Skip to content

Legal

GDPR

How BotForge supports your obligations under the GDPR.

Last updated 4 September 2026

This is a template, not legal advice. It describes how the software actually behaves, which is the part we can state accurately. Before relying on it commercially, have a lawyer review it against your jurisdiction, your sub-processors and your real retention practice.

If you are established in the EU or UK, or serve people who are, you are the controller for the personal data your chatbots collect and we are your processor. This page describes what that means in practice.

Roles

For your account data — your name, email, billing details — we are the controller.

For your visitors' data — conversation transcripts, captured leads, technical context — you are the controller and we process it on your instructions. Our Data Processing Agreement sets out those instructions formally.

Lawful basis

We rely on contract necessity to run your account, and legitimate interests for security, fraud prevention and product improvement based on aggregate usage.

You are responsible for establishing a lawful basis for the visitor data your chatbots collect, and for telling visitors what you do with it. Your widget's greeting and your own privacy notice are the right places for that.

Data subject requests

You can export or delete workspace data yourself from within the product. If a visitor exercises their rights with you, you can find and delete their conversation and lead records directly, and we will help with anything the interface does not cover.

We respond to requests we receive directly about your visitors by referring them to you, as a processor should.

International transfers

Data may be processed outside the EEA, including by AI providers. Transfers rely on Standard Contractual Clauses. Ask us for the current list of sub-processors and their locations before you commit to a plan if this matters to your assessment.

Breach notification

If we become aware of a personal data breach affecting your data, we will notify you without undue delay and give you the information you need to meet your own 72-hour obligation.

Who we are and how to reach us

BotForge is operated by Onzira Labs Private Limited ("Onzira Labs", "we", "us"), a company incorporated in India (CIN U62011DL2025PTC447666, GSTIN 07AAECO7169F1Z8).

Registered office: 293, Lane-2, Westend Marg, Saket, New Delhi 110030, India.

Questions about this document: support@onzira.com or +91 7631 995 541.

Governing law

This document is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts of New Delhi, India, without prejudice to any mandatory consumer or data-protection rights you hold where you live.