Privacy Policy

Information we collect

• Account information: your name, email address and sign-in details (passwords are handled by Amazon Cognito; we never see them).
• Content you provide: messages to your Bots, files you upload, routine instructions, and the Bots' replies and memories.
• Inbound messages: email sent to a Bot's address and texts sent to a Bot's phone number, including the sender's address or number.
• Connected services: when you connect a service (for example Google Gmail and Calendar, or GitHub), the data the Bot reads from it to do what you asked.
• Usage and billing: what your Bots did, model and tool usage, credits and payments (card details are handled by Stripe; we never see them).
• Technical data: logs needed to run and secure the service, such as request times and error codes.

How we use it

• To run your Bots and do what you ask, including routines started by schedules, webhooks, email or texts.
• To ask for your approval before a Bot sends, shares, deletes or pays for anything.
• To bill you, prevent abuse, keep the service secure, and fix problems.

We do not sell your personal information. We do not use your content or data from connected services to train AI models, and we do not use it for advertising.

Connected services (Google, GitHub and others)

You connect a service by signing in at that service and choosing what to allow. Access tokens are kept by Amazon Web Services' AgentCore Identity token vault under your account only; they are never shown to the AI model, written to logs, or shared with other users. A Bot uses a connected service only for the task you gave it, and anything that sends, shares or deletes asks you first. You can revoke access at any time in the service's own account settings.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you use, we do not transfer it except as needed to provide those features, for security, or as required by law, and we do not let humans read it unless you ask us to (for example in a support request), it is needed for security, or the law requires it.

Email

Each Bot can have its own email address. Mail sent to it is processed to start the routines you set up, only from senders you allowed, and mail that fails sender authentication (DMARC) is treated as untrusted. A Bot sends email only after you approve the exact recipients and text.

Text messages (SMS)

A Bot can have its own US phone number. We process the phone numbers and message text needed to deliver texts and to start the routines you set up. Texts are sent through Amazon Web Services' End User Messaging service.

• Opt-in. A Bot texts a phone number only when the dunkbot account holder has listed that number for the Bot and approved the specific message, and only to people who agreed to receive texts from that account holder. Texting a Bot's number only triggers the routines its owner has set up; it does not start a conversation.
• Opt-out. Reply STOP to any message to stop receiving texts from that number; you get one confirmation and no further texts. Reply START to opt back in.
• Help. Reply HELP for help, or email support@servsys.com.
• Rates and frequency. Message and data rates may apply. Message frequency varies with how the account holder uses their Bot.
• No marketing sharing. We do not sell, rent or share mobile phone numbers, or SMS opt-in data and consent, with third parties or affiliates for their marketing or promotional purposes.
• Carriers are not liable for delayed or undelivered messages.

The dunkbot text program sends texts only to the account owner and to numbers the owner verifies in a Bot's Texting settings. Message frequency varies and Msg & data rates may apply. Reply HELP for help (support@servsys.com) and STOP to cancel; reply START to resume. Mobile numbers and opt-in data are not sold or shared with third parties for marketing, and consent is not a condition of purchase.

Phone calls

A Bot with calling turned on can place and answer phone calls for you. Every call is recorded and transcribed, and it opens with an announcement that an AI assistant is on the line and that the call is recorded. Calls are placed and answered by your Bot's AI voice. No person listens in or places calls for your Bot. The transcript and recording are the full record.

Who we share information with

We share information only with service providers that help us run dunkbot, under contract:

• Amazon Web Services: hosting, storage, AI models (Amazon Bedrock), email, text messaging and sign-in.
• Stripe: payments.
• Services you connect, when your Bot acts on them for you.

We may disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of our business, in which case this policy continues to apply.

Retention and deletion

We keep your data while your account is open. Inbound message records are kept for 30 days. Deleting a Bot removes its conversations, memories and files and releases its phone number; closing your account deletes your data within 30 days, except what we must keep for legal, tax or security reasons. You can ask us for a copy of your data or to delete it at support@servsys.com.

What a Bot remembers, how long it is kept, what is masked, how to export or forget it, and what happens when you do are set out on one page: how memory works.

Security

Data is encrypted in transit and at rest. Each account's data is isolated, Bots act with only the access your approvals give them, and secrets you give a Bot are never shown to the AI model.

Children

dunkbot is not for children under 13, and we do not knowingly collect their information.

Changes and contact

We will post changes here and, for material changes, tell you by email or in the app. Questions: support@servsys.com, or Servesys Corporation, 240 OConnor Ridge Blvd, Suite 100, Irving, TX 75028, USA.