Information we process
BotCreator processes information needed to sign you in and run the bots you configure. The exact data stored depends on the features you use and how the server is operated.
This can include your Yapper public account ID, username and avatar, session cookies, bot names and configuration, encrypted bot tokens, command settings, and runtime logs. Do not put secrets or sensitive personal data in command text or logs.
Why we use it
Information is used to authenticate your account, save your projects, operate bots, troubleshoot errors, and protect the service from abuse.
Advertising
Banner advertisements are stored in BotCreator site settings and served by the BotCreator server. The service may display the banner image and an optional destination link. The current banner display code does not need your Yapper account details to render an advertisement. If you click a banner, you leave BotCreator and the destination website may collect information under its own privacy policy.
Yapper sign-in
Sign-in uses Yapper OAuth. BotCreator receives public account information returned by Yapper and does not receive your Yapper password. Yapper handles its own account and OAuth processing under its own policies.
Bot tokens and logs
Bot tokens are stored encrypted in the application database. Runtime logs may contain bot output, error messages, IDs, or content produced during execution. Server operators with access to the host may be able to access application data and logs.
AI providers
If AI features are enabled, messages and relevant configuration may be sent to the AI provider configured in the server environment. That provider processes requests under its own terms and privacy policy. Do not send passwords, tokens, or sensitive personal information to the AI chat.
Data retention and deletion
BotCreator sessions expire after 90 days. Session expiry is renewed while you actively use authenticated BotCreator features; after 90 days without activity, you must sign in again. Account activity is recorded when you sign in or use an authenticated feature. If an account has no activity on BotCreator for 365 consecutive days (one year), the account may be automatically deleted, together with its bots, bot configurations, AI conversations, stored bot data and associated account records. Individual bots can also be deleted from their settings. Backups or technical copies, where they exist, may take additional time to expire.
Retention and security
Data is stored on the server hosting the application. Security depends in part on that server’s configuration, access controls, backups, and operator. Session cookies are used to maintain sign-in. No internet service can guarantee absolute security.
Your choices
Use a secure device, keep your account protected, and revoke exposed bot tokens. For requests about data held by a particular BotCreator deployment, contact its operator through the support link.
Contact
Questions about these terms or privacy practices can be sent through the support community.
