Legal
Last updated: May 13, 2026
BotOrient, operated by Onae Group ("BotOrient," "we," "us," or "our"), provides an AI-powered robot orientation platform for businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using BotOrient, you agree to this policy.
When you create an account, we collect your email address and a hashed password (managed by Supabase Auth — we never see your plaintext password).
To generate your orientation package, you provide your business name, industry, robot model, team size, primary use case, and optional notes about your operation. This is the core content we use to generate your package.
If you upload a floor plan (Pro and Fleet plans), the image is stored in US-based Supabase Storage and sent to our AI provider for analysis. It is accessible only to your account.
When you save a business profile, we store additional context including company history, product/service descriptions, no-go zones, and generated orientation package content. This data is used to power your Robot API endpoint.
Payments are processed by Stripe. We do not store your credit card number, CVV, or full card details. We receive and store your Stripe customer ID and subscription status to manage your plan.
We track the number of orientation packages generated per billing period, generations used, and API endpoint access logs (timestamp, API key prefix, IP address). This data is used to enforce plan limits and monitor service health.
Our servers automatically record standard log data including IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and is not linked to individual profiles for marketing purposes.
We do not use your data to train AI models. We do not send marketing emails unless you explicitly opt in. We do not sell your data to third parties.
Orientation package generation and floor plan analysis are powered by Anthropic's Claude API. When you generate a package, your business information and (if uploaded) floor plan are sent to Anthropic for processing. Anthropic's usage policies prohibit training on API customer data. Your content is not used to train Anthropic's models.
Generated orientation package content is stored in our database and served through your Robot API endpoint. You own this content and can request deletion at any time.
We do not sell, rent, or trade your personal information. We share data only with the following subprocessors as necessary to provide the service, all operating primarily in the United States:
We may also disclose information when required by law, to protect the rights or safety of BotOrient or its users, or in connection with a merger, acquisition, or sale of assets (with notice provided to users).
All customer data is stored in the United States on AWS us-east-1 infrastructure via Supabase. Data is encrypted at rest using AES-256 and in transit using TLS 1.2 minimum (TLS 1.3 preferred). Database access is protected by row-level security — no user can access another organization's data.
Despite these measures, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@botorient.com.
We retain your account data and business profiles for as long as your account is active. Audit logs (emergency stop events, rule changes) are retained for a minimum of 12 months. If you cancel your account, your data is retained for 30 days before deletion to allow for reactivation, then permanently deleted upon request.
You have the right to access, correct, export, or delete your personal data at any time. To exercise any of these rights, email hello@botorient.com from your account email address. We respond to all requests within 30 days.
California residents have the right to know what personal information we collect and how it is used, request deletion of personal information, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising these rights.
If you are located in the European Economic Area or United Kingdom, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is performance of a contract (providing the service you signed up for) and legitimate interests. A Data Processing Agreement is available on request for government and enterprise customers.
BotOrient uses only functional cookies necessary for authentication (session tokens managed by Supabase Auth). We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behavior across websites.
BotOrient is a business software platform not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Continued use of BotOrient after changes take effect constitutes acceptance of the updated policy.
For privacy questions, data requests, or to report a concern: