Privacy Policy

1. Who we are and what this policy covers

Bottari is a collaboration product for software teams. It combines a shared workspace (channels, documents, databases, meetings) with AI work sessions that run on each member's own computer.

This policy is published by Open Rhapsody, Inc., 8F, 16 Teheran-ro 8-gil, Gangnam-gu, Seoul 06233, Republic of Korea ("Bottari", "we", "us"). It explains what personal information we handle when you use:

• the bottari.ai website, including the waitlist form,
• the Bottari desktop app (macOS),
• the Bottari mobile app (iOS/Android),
• the Bottari web surfaces, including publicly published pages, and
• our backend services at api.bottari.ai and app.bottari.ai.

It does not cover third-party services you or your administrator choose to connect (Slack, Notion, Gmail, GitHub, Google Analytics, Google Ads, your own databases). Those services remain governed by their own privacy policies.

2. Our two roles: controller and processor

Bottari is a workplace product, so the same policy covers two different relationships.

If you use Bottari for a personal workspace with no employer behind it, we are the controller for everything.

3. Information we collect

3.1 Account and profile

We do not operate passwords. You sign in with Google or GitHub (OAuth 2.0 / OpenID Connect), or with Sign in with Apple in the iOS app. At sign-in we receive and store:

• provider name and your provider user ID and username (Google, GitHub, or Apple),
• your email address (may be absent if your GitHub email is private),
• your display name and profile picture URL,
• the time of your last sign-in.

Sign in with Apple. Apple shares your name only the first time you sign in, and an email address. If you choose Hide My Email, the address is a private relay address ending in @privaterelay.appleid.com that forwards to your real inbox; we never see the address behind it.

We do not store the access tokens issued by Google, GitHub, or Apple for identity — the profile is read once and the token is discarded. Our own session tokens are kept as hashes only, so the stored value cannot be used to sign in.

You may optionally add to your profile: a job title, a time zone, a custom status (emoji and text), and an uploaded avatar image.

Waitlist. If you ask for access on bottari.ai before you have an account, we store the email address you submit so that we can contact you about access, and delete it on request.

3.2 Workspace content you and your team create

Because the workspace is the product, most of what we hold is content your team creates:

• channel messages, direct messages, threads, reactions, pins, and quoted excerpts;
• documents, database pages and their properties, comments and replies, page version history;
• uploaded files, images, and attachments;
• drafts, favourites, saved items, notification preferences, and read state;
• page view history — which pages you opened, shown to teammates. You can turn this off for yourself in settings, which both stops new records and hides existing ones;
• team, space, and workspace membership, invitations (including the invited person's email address), and roles.

3.3 AI work sessions and activity on your device

Bottari's AI agent runs on your own computer, not on our servers. Your source code stays on your device and in your own git remotes — we do not upload your repository, and the code index the agent builds is stored only in a local cache on your machine.

What does reach our servers is the session record, which is shared with everyone who can access that session:

• the full session log — your instructions, the model's replies, and each turn's tool activity;
• which tools the agent ran, the commands and file paths involved, and previews of the results;
• files the agent read in order to answer you. The agent can read files under your home directory, including outside the project folder, and what it reads can end up in the shared session log;
• work session metadata: title, assignee, parent session, the repositories bound to the session, and which device holds the run seat;
• a device record for each machine you sign in from: an opaque device ID, your computer's hostname (e.g. "Angie-MacBook-Pro"), and when it was last seen.

Safeguards that exist today: the agent is denied read access to credential locations (~/.ssh, ~/.aws, ~/.claude, and Bottari's own token files); values matching secret and personal-data patterns are masked before a tool result is written into the shared log; and reads outside the working folder are flagged in the team audit log. These reduce, but do not eliminate, the chance that something private on your machine appears in a team-visible record. Treat a Bottari session as a shared workspace, not a private terminal.

3.4 Meetings, audio, and screen sharing

When your team runs a meeting or scrum in Bottari:

• Audio and video are carried in real time by a LiveKit server that we operate on our own infrastructure (rtc.bottari.ai) — not by a third-party meeting cloud.
• Screen sharing on desktop is shared only after you pick a window or screen in the system picker.
• Meetings are recorded and transcribed by default. Recording starts automatically when the person who created the scrum joins, and a consent banner is shown the first time you join a recorded meeting. Audio chunks are sent to our transcription provider (Section 5); the resulting transcript segments are stored with the speaker's name, a timestamp, and the text; and the raw audio is discarded after transcription — no recording is kept.
• AI meeting notes are generated by summarising the transcript and are saved as a document in your workspace.

