Privacy Policy

1. Who we are

BlessBot is operated by PT Berkah Fermentasi Alami (brand: Blessverage), an Indonesian fermented-foods company. We are the data controller for the personal data you provide through BlessBot. To reach us about your data, message us on WhatsApp at +62 815-1707-1079.

2. What we collect

• Google sign-in — when you sign in with Google we receive your name, email address, and Google account ID. We never receive your Google password.
• Profile you give us — your WhatsApp number (required), and optionally your name, age, gender, and Instagram handle.
• Chat content — the messages you send to BlessBot and the replies it generates. You may choose to mention health details while chatting (see §5) — share only what you're comfortable with.
• Technical metadata — IP address, browser/user-agent, and timestamps.
• Cookies — bb_session (keeps you signed in) and, only if you choose to verify your number, bb_verify (15 minutes). See §8.

BlessBot is intended for users aged 13 and over. We don't knowingly collect data from children under 13.

3. Why we use it

• To run the AI consultation — your messages are processed by a third-party AI service to generate replies (see §4).
• To sign you in and keep you signed in, and — if you choose — to verify your WhatsApp number so we can raise your daily message limit.
• To let our team follow up with you on WhatsApp about gut health and our products, if you agreed when you signed up.
• To prevent abuse and keep the service secure (e.g. rate limits).
• To improve BlessBot — we review and analyse chats to fix problems and make its answers better. These chats are linked to your account (they are not anonymous). We keep this use first-party: we never sell your data or share it for advertising.

4. Who processes your data

• Google — used only to sign you in (Google Sign-In).
• AI service — your chat messages are sent to a third-party AI service that generates the replies. It processes them only to produce your reply, does not train its models on them, and does not retain them under our agreement. This service operates outside Indonesia, so your messages are processed abroad.
• Hosting — our servers are hosted with idCloudHost in Indonesia.
• We do not sell your personal data, and we do not use third-party advertising or tracking.

5. Health-related information

Because BlessBot discusses gut health, your chats may include health-related details. Under Indonesia's Personal Data Protection Law these count as sensitive data. Sharing any such detail is entirely optional — by choosing to send it, you consent to us processing it to answer you and to improve BlessBot (see §3). Please don't share government IDs, financial details, or medical records.

6. How long we keep it

Account info and chat history are kept while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal reasons (e.g. tax records for orders).

7. Your rights

Under Indonesia's Personal Data Protection Law (UU PDP 27/2022), you can:

• Ask for a copy of the personal data we hold on you.
• Ask us to correct or update it.
• Ask us to delete it (subject to legal retention requirements).
• Withdraw consent to marketing messages at any time.
• Revoke BlessBot's access to your Google account (from your Google account settings).

To exercise any of these, message us on WhatsApp at +62 815-1707-1079.

8. Cookies

We use only the cookies required to operate the service:

• bb_session — keeps you signed in for 30 days. HttpOnly, SameSite=Lax.
• bb_verify — short-lived (15 min), used only if you choose to verify your WhatsApp number.

We do not use third-party tracking or advertising cookies.

9. Security

Traffic is encrypted in transit (HTTPS). Data is stored on access-controlled servers. No system is perfectly secure — we'll notify affected users if a breach materially affects them.

10. Changes

If we change this policy, we'll update the date at the top. Material changes will be flagged on the landing page or in chat.