Cookie Policy
Effective Date: September 9, 2026
Last Updated: September 9, 2026
Version: 2
This Cookie Policy explains how Bot B2B, Inc. ("BotB2B", "we", "us") uses cookies and similar technologies on https://botb2b.ai (the "Website") and in the BotB2B application at https://app.botb2b.ai (the "App"). It supplements our Privacy Policy.
Summary (not part of the contract). The Website uses strictly necessary cookies, product and web analytics (Amplitude, Google Analytics) and advertising tags (Google Ads, Meta) that measure our campaigns and show our ads to people who visited us. In the United States, most of Canada, Mexico and Argentina these run by default and you can switch them off with "Cookie settings" or "Do Not Sell or Share"; in Quebec, Brazil, the rest of Latin America, Europe and everywhere else they run only after you click "Accept all". Your choice is remembered for 12 months. The App uses cookies to keep you signed in and product analytics to improve the product; if advertising cookies are allowed for you, the App also tells Meta when someone who came from our ads signs up or pays, so that we can see which ads bring customers. The same choice applies on the Website and in the App.
1. What cookies and similar technologies are
Cookies are small text files that a website stores on your device. Similar technologies include browser local storage and session storage, pixels (tiny images or scripts that report a page view or an event), software development kits in apps, and server-side event forwarding (for example a "conversions API" that sends an event about a sign-up from our server to an advertising partner). We use the word "cookies" for all of them.
2. Categories we use
| Category | What it does | Consent model |
|---|---|---|
| Strictly necessary | Sign-in, security, fraud prevention, load balancing, remembering your cookie choice and language, attributing sign-ups to campaigns and partners (first-party) | Always on |
| Product analytics | Understanding how the Website and the App are used, which features work and where errors happen (Amplitude) | Website: by region (Section 4); App: part of the service, disclosed in the Privacy Policy |
| Web analytics | Visits, pages, traffic sources and conversions on the Website (Google Analytics 4) | By region (Section 4) |
| Advertising | Measuring our advertising campaigns, including sign-ups and purchases in the App by people who came from our ads, and showing our ads to Website visitors on Google, Facebook and Instagram (Google Ads, Meta Pixel and Conversions API) | By region (Section 4), one choice for the Website and the App; opt-out at any time |
We do not run third-party advertising networks on the Website, we do not sell data, and advertising tags never receive the content of your Workspace.
3. Cookies and tags we use
| Name (examples) | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
botb2b_consent | BotB2B (first-party cookie for botb2b.ai and its subdomains) | Remembers your choice in the cookie banner or settings, or the default for your region until you choose, so that the App follows the same choice | Strictly necessary | 12 months |
Campaign and partner parameters (utm_*, ref) | Website (URL only) | The campaign or partner code in the link you followed is carried in the page address while you browse and is recorded when you sign up, so that sign-ups are attributed and partner rewards are paid. It is not stored in a cookie. | Strictly necessary (first-party attribution, not shared with advertisers) | Not stored in your browser |
| Locale and interface preferences | Website and App | Language and display preferences | Strictly necessary | 12 months |
| Authentication tokens (access and refresh) | App | Keep you signed in securely; protect against cross-site request forgery | Strictly necessary | Access: 15 minutes; refresh: 15 days |
_GRECAPTCHA | Google LLC, on sign-up and public chat pages | Distinguishes people from bots | Strictly necessary (security) | 6 months, under Google's privacy policy |
__stripe_mid, __stripe_sid | Stripe, Inc., on checkout pages | Fraud prevention and payment processing | Strictly necessary (payments) | 1 year; 30 minutes |
AMP_*, amplitude_* | Amplitude, Inc. | Product analytics: pseudonymous device ID, session, events | Product analytics | 12 months |
_ga, _ga_* | Google LLC (Google Analytics 4) | Web analytics: visitor and session identifiers | Web analytics | 2 years |
_gcl_*, IDE, test_cookie | Google LLC (Google Ads) | Conversion measurement and remarketing | Advertising | _gcl_*: 90 days; IDE: 13 months |
_fbp, _fbc; Meta Pixel and Conversions API events | Meta Platforms, Inc., on the Website and in the App | Conversion measurement and remarketing on Facebook and Instagram | Advertising | 90 days |
Advertising partners may receive, in addition to cookie identifiers, the pages and events you trigger (for example "sign-up completed") and, for conversion matching, a hashed version of the email address you used to sign up. They process this data as independent controllers under their own privacy policies (Google: policies.google.com/privacy; Meta: facebook.com/privacy/policy). For visitors from U.S. states that require it, we enable Meta's "Limited Data Use" and Google's restricted data processing.
4. Consent by region
We determine your region from your IP address (and, once you are signed in, from your Account's country).
- United States. No banner is shown. Analytics and advertising cookies are set when you visit, as permitted by U.S. law. You can turn them off at any time through Cookie settings in the footer or through Do Not Sell or Share My Personal Information (the same control), and we honor the Global Privacy Control signal as an opt-out of advertising cookies and of "sharing" for the browser that sends it.
- Canada (except Quebec), Mexico and Argentina. A notice banner informs you that analytics and advertising cookies are used; they are set when you visit, and you can turn them off in Cookie settings at any time with immediate and lasting effect. In Canada we send sign-up conversion data (a hashed email address) to advertising partners only if you tick the separate box at sign-up.
- Quebec, Brazil, Chile, Colombia, Peru, Uruguay, Ecuador, Central America and the Caribbean, the European Economic Area, the United Kingdom, Switzerland and all other countries. Only strictly necessary cookies are set when you visit; analytics and advertising cookies are set after you click Accept all in the banner, and Essential only (equally easy) keeps just the strictly necessary cookies. Nothing is pre-selected and you can use the Website whichever you choose. In Brazil, aggregated audience measurement without profiling may run on the basis of our legitimate interest, with an opt-out in Cookie settings.
- Everywhere: your choice is remembered for 12 months and can be changed in Cookie settings; if you are signed in, it is also saved in your Account so that it applies on all your devices.
5. Cookies in the App
The App uses strictly necessary cookies (sign-in, security) and product analytics (Amplitude) to understand feature usage and errors; this analytics is part of operating the service and is described in the Privacy Policy.
The App also uses the Meta Pixel to measure which of our ads bring customers. It loads only if advertising cookies are allowed for your browser under Section 4: after you click Accept all in regions where consent is required, or by default in the United States, Canada (except Quebec), Mexico and Argentina unless you switched advertising off or your browser sends Global Privacy Control. If we cannot tell what you chose (for example you never visited the Website in this browser), the Meta Pixel does not load in the App. It sends only these events with Meta's cookie identifiers: page views, sign-up completed and purchase completed (order number, amount and currency). Meta may use these events to measure our ads and to optimize their delivery. The App never sends Workspace content, messages, contacts, Customer Data or your email address to advertising partners through the pixel.
Your choice in Cookie settings on the Website applies to the App in the same browser.
6. Cookies in the chat widget on customers' websites
Our customers can embed a BotB2B chat widget on their own websites. The widget stores a visitor identifier in the visitor's browser (local storage) so that the conversation continues across pages. The customer that operates the website is responsible for informing its visitors and, where required, obtaining consent. The identifier is not used by BotB2B to track visitors across different websites, and no advertising tags are loaded through the widget.
7. Your choices
- Cookie settings / Do Not Sell or Share link in the footer of the Website: switch categories on or off at any time; the choice also applies to the App.
- Browser settings: you can block or delete cookies; blocking strictly necessary cookies will prevent sign-in and payment.
- Global Privacy Control: honored as described in Section 4.
- Advertising partners' controls: Google Ads Settings (adssettings.google.com), Meta Ad Preferences.
8. Changes
We update this policy when our use of cookies changes. The version history is available on the documents pages.
9. Contact
Questions: [email protected]