International Data Rights
Effective date: 24 August 2026
|All Jurisdictions
Supplements the main Privacy Policy · SCCs per EU Commission Decision 2021/914
This page describes data-protection rights by jurisdiction. It supplements the Privacy Policy. International transfers of EU/UK personal data rely on the EU Standard Contractual Clauses (Commission Decision 2021/914) and equivalent mechanisms (Section 2.2).
Overview and Our Role
BOTVEE (PRIVATE) LIMITED operates globally from Pakistan and seeks to respect applicable data-protection laws in each jurisdiction it serves. Botvee acts as a controller for its customers' account data and website visitors, and as a processor for the End-User data that customers' AI agents collect (governed by the DPA). Where Botvee is a processor, End-User rights requests should be directed to the relevant customer (the controller); the customer's owner/admin can action erasure within their workspace, and Botvee assists as required.
EU Users — GDPR (Regulation 2016/679)
2.1 Your rights
| Article | Right | Description | Target |
|---|---|---|---|
| Art. 15 | Access | A copy of the personal data we hold | 30 days |
| Art. 16 | Rectification | Correct inaccurate or incomplete data | 30 days |
| Art. 17 | Erasure | Delete data, subject to legal retention obligations | 30 days |
| Art. 18 | Restriction | Freeze your workspace — we keep your data and you can still view and export it, but we stop processing it otherwise, while a dispute or objection is resolved | 30 days |
| Art. 20 | Portability | A single machine-readable (JSON) export of your workspace — account, agents and their configuration, uploaded knowledge base, conversations, leads, contacts, bookings, orders and invoices — so you can take it elsewhere | 30 days |
| Art. 21 | Object | Object to legitimate-interest processing or marketing | 30 days / marketing stopped promptly |
| Art. 22 | Automated decisions | Human review of any decision producing legal or similarly significant effects, where applicable | 30 days |
| Art. 77 | Complaint | Lodge a complaint with your national supervisory authority (Section 2.4) | — |
2.2 Transfer safeguards
For transfers of EU/UK personal data to Sub-Processors in countries not recognised as adequate, Botvee relies on: the SCCs (Commission Decision 2021/914) — Module 2 (Controller-to-Processor) between our customer and Botvee and Module 3 (Processor-to-Sub-Processor) between Botvee and its Sub-Processors, where applicable; Transfer Impact Assessments where required; and supplementary measures such as AES-256 encryption and strict access controls. Providers are listed at Sub-Processors.
2.3 DPA for business clients
If you use Botvee to process the personal data of EU, UK, or Swiss residents, GDPR Art. 28 requires a DPA between you (controller) and Botvee (processor). Request at botvee.ai/dpa or email legal@botvee.ai.
2.4 EU supervisory authorities
You may lodge a complaint with your national supervisory authority (directory at edpb.europa.eu). We encourage contacting privacy@botvee.ai first.
UK Users — UK GDPR & Data Protection Act 2018
All rights above apply equally under the UK GDPR. UK transfers rely on the UK IDTA or the UK Addendum to the EU SCCs. UK supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk.
California Users — CCPA / CPRA
| Right | Description | How to exercise | Timeframe |
|---|---|---|---|
| Right to know | What personal information is collected, used, disclosed | privacy@botvee.ai | 45 days |
| Right to delete | Delete personal information, subject to exceptions | privacy@botvee.ai | 45 days |
| Right to correct | Correct inaccurate personal information | privacy@botvee.ai | 45 days |
| Opt out of sale/sharing | Botvee does not sell or “share” personal information | Not applicable | — |
| Limit sensitive personal information | Not applicable — Botvee does not collect sensitive personal information | — | — |
| Non-discrimination | No discrimination for exercising your rights | Automatic | Ongoing |
Authorised-agent requests are accepted with written proof of authorisation.
Canada Users — PIPEDA
Data is collected, used, and disclosed only for appropriate purposes and, where required, with knowledge and consent. You have rights to access, to challenge accuracy and have information corrected, to withdraw consent (which may affect our ability to provide certain features), and to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Pakistan — Applicable Law
Botvee is incorporated in Pakistan and operates under, among others, the Constitution (Art. 14), PECA 2016, the ETO 2002, and the Income Tax Ordinance, 2001. Botvee voluntarily seeks to follow the principles of the Personal Data Protection Bill as and when enacted. Relevant authorities include the FIA Cybercrime Wing, the PTA, and PKCERT.
Other Jurisdictions (Including Turkey, UAE, and Elsewhere)
For users in countries not specifically listed above — including, for example, Turkey (KVKK, Law No. 6698) and the UAE (Federal Decree-Law No. 45 of 2021, and the DIFC/ADGM data-protection laws where applicable) — Botvee applies these minimum protections, drawing on ISO/IEC 29100 privacy principles, the OECD Privacy Guidelines, and UN Resolution 68/167: the right to access personal data, correct inaccuracies, request deletion (subject to legal limits), object to direct marketing, and receive clear information about processing. Where Botvee acts as a processor, the customer (as data controller) is responsible for compliance with the data-protection, registration, consent, and cross-border-transfer requirements applicable in the customer's own jurisdiction and in the jurisdictions of its End-Users. Where local law provides stronger rights, those rights prevail.
How to Make a Rights Request
- Email privacy@botvee.ai — subject "Data Rights Request — [Jurisdiction] — [Account Email]".
- State the right(s) you wish to exercise.
- Provide your full name and account email.
- We may require reasonable identity verification.
- We acknowledge within a reasonable time and respond within the period required by applicable law (generally 30 days; 45 days for CCPA; extendable where the law permits for complex or numerous requests, in which case we will inform you). No charge applies unless a request is manifestly unfounded, excessive, or repetitive.
Contact
Privacy
Legal / DPA
Phone / WhatsApp
+92 319 3981020
Company
BOTVEE (PRIVATE) LIMITED
Postal
Ward No. 3, Near Government Boys High School, Golarchi, District Badin, Sindh 72220, Pakistan
BOTVEE (PRIVATE) LIMITED