Back to site

Privacy policy

Last updated: 25 October 2026

This policy explains how AIBotLab ("we", "us") handles personal data. AIBotLab is operated by Priyesh Pranjal as a sole proprietor in India. You can reach us at info@aibotlab.in or on WhatsApp at +91 81716 02485.

There are two different situations. 1. You visit our website or ask us for a quote: we decide why and how your data is used (we are the "controller"). 2. You chat with an AI receptionist that we built for one of our clients, such as a clinic: the clinic decides why and how your data is used, and we process it on the clinic's behalf (we are the "processor"). In that case, please read the clinic's privacy notice, and contact the clinic first about your data.

1. Visiting aibotlab.in

2. Asking for a quote

The quote form asks for your name, email, business name, country, the service you are interested in and an optional message. When you press the button, these details are sent securely, without leaving this page, to our form service (FormSubmit), which emails them to our business inbox. FormSubmit handles them only to deliver that email under its own privacy policy. The website itself does not store them, and no cookies or tracking are involved. If sending fails, the page offers to open your own email app instead. Messages you send by email or WhatsApp reach us through your email or WhatsApp provider.

PurposeDataLegal basis (where GDPR-type law applies)How long we keep it
Reply to your enquiry and prepare a quoteName, email, business, country, message, phone (WhatsApp)Steps at your request before a contract; our legitimate interest in answering business enquiriesUp to 24 months after the last contact, unless you ask us to delete it sooner
Deliver a contracted serviceBusiness details you give us, billing detailsPerformance of a contractFor the contract, plus the period the law requires us to keep financial records
Keep records, prevent fraud, handle legal claimsCorrespondence, invoices, payment referencesLegal obligation; legitimate interestAs required by law

3. Business outreach

We sometimes contact businesses about our services, using business contact details published by the business itself. We honour opt-outs immediately: reply "stop" or email us and we will not contact you again. See also our regional data protection notes.

4. AI receptionists we build for clients

When a visitor chats with an AI receptionist on a client's website or WhatsApp number, the conversation may include a name, phone number, email address, reason for contact and preferred appointment time. This information may reveal health-related details (for example, a dental appointment). We process it only on the client's instructions, to book, reschedule or cancel appointments, record leads, and send alerts to the client. Clients must give visitors their own privacy notice and tell them they are talking to an AI (see our AI notice). We ask clients to configure the service to collect only what is needed. Visitors should not enter payment card numbers, government ID numbers or detailed medical information into the chat.

5. Who we share data with

We use service providers to run our business and the services we build. They are listed on our subprocessors page. We do not sell personal data and we do not share it for advertising. We may disclose data if the law requires it, to protect rights and safety, or in a sale or restructuring of our business (with notice to you where required).

6. International transfers

We are based in India, and our providers operate in several countries. When personal data from the UK, EU/EEA, Switzerland or other regions with transfer rules is processed outside those regions, we rely on the safeguards that apply, such as adequacy decisions, standard contractual clauses or the provider's certified transfer mechanism. Contact us for details.

7. Security

We use access controls, separate accounts for each tool, encrypted connections (HTTPS) and limit who can see client data. No online service is perfectly secure. If a breach affects personal data we are responsible for, we will notify the people and authorities required by law without undue delay. For client services, we notify the client so they can meet their own duties.

8. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, the UAE PDPL, Australia's Privacy Act, New Zealand's Privacy Act, California's CCPA/CPRA, Canada's PIPEDA, Singapore's PDPA or India's DPDP Act) you may have the right to:

Email info@aibotlab.in to use these rights. We may ask you to confirm your identity, and we aim to respond within 30 days. If your data sits in a client's AI receptionist, we will pass your request to that client, who decides how to respond.

California residents: we do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we do not use it for cross-context behavioural advertising.

9. Children

Our website and services are for businesses and are not directed at children under 16. We do not knowingly collect their data for our own purposes. If you think a child has sent us personal data, tell us and we will delete it.

10. Grievance contact (India)

Grievance contact for the purposes of Indian law: Priyesh Pranjal, AIBotLab, info@aibotlab.in. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

11. Changes

We will update this page when our practices change and change the date at the top. For material changes affecting clients we will also tell them by email.

12. Automated processing

The AI receptionists we build process messages automatically to answer questions and manage bookings. They do not make decisions that have legal or similarly significant effects on people. A person at the business makes those decisions. You can ask the business, or us, for human review of any interaction.

13. Additional information for California residents

In the last 12 months we collected the following categories of personal information through this website and our business contacts: identifiers (name, email address, phone number); commercial information (the service a business is interested in); and professional information (business name and country). We collect them directly from you, to reply to your request, deliver contracted services and keep business records. We disclose them to the service providers listed on our subprocessors page. We do not sell or share personal information, and we do not knowingly collect personal information of consumers under 16. You may request to know, delete or correct your information, and you will not be treated differently for doing so (see section 8). An authorised agent may make a request for you with your written permission.

14. Overseas recipients and our representatives

Our team is in India. Personal data may be processed by our providers in India, the United States, the European Union and other countries (see subprocessors). If you are in Australia, this means information may be disclosed to overseas recipients, and we take reasonable steps to make sure they handle it in line with your local privacy law. If a law requires us to appoint a local representative or data protection officer where you live, we will list them on our business details page. Until then, send any request to info@aibotlab.in.