# Privacy Policy — WebAvatar Widget

**Effective date:** 26 August 2026

This Privacy Policy explains how **Botnoi** collects, uses, and shares information when you use the **WebAvatar** Widget and related services.

By installing and using the Widget, you agree to the practices described in this policy.

---

## 1. Scope

This policy applies to the Chrome Widget "WebAvatar", the WebAvatar website and widget dashboard, and the backend services operated by us that the Widget connects to. It does not apply to third-party websites you visit or third-party services that the Widget connects to on your behalf (see Section 5).

## 2. Information we collect

The Widget collects the following categories of information. **Collection of most information begins only after you sign in and start a session**; the Widget does not collect data in the background on pages where you do not use it.

### 2.1 Account information
When you sign in (via Google account sign-in through our authentication flow), we receive:
- your email address,
- your display name and/or username,
- your photo URL (if provided by your account),
- a unique account identifier (UID),
- your credit balance for the service.

### 2.2 Conversation and session content
When you start a voice or text session:
- **Audio:** with your permission, the Widget captures microphone audio for the duration of a voice session and transmits it to the AI provider you are connected to (see Section 5). Audio is transmitted only while a call is active and is not used after the call for any purpose other than operating the service.
- **Text:** messages you send and responses you receive during a session.

### 2.3 Page content and browsing context (only when you use the assistant on a page)
The Widget's core function is to help you within the page you are viewing. When you ask the assistant for help with the current page:
- We **scan the structure and content of the current page** (buttons, links, forms, sections, text) and send that information to the AI provider to answer your request.
- With your explicit approval for each action (the approval dialog shown by the Widget), the assistant may **click elements, fill form fields (excluding password, payment, file, OTP and other sensitive fields, which are never touched), scroll, or navigate the current tab**. You may tick "Don't ask again for this domain" to store a device-local per-site approval preference (this is never synced); cross-site navigation still always asks.
- We receive the **URL/origin of the page** you are using the assistant on, to route the session correctly and for fraud/abuse prevention.

### 2.4 Usage, telemetry, and diagnostics
When you start a session, we collect limited technical and usage data:
- a randomly generated session identifier,
- your account identifier and the widget identifier used,
- session start/end times and duration,
- high-level usage metrics (provider used, token consumption, interruption count),
- basic device information (browser user-agent, screen resolution, network type),
- **a randomly generated installation identifier** ("hwid") stored in your browser's local storage. This is **not** a hardware identifier; it is a random UUID used to link usage to an installation for abuse prevention and service stability.

### 2.5 Data we do NOT collect
- We do not collect password, payment card, OTP, or authentication-secret field contents (the Widget refuses to interact with such fields).
- We do not read your browsing history beyond the current page's origin when you actively use the assistant.
- We do not collect data from pages where you have disabled the Widget or where it is not in use.

## 3. How we use information

We use the information described above to:
1. Provide, operate, and maintain the Widget and your account (sign-in, widget selection, credit billing);
2. Run voice and text AI sessions you start, including connecting to AI providers (Section 5);
3. Deliver the page-help features you request, including executing actions you approve;
4. Enforce session limits and prevent abuse, fraud, or security incidents;
5. Diagnose and fix technical issues;
6. Improve the service (using aggregated, non-identifying statistics).

We do **not** sell your personal information, and we do not use it for advertising.

## 4. Legal bases (for users in the EEA/UK)

Where applicable law requires a legal basis, we process information:
- to perform the contract with you (providing the Widget and sessions you start);
- with your consent (microphone capture, page scanning, and page actions you approve);
- for our legitimate interests (security, abuse prevention, service improvement), where your interests do not override ours.

## 5. Sharing with third parties

We share information only with the parties needed to provide the service:

| Party | Purpose | Data |
|---|---|---|
| **Firebase** | Hosting the Widget's backend, authentication, and database | Account info, session records, telemetry, conversation history |
| **AI service providers** (the provider configured for the widget you use, selected by the widget owner) | Processing your conversations (voice + text) and page-scan requests so the assistant can answer | Audio, text, scanned page content, page URL |
| **Real-time media infrastructure** (used by some providers for voice transport) | Transporting voice streams during a call | Audio during the call |
| **Stripe** | Processing credit purchases on the dashboard (separate from the Widget) | Payment data (processed by the provider, not by us) |
| **Cloudflare** | DNS and CDN | 

We do not share your data with any other third parties, except:
- where required by law or to protect rights/safety;
- in connection with a merger, acquisition, or sale of assets (with notice to you where required).

## 6. Retention

- **Authentication tokens:** stored in Chrome's secure Widget storage for the duration of your browser session; cleared when you sign out. ID tokens are short-lived; refresh tokens are retained only in the browser session storage and are cleared when you sign out.
- **Session/conversation records:** retained as long as needed to operate the service, enforce credits/billing, and prevent abuse, after which they are deleted or anonymized.
- **Telemetry:** retained for a maximum of 6 months, then deleted or aggregated.
- You may request deletion at any time (Section 9).

## 7. Security

- All data is transmitted over HTTPS/WSS (modern cryptography).
- The Widget runs no remotely hosted code; all Widget code is reviewed and packaged with the Widget.
- Credentials are stored in Chrome's per-Widget storage; content scripts never receive ID tokens.
- We restrict backend access to authorized personnel and review access logs.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

## 8. Children

The Widget is not directed to children under 13 (or the applicable minimum age in your jurisdiction) and we do not knowingly collect their data. If you believe a child has provided us data, contact us (Section 9) and we will delete it.

## 9. Your rights and choices

- **Disable the Widget:** use the popup toggle "Enable WebAvatar" or the per-site toggle; disabling stops all collection on affected pages.
- **Revoke microphone access:** use Chrome's site/Widget permission settings or end the call.
- **Page actions:** every click, form fill, and navigation requires your explicit approval via the Widget's confirmation dialog; you may deny any action. A per-site "Don't ask again for this domain" preference is stored only on this device and can be revoked at any time from the popup's "Reset per-site approvals" button.
- **Access, correction, deletion, portability, objection:** where provided by law (including GDPR/UK GDPR), you may exercise these rights by contacting us (below) or through your dashboard account settings.
- **Sign out / delete account:** sign out clears credentials from the Widget; contact us to delete your account and associated records.

## 10. International transfers

We may process and store data on servers located outside your country, including via our cloud providers. Where required, transfers are made using appropriate safeguards (e.g., Standard Contractual Clauses).

## 11. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top indicates the latest revision. Material changes will be highlighted in the Widget and/or by updating this page. Continued use after changes constitutes acceptance.

## 12. Contact

Questions or requests regarding this policy or your data:

- **Email:** admin@botnoigroup.com
- **Postal address:** 22 Asok Building, 253 Asok Montri Rd, Khlong Toei Nuea, Watthana, Bangkok 10110


## Browser assistant and conversation continuity