Roles
You are the controller. TheBigBot LLC is the processor and processes personal data only on your documented instructions, which are your use and configuration of the service.
Processing details
| Subject matter | Hosting and displaying widgets, collecting submissions, storing conversion data and statistics |
|---|---|
| Duration | The term of your account plus deletion periods |
| Data subjects | Visitors to your websites, your customers and leads |
| Personal data | Names, emails, phone numbers, city or country, IP-derived location, form fields you choose to collect or send, interaction events |
| Special categories | Not intended; do not collect them with widgets |
Our obligations
- Confidentiality of personnel with access.
- Appropriate technical and organisational security measures (HTTPS, access controls, hashed credentials, backups, logging).
- Assistance with data subject requests and data protection impact assessments, where reasonable.
- Notification of a personal data breach without undue delay.
- Deletion or return of personal data at the end of the service, subject to legal retention.
- Information needed to demonstrate compliance, on request.
Sub-processors
| Provider | Purpose |
|---|---|
| TheBigBot LLC infrastructure (dedicated servers) | Hosting the app and database |
| Cloudflare, Inc. | Network delivery and security |
| Stripe, Inc. | Payments (account holders only) |
We will announce new sub-processors on this page; you may object for reasonable data protection grounds.
International transfers
Data may be processed in the United States. Where required, transfers rely on the EU Standard Contractual Clauses (and the UK addendum), which are incorporated by reference.
Your obligations
You are responsible for having a lawful basis for the data you collect or send, informing your visitors, obtaining consent where required and configuring retention suitably.
Signed copy
Need a countersigned DPA? Contact us with your company details.
