Compliance Page

International Data Rights

Effective date: 24 August 2026

All Jurisdictions

Supplements the main Privacy Policy  ·  SCCs per EU Commission Decision 2021/914

This page describes data-protection rights by jurisdiction. It supplements the Privacy Policy. International transfers of EU/UK personal data rely on the EU Standard Contractual Clauses (Commission Decision 2021/914) and equivalent mechanisms (Section 2.2).

1

Overview and Our Role

BOTVEE (PRIVATE) LIMITED operates globally from Pakistan and seeks to respect applicable data-protection laws in each jurisdiction it serves. Botvee acts as a controller for its customers' account data and website visitors, and as a processor for the End-User data that customers' AI agents collect (governed by the DPA). Where Botvee is a processor, End-User rights requests should be directed to the relevant customer (the controller); the customer's owner/admin can action erasure within their workspace, and Botvee assists as required.

2

EU Users — GDPR (Regulation 2016/679)

2.1 Your rights

ArticleRightDescriptionTarget
Art. 15AccessA copy of the personal data we hold30 days
Art. 16RectificationCorrect inaccurate or incomplete data30 days
Art. 17ErasureDelete data, subject to legal retention obligations30 days
Art. 18RestrictionFreeze your workspace — we keep your data and you can still view and export it, but we stop processing it otherwise, while a dispute or objection is resolved30 days
Art. 20PortabilityA single machine-readable (JSON) export of your workspace — account, agents and their configuration, uploaded knowledge base, conversations, leads, contacts, bookings, orders and invoices — so you can take it elsewhere30 days
Art. 21ObjectObject to legitimate-interest processing or marketing30 days / marketing stopped promptly
Art. 22Automated decisionsHuman review of any decision producing legal or similarly significant effects, where applicable30 days
Art. 77ComplaintLodge a complaint with your national supervisory authority (Section 2.4)

2.2 Transfer safeguards

For transfers of EU/UK personal data to Sub-Processors in countries not recognised as adequate, Botvee relies on: the SCCs (Commission Decision 2021/914)Module 2 (Controller-to-Processor) between our customer and Botvee and Module 3 (Processor-to-Sub-Processor) between Botvee and its Sub-Processors, where applicable; Transfer Impact Assessments where required; and supplementary measures such as AES-256 encryption and strict access controls. Providers are listed at Sub-Processors.

2.3 DPA for business clients

If you use Botvee to process the personal data of EU, UK, or Swiss residents, GDPR Art. 28 requires a DPA between you (controller) and Botvee (processor). Request at botvee.ai/dpa or email legal@botvee.ai.

2.4 EU supervisory authorities

You may lodge a complaint with your national supervisory authority (directory at edpb.europa.eu). We encourage contacting privacy@botvee.ai first.

3

UK Users — UK GDPR & Data Protection Act 2018

All rights above apply equally under the UK GDPR. UK transfers rely on the UK IDTA or the UK Addendum to the EU SCCs. UK supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk.

4

California Users — CCPA / CPRA

RightDescriptionHow to exerciseTimeframe
Right to knowWhat personal information is collected, used, disclosedprivacy@botvee.ai45 days
Right to deleteDelete personal information, subject to exceptionsprivacy@botvee.ai45 days
Right to correctCorrect inaccurate personal informationprivacy@botvee.ai45 days
Opt out of sale/sharingBotvee does not sell or “share” personal informationNot applicable
Limit sensitive personal informationNot applicable — Botvee does not collect sensitive personal information
Non-discriminationNo discrimination for exercising your rightsAutomaticOngoing

Authorised-agent requests are accepted with written proof of authorisation.

5

Canada Users — PIPEDA

Data is collected, used, and disclosed only for appropriate purposes and, where required, with knowledge and consent. You have rights to access, to challenge accuracy and have information corrected, to withdraw consent (which may affect our ability to provide certain features), and to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

6

Pakistan — Applicable Law

Botvee is incorporated in Pakistan and operates under, among others, the Constitution (Art. 14), PECA 2016, the ETO 2002, and the Income Tax Ordinance, 2001. Botvee voluntarily seeks to follow the principles of the Personal Data Protection Bill as and when enacted. Relevant authorities include the FIA Cybercrime Wing, the PTA, and PKCERT.

7

Other Jurisdictions (Including Turkey, UAE, and Elsewhere)

For users in countries not specifically listed above — including, for example, Turkey (KVKK, Law No. 6698) and the UAE (Federal Decree-Law No. 45 of 2021, and the DIFC/ADGM data-protection laws where applicable) — Botvee applies these minimum protections, drawing on ISO/IEC 29100 privacy principles, the OECD Privacy Guidelines, and UN Resolution 68/167: the right to access personal data, correct inaccuracies, request deletion (subject to legal limits), object to direct marketing, and receive clear information about processing. Where Botvee acts as a processor, the customer (as data controller) is responsible for compliance with the data-protection, registration, consent, and cross-border-transfer requirements applicable in the customer's own jurisdiction and in the jurisdictions of its End-Users. Where local law provides stronger rights, those rights prevail.

8

How to Make a Rights Request

  1. Email privacy@botvee.ai — subject "Data Rights Request — [Jurisdiction] — [Account Email]".
  2. State the right(s) you wish to exercise.
  3. Provide your full name and account email.
  4. We may require reasonable identity verification.
  5. We acknowledge within a reasonable time and respond within the period required by applicable law (generally 30 days; 45 days for CCPA; extendable where the law permits for complex or numerous requests, in which case we will inform you). No charge applies unless a request is manifestly unfounded, excessive, or repetitive.
9

Contact

Legal / DPA

legal@botvee.ai

Phone / WhatsApp

+92 319 3981020

Company

BOTVEE (PRIVATE) LIMITED

Postal

Ward No. 3, Near Government Boys High School, Golarchi, District Badin, Sindh 72220, Pakistan

BOTVEE (PRIVATE) LIMITED