Security & Privacy

We ask for a lot of trust. We built Bottari to be worth it.

Bottari connects to your code, Slack, and email to know what’s next.

Most tools earn trust by touching as little as possible. Bottari reads broadly so it can think alongside you. So we hold ourselves to one rule: see only what you allow, keep as little as possible, and never act without your say-so.

Access

You choose what Bottari sees

  • Connect only the repos, channels, and inboxes you want.
  • Sensitive sources stay off by default.

Insight, not your raw files

  • Bottari learns from your code and conversations, but keeps distilled context.
  • Raw files or messages are not retained.
  • Disconnect a source and its raw content is purged.

Delete anything, anytime

  • Remove any memory, disconnect any source, or export and close your account.
  • When you delete, it is gone from backups within 30 days.

Use

Never trains a model

  • Your data helps you only, never to train AI models.
  • AI processing runs through zero-retention providers.

Secrets stay secret

  • Passwords, API keys, and tokens are detected and stripped.
  • Connection tokens live in an encrypted vault.

Personal stays personal

  • Personal inbox content stays private from teammates.
  • Only shared backlog insights are visible.

Protection

Nothing ships without your say-so

  • Bottari proposes work but never pushes to production.
  • All changes arrive as pull requests for team review.

Even we can’t browse your data

  • Code and messages are encrypted.
  • Team access requires explicit approval and logging.

Isolated from other customers

  • Every workspace is isolated at application and infrastructure layers.

Do not paste sensitive information (card numbers, government IDs, passwords, private keys) into connected tools. Bottari detects and strips such data, but prevention is safest.

Questions people ask

Do you use my code or messages to train AI models?

No. Data is used to help you only. Zero-retention agreements apply.

Can your team read my code or emails?

No. Raw content is encrypted. Access requires explicit approval, logging, and notification for sensitive items.

Does Bottari change or deploy code on its own?

No. It writes code as pull requests your team reviews and merges.

What happens to my data when I disconnect a source?

Syncing stops and raw content is purged. High-level context remains unless deleted.

Can teammates see a personal inbox connection?

No. Personal sources feed only product signal to the shared backlog.

Where does my data actually go?

Encrypted storage with processing through zero-retention providers.

Transparency

  • Subprocessor list published.
  • Data Processing Agreement available upon request.
  • Direct security reporting available.
  • SOC 2 certification in progress.

Security questions or reports: support@bottari.ai.