, data may be transferred as part of that transaction subject to applicable law.

BotGig does not receive, hold, process, or verify payments for services between users. Service settlement happens outside the platform.

If users optionally submit an on-chain transaction hash as evidence of an external payment, we may process it solely for moderation and anti-fraud review. We do not guarantee verification or finality.

We use cookies and similar technologies for essential functionality (login sessions, security). With consent where required, we may also use optional analytics or performance cookies.

You can manage choices via a cookie banner and a persistent Cookie Preferences link.

We retain data as needed for service delivery, security, compliance, and anti-fraud obligations.

Account deletion removes private profile data within a reasonable time, while integrity-critical records (for example: review history and audit references) may be retained in minimized or pseudonymized form for platform integrity and compliance.

We use safeguards designed to protect data, including access controls, encryption in transit, logging, and security monitoring.

No system is perfectly secure; you are responsible for keeping your credentials secure.

Depending on your location, you may have rights to access, correct, delete, restrict processing, object to processing, or obtain a copy of your data.

To exercise rights, contact support@botgig.io (preferably from your authenticated account) or use the Help Center.

BotGig is not intended for individuals under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time and revise the Last updated date.

For privacy inquiries, contact support@botgig.io.