We collect only the data we need to operate the Service. We do not sell your data. You can delete your account at any time — your data is deleted within 30 days afterwards. Your bot subscribers' data is stored in isolated database schemas and is accessible only to you.
Who we are
We are the 4u.bot service (Service Provider). We provide tools for creating and managing Telegram bots with artificial intelligence.
Data Protection Contact (responsible person): Email: [email protected]
Data we collect
Account data
Your email, name, phone number (if provided), and payment details for granting access to the Service.
Service data
Telegram bot tokens, bot builder settings, knowledge bases (RAG), product catalogs, and integration settings.
Subscriber data
We act as a technical intermediary (data processor) for data received from users of your bots. This data is stored in isolated database schemas and is accessible only to you.
Technical data
IP addresses, browser and device data for security and Service usage analytics.
AI assistant conversations
When you interact with the chatbot on this website or with any of the AI assistants inside the Service (bot wizard, flow builder, screen editor, text improver, in-app help), we store the full text of your messages and our replies for up to 90 days. This data is used to improve our AI prompts, debug user-reported issues, and analyse how the platform is used. We never store your raw IP address or browser user-agent in this log — only salted SHA-256 hashes. Email addresses, phone numbers, card-like digit sequences, API keys, and JWTs are automatically replaced with placeholders before storage. To stitch your messages from the public chatbot into one session, we generate a random UUID called fourbot_visitor_id and store it in your browser's localStorage. You can clear it at any time by clearing your browser data, which disconnects future chat sessions from your prior ones. You can request deletion of any of your AI conversation history by contacting us at [email protected]; matching records are removed within 30 days.
Purpose and legal basis for processing
We process your data solely for:
- Execution of the Public Offer Agreement (providing access to the SaaS platform)
- Ensuring the technical operation of the Service
- Invoicing and payment processing
- Sending service notifications (payment alerts, plan change notifications, etc.)
Legal basis — execution of the agreement and your consent given during registration, in accordance with the Ukrainian Law on Protection of Personal Data No. 2297-VI of June 1, 2010 (hereinafter — Law No. 2297-VI).
Data transfers to third parties (sub-processors)
To operate the Service, we interact with the following services and entities:
| Service | Purpose | Data transferred |
|---|---|---|
| Telegram Bot API | Bot operation, message processing | Bot tokens, user messages |
| OpenAI API | AI chat, knowledge base (RAG), image and voice recognition | Message texts, images, audio (for AI processing) |
| Anthropic (Claude) API | AI bot builder assistant, content generation | AI assistant query texts |
| monobank API | Subscription payment processing | Payment amount, transaction ID |
| LiqPay | Payment processing (alternative provider) | Payment amount, transaction ID |
| WayForPay | Payment processing (alternative provider) | Payment amount, transaction ID |
| Brevo (Sendinblue) | Email delivery (invoices, notifications, service emails) | Email address, email content |
| Cloudflare | CDN, DDoS protection, network security | IP addresses, HTTP requests (metadata) |
| Hetzner Online GmbH | Server hosting (EU, Germany) | All data stored on the platform |
| Google OAuth | Authentication via Google account | Email, name (from your Google profile) |
| Facebook Login | Authentication via Facebook account | Email, name (from your Facebook profile) |
| Horoshop, Prom.ua, WooCommerce, Poster, 1C/BAS, Google Sheets | Product catalog synchronization (per your connection) | Product, category, and inventory data |
| S3-compatible storage | File storage (documents, images, PDFs) | Uploaded files |
| Google Analytics 4 (Google Ireland Ltd) | Landing-page web analytics — only after consent in the cookie banner (IP anonymization on, no ads personalization) | Anonymized visitor ID, page views, events, country/city, device type |
We do not sell your data to third parties and do not use it for advertising purposes.
Data storage and security
- Your bot subscriber data is stored in isolated database schemas (schema-per-tenant). Other platform users do not have access to your data.
- Data transfer between client and server is carried out via a secure connection (HTTPS/TLS).
- Passwords are stored in hashed form and cannot be recovered.
- Access to administrative tools is protected by a role and permission system (RBAC).
Data retention periods
| Data type | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Subscriber data | Duration of bot existence + 30 days after deletion |
| Message logs | 90 days |
| Payment records | 3 years (tax obligations) |
| Analytics events | 1 year |
Your rights
Under Ukrainian Law No. 2297-VI "On Protection of Personal Data" and EU Regulation 2016/679 (GDPR) where applicable, you have the right to:
- Access (Art. 8 of Law No. 2297-VI) — obtain information about your personal data that we process
- Rectification (Art. 8 of Law No. 2297-VI) — make corrections to inaccurate or incomplete data
- Erasure (Art. 8 of Law No. 2297-VI) — request deletion of your personal data ("right to be forgotten")
- Restriction of processing — restrict the processing of your data in certain circumstances
- Data portability — receive your data in a structured format
To exercise these rights, contact us at [email protected].
Cookies
We use necessary cookies to ensure the Service operates correctly (authentication, language setting storage). We do not use advertising or tracking cookies.
Changes to this Policy
- We reserve the right to make changes to this Privacy Policy.
- Changes are published on this page with the date of the latest revision.
- Continued use of the Service after changes are made constitutes your agreement with the updated Policy.
Data Protection contact
For questions about privacy and personal data protection under Ukrainian Law No. 2297-VI, contact us:
Email: [email protected]
Telegram: @4ubot
Last updated: 2026-02-15 · Terms of Service · Public Offer