Transcripts and notes are kept as ordinary documents with no automatic expiry. A transcript can be deleted separately from the meeting record, and deleting the page or scrum deletes its transcript with it.

3.5 Data from services your workspace connects

A workspace administrator can connect external sources. When they do, we fetch data from that source, store it, and index it so the AI can search it:

Connecting Gmail in particular means the contents of the selected mailboxes, including messages from people who are not Bottari users, become searchable inside the workspace. The administrator who connects a source is responsible for having the authority to do so and for telling affected people. Credentials for these connections are stored encrypted (Section 9) and never sent to member devices, except for short-lived, read-only tokens where a query must run on the device.

3.6 Notifications and mobile device permissions

If you allow notifications on mobile, we store a push notification token for that device together with your notification preferences. Push messages are relayed by Expo to Apple (APNs) on iOS and Google (FCM) on Android. The text of a notification — who sent it, and part of the message, page, or session it refers to — travels along that path. You can turn notifications off in your device settings, or narrow them in Bottari's notification preferences.

The mobile app asks for these device permissions, each only when the related feature is used:

3.7 Analytics

The bottari.ai website uses Google Analytics 4 to understand how the site is used: pages viewed, the referring page, device and browser information, and an approximate location derived from your IP address.

The desktop and mobile apps contain no analytics SDK. If we add one, we will update this policy before the release that includes it.

We deliberately collect no advertising identifier — the Android AD_ID permission is removed and the iOS build carries no IDFA — so the apps do no "tracking" under Apple's rules and no App Tracking Transparency prompt appears. Website analytics data is never used for advertising or retargeting.

3.8 Technical and security logs

• Audit log. Security-relevant events (sign-in, permission changes, sharing, agent tool use, deletions) are recorded with the actor, the target, the device, a timestamp, and the IP address and browser/app user agent of the request.
• Service logs. Ordinary operational logs and error diagnostics.
• Email delivery. Invitation emails are sent through Amazon SES; delivery events are handled by that service.

3.9 What we do not collect

To be explicit, because it is unusual:

• No cookies in the apps. The desktop and mobile apps authenticate with bearer tokens held in the operating system's secure storage, not cookies. The bottari.ai website sets Google Analytics cookies (Section 3.7); we set no advertising cookies anywhere.
• No advertising identifier and no ad tech. We do not collect the Android advertising ID or the iOS IDFA, we run no ads, and we build no advertising profiles.
• No session-replay or crash-reporting SDK. There is no Sentry, Crashlytics, Amplitude, or Mixpanel in the product.
• No payment card data. We do not take card payments in the product, and we never see or store card numbers.
• No precise location data and no biometric data. Website analytics infers only a coarse, city-level location from your IP address (Section 3.7).

4. How we use information, and our legal bases

We do not use automated decision-making that produces legal or similarly significant effects about you.

5. AI providers and what happens to your content

Model calls take one of two routes. When you use a model that Bottari provides, our server relays the call so that individual members do not have to hold model API keys. When you use your own Claude or Codex subscription, the official CLI runs on your own machine and contacts Anthropic or OpenAI directly under your own account — that traffic does not pass through our servers, although the resulting session log is still stored in your workspace.

Our gateway passes model traffic through and does not keep a separate copy of the request body; however the session log in your workspace does retain the session log, which is the point of a shared session.

Training. We do not use your content to train AI models, and we do not allow our model providers to train on it. Where a provider's default terms would permit training on prompts, we configure our account so that your requests are not routed to that provider.

6. Who we share information with

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used under US state privacy laws.

Inside your workspace. Bottari is collaborative by design. Messages, documents, session logs, meeting transcripts, and view history are visible to the members who have access to that space or session, and your administrator can access workspace content and the team audit log.

Publicly, when you publish. A page that someone publishes to the public web becomes readable by anyone with the link, without signing in. Published pages deliberately omit user IDs and email addresses, showing display names and opaque avatar references instead.

Service providers (sub-processors).

Others. We may disclose information to comply with law or valid legal process, to protect our rights or the safety of users, and to an acquirer in a merger, acquisition, or asset sale — in which case we will notify you before your information becomes subject to a different policy.

7. Where your data is stored and international transfers

Our application servers and primary database run on AWS in Seoul, Republic of Korea (ap-northeast-2). File and image storage, the content delivery network, key management, and outbound email run in the United States (us-east-1). Model providers, push relays, and analytics also process data in the United States.

If you are in the United Kingdom or the European Economic Area, transfers to the Republic of Korea are covered by the adequacy decisions those jurisdictions have granted Korea — the EU decision of 17 December 2021 and the UK "data bridge" in force since 19 December 2022 — so no additional transfer mechanism is needed for that leg. For transfers to the United States we rely on appropriate safeguards: Standard Contractual Clauses, with the UK International Data Transfer Addendum where the UK GDPR applies, or the provider's certification under the EU-US Data Privacy Framework. You may request a copy of the safeguards using the contact details in Section 13.

8. How long we keep information

9. How we protect information

• All traffic between apps and our servers uses TLS.
• Session refresh tokens are stored as SHA-256 hashes; tokens on your device are kept in the operating system's secure storage.
• Credentials for connected services are encrypted with envelope encryption using AWS KMS, with the master key held in a hardware security module and never exported. They are stored only on the server and are not sent to member devices.
• Long-lived provider secrets stay on the server; where a device must query a source directly it receives a short-lived, read-only token instead (about one hour).
• The local AI agent is blocked from reading known credential paths, secret-looking values are redacted before entering the shared session log, and reads outside the working folder are flagged in the audit log.
• Access to workspace content is enforced per space, database, page, and session.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant supervisory authority as required by law.

10. Your privacy rights

If you are in the UK or EEA, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent where we rely on it. You may lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

If you are in California or another US state with a comprehensive privacy law, you have the right to know what we collect and why, to request deletion, to correct inaccurate information, to obtain a portable copy, and to opt out of the sale or sharing of your personal information — we do neither. You may use an authorised agent, and we will not discriminate against you for exercising any right. We honour Global Privacy Control signals on our web surfaces.

The categories of personal information we have collected in the last twelve months:

We do not collect sensitive personal information in order to infer characteristics about you, and we do not sell or share personal information.

How to exercise a right. Email hello@bottari.ai from the address on your account. We respond within 30 days (UK/EEA) or 45 days (US states), and will tell you if we need an extension. If your request concerns content in an employer-owned workspace, we will forward it to that organisation, which decides the outcome as the controller. If we refuse a request you may appeal by replying to our decision; we will answer an appeal within 45 days.

Inside the product you can already: edit your profile, turn off page view history, delete your own messages, documents, and files, delete a meeting transcript, and disconnect a connected source.

Deleting your account. You can delete your account yourself in the Bottari app — on desktop under Settings → Account → Delete account, and on mobile by tapping your photo, then Settings → Account → Delete account. You can also email hello@bottari.ai from the address on your account, or follow the steps at bottari.ai/account-deletion. If you signed in with Apple's Hide My Email, please use the in-app option. Deletion takes effect immediately and cannot be undone: there is no grace period, and signing in again later with the same email address creates a new, empty account.

• Deleted immediately: your profile (name, email address, photo, job title, time zone, status, last sign-in); your Google, GitHub and Apple sign-in links, sessions, device records and push tokens; your personal settings, favourites, drafts, read state and page view history. If you signed in with Apple, we also revoke Bottari's access in your Apple account; if that cannot be done automatically, the app tells you how to remove it in your Apple settings.
• Disconnected: data sources you personally connected (for example Google Analytics, Google Ads or Notion) are revoked at the provider and their imported records deleted; pages you published to the web are unpublished; your private databases are moved to Trash.
• Kept by your team, without your name: messages, documents, comments and AI session records you left in a shared workspace belong to that workspace and stay there, shown as from a "Deleted account". You can delete them yourself before deleting your account, or ask your administrator to.
• Kept for security: the team audit log keeps its records of what happened, with your name removed, for security purposes, and deletes them after 12 months like every audit entry. Account-level audit entries have their IP address, user agent and device removed immediately.
• Teams you own: if you were the only member, the team is deleted and its content is permanently erased within 30 days. If other members remain and you were the only owner, ownership passes to the member who joined earliest — you see who before confirming, and you can make someone else owner beforehand.
• Backups: deleted information disappears from our backups within 30 days.

Leaving a team is different from deleting your account: your membership ends, but data sources and webhooks you connected for that team remain with the team.

11. Children

Bottari is a workplace tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We will post any change on this page and update the "Last updated" date. If a change materially affects how we use your personal information, we will give notice in the app or by email before it takes effect.

13. Contact