Privacy Policy

Bothub, a product of CUI Labs Pte. Ltd. (“we”, “our”, “us”), operates the website bothub.techand related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data.

This policy is issued in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and, to the extent applicable to residents of the European Economic Area (EEA) and United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR. For California residents, we also respect applicable rights under the CCPA.

1. Data We Collect

• Account data — email address, display name, avatar, company name, and preferences when you register.
• Agent submission data — information you provide when listing an AI agent (name, description, website, pricing, etc.).
• Usage data — pages visited, search queries, filters applied, and interactions within the Service, collected via server logs and analytics.
• Payment data — subscription and payment information is processed by Stripe. We do not store full card details.
• Communications — emails and messages you send us.
• Cookies and tracking — see Section 6 below.

2. How We Use Your Data

• Provide, operate, and improve the Service.
• Authenticate your account and process subscriptions.
• Send transactional emails (e.g., agent approval notifications, claim updates).
• Send optional product and marketing updates (you may opt out at any time).
• Detect fraud, abuse, and security incidents.
• Comply with legal obligations.
• Generate aggregated, anonymised analytics to improve directory quality.

Legal bases (GDPR): contract performance, legitimate interests, legal obligation, and consent (for marketing communications and non-essential cookies).

3. Data Sharing

We do not sell your personal data. We share data only with:

• Neon and managed PostgreSQL infrastructure — database and account/session infrastructure.
• Stripe — payment processing.
• Vercel — hosting, edge functions, and Blob object storage.
• Transactional email providers — for sending system emails.
• Law enforcement or regulators — when required by applicable law.

All third-party processors are contractually obligated to handle personal data in accordance with applicable data protection law.

4. Data Retention

We retain personal data for as long as your account is active, or as necessary to provide the Service and comply with legal obligations. Upon account deletion, personal data is anonymised or deleted within 90 days, except where retention is required by law.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time (without affecting prior lawful processing).
• Singapore PDPA: withdraw consent to collection, use, or disclosure with reasonable notice.

To exercise your rights, email privacy@bothub.tech. We will respond within 30 days (or as required by applicable law).

6. Cookies and Tracking

We use the following categories of cookies and similar technologies:

• Strictly necessary — session authentication cookies and CSRF protection. These are essential for the platform to function and cannot be disabled.
• Functional — theme preference, cookie consent choice, UI state. These improve your experience but are not required.
• Analytics — PostHog (self-hosted analytics). Collects anonymised page-view and interaction data to help us improve the platform. Only activated with your consent. We use identified-only mode with no autocapture.
• Marketing — we do not currently use marketing, advertising, or third-party tracking cookies.

Specific cookies we set:

• bothub_session — Bothub authentication session (strictly necessary, httpOnly)
• bothub_cookie_consent — Your cookie preference choice (functional, localStorage)
• ph_* — PostHog analytics identifier (analytics, requires consent)

You can manage cookie preferences through our cookie consent banner displayed on your first visit, or by clearing your browser's local storage and cookies at any time. Choosing “Essential Only” disables analytics tracking while preserving core platform functionality.

7. International Data Transfers

Your data may be stored and processed in servers located in the United States, European Union, or other jurisdictions where our service providers operate. Where data is transferred outside of Singapore or the EEA, we ensure adequate safeguards are in place (including Standard Contractual Clauses or equivalent mechanisms).

8. Security

We implement industry-standard technical and organisational measures to protect your personal data, including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security reviews. No transmission over the internet is 100% secure; you use the Service at your own risk.

9. Children

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@bothub.tech.

9. Bothub Markets — Simulated Data

When you use Bothub Markets, we collect and store simulated portfolio data including portfolio names, simulated positions, simulated order history, and simulated capital balances. This data is used solely to operate the simulation feature and display leaderboards.

Simulated portfolio data is not financial data and does not represent real assets, transactions, or account balances. Public portfolios (where you opt in) may be visible to other users on the leaderboard. You can delete your portfolios at any time from your account settings.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email (if you have an account) or by a prominent notice on the Service. Continued use after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries, please contact:
Email: privacy@bothub.tech
Website: bothub.tech