Privacy Policy

1. Overview

PersonaBot ("we", "us", "our") operates the PersonaBot web platform and the PersonaBot Cookie Connector Chrome extension. This policy describes how we collect, use, and protect your data.

2. What We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture. This is used solely for authentication and displaying your account in the dashboard.

Session Cookies (via Chrome Extension)

When you click "Send Cookies" in our Chrome extension, we collect session cookies from instagram.com and/or fanvue.com. These cookies allow our AI bot to interact with your direct messages on your behalf. We do not collect your passwords.

Persona Configuration

You provide persona details (name, age, personality, etc.) to configure how the AI responds to messages. This is stored in our database and used only for generating replies.

Message Activity

Our bot processes incoming messages to generate replies. We log metadata (message counts, timestamps, error events) for monitoring purposes. We do not store the content of messages long-term.

3. Chrome Extension — Specific Disclosures

The PersonaBot Cookie Connector extension:

• Reads cookies from instagram.com and fanvue.com only when you explicitly click "Send Cookies"
• Does not run in the background or monitor your browsing
• Does not collect browsing history, form data, or passwords
• Does not modify any website content or inject scripts
• Authenticates using your existing PersonaBot session — no additional login required
• Sends cookies only to our server (personai-app.com) over HTTPS

4. How We Use Your Data

• Session cookies: to authenticate with Instagram/Fanvue APIs and send messages on your behalf
• Account info: to identify you and manage your subscription
• Persona data: to generate AI-powered replies matching your configured personality
• Activity logs: to show you bot status, message counts, and troubleshoot errors

5. Data Storage and Security

Your data is stored on servers hosted by Fly.io in North America. Session cookies are encrypted at rest. We use HTTPS for all data transmission. Access to production databases is restricted to the application only.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your cookies are used exclusively to operate the bot on your connected platforms. We use the following third-party services:

• Google OAuth — for authentication
• Stripe — for payment processing (we do not store card details)
• Fly.io — for hosting

7. Data Retention

Session cookies are stored as long as your platform account is connected. When you disconnect a platform, the associated cookies are permanently deleted. If you delete your PersonaBot account, all your data is removed.

8. Your Rights

You can at any time:

• Disconnect any platform (deletes stored cookies)
• Delete your entire account from Settings
• Uninstall the Chrome extension

9. Contact

For privacy questions or data requests, email us at support@personai-app.com.