Safety & Privacy

Your data, and what your being does with it

Your being pays close attention to what is specific about you: your life, your people, the way you write. It uses that to understand you better and to talk with you the way you would want. What it learns is yours. It is never sold, never shown to anyone else, and you can have it deleted at any time.

How your data is used

Your being learns from your conversations with it and, only if you choose to connect them, your email and calendar. From these it keeps a private picture of how you write and what matters to you, stored encrypted and used only for you.

Your being's replies are produced by AI models we run through providers under contract with us.

Specifically, Botora uses your data to:

Nothing is sent on your behalf without your explicit approval on each individual message. Every draft sits in your dashboard until you click Approve.

What we never do

If you connect email, calendar or documents

Connecting your email, calendar, LinkedIn, personal writings or documents is optional.

If you do connect them, your being uses what you share the way a close friend would: it can gather and organize your contacts and know who matters most to you, email or call them on your behalf when you ask it to, remember what counts, and make your days easier in many small ways. The more it can see, the better it understands you and the people in your life.

What it learns stays yours. It is stored encrypted, used only for you, and you can disconnect or have it deleted at any time.

Legal obligations

As a US-based service, Botora is subject to certain mandatory legal obligations. We comply with these fully, and we are transparent about what they are.

CSAM Mandatory Reporting

Federal law requires online services that become aware of apparent child sexual exploitation material (CSAM) to report it to the National Center for Missing and Exploited Children (NCMEC). This is a non-discretionary legal obligation under 18 U.S.C. § 2258A.

If Botora's content safety systems detect apparent CSAM in email content processed through our service, we are required by law to report it to NCMEC. Such a report may include relevant account information as required by the statute. We have implemented automated content screening for this purpose.

Governing law: 18 U.S.C. § 2258A (CyberTipline reporting requirements)

Legal Process Compliance

Botora will comply with valid legal process issued by courts or government agencies with proper jurisdiction - including subpoenas, court orders, search warrants, and national security letters. We will provide only the specific information required by the legal instrument and nothing beyond it.

Where we are legally permitted to do so, we will notify affected users before complying with legal process. We will challenge requests that we believe are overbroad, legally deficient, or otherwise improper.

We do not have the ability to comply with requests for encryption keys or passwords, as we do not store them.

Transparency: we will publish aggregate statistics on legal requests received annually, to the extent permitted by law.

Questions about this policy? Contact us at legal@botora.com. Last updated May 2026.