This Privacy Policy explains what information BotForge ("we", "us", "the platform") collects when you use our WhatsApp bot hosting service at bwmxmd.com, how we use it, and the choices you have.
Account information: username, email address, and password (stored as a one-way hash — we never store your plain-text password). If you sign up or log in with Google or GitHub, we receive your name, email, and a profile ID from that provider instead.
Bot configuration: the WhatsApp owner number, bot name, command prefix, and feature toggles (anti-link, auto-reply, auto view-status) you set for each bot you deploy.
WhatsApp session data: when you pair a bot, WhatsApp's linked-device protocol generates session credentials that let the bot stay connected on your behalf. These are stored on our server for as long as the bot exists, and are never shared with anyone but you.
Payment information: top-ups are processed by Paystack. We receive confirmation that a payment succeeded and the amount — we do not receive or store your card number, M-PESA PIN, or other payment credentials; Paystack handles those directly.
Usage data: basic server logs (IP address, timestamps, request paths) for security and troubleshooting.
We do not sell your personal information, and we do not use your data for advertising.
We rely on the following third parties to operate BotForge. Each processes a limited slice of your data under their own privacy policy:
Data is stored on our own server infrastructure. We use industry-standard practices — password hashing, HTTPS encryption in transit, and access controls — to protect your information. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable steps to protect your data against unauthorized access.
We retain your account and bot data for as long as your account is active. If you delete a bot, its WhatsApp session data is removed. If you close your account, we delete your personal data within a reasonable period, except where we're required to retain records (e.g. transaction history) for legal or accounting purposes.
Depending on where you're located, you may have rights to access, correct, or delete your personal data, including under Kenya's Data Protection Act, 2019. To exercise these rights, contact us using the details below.
We don't use tracking or advertising cookies. Your login session is stored in your browser's local storage as a security token, which keeps you signed in — it isn't used to track you across other sites.
BotForge is not directed at children. You must be old enough to enter a binding agreement in your jurisdiction to use this service.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this policy? Reach us at privacy@bwmxmd.com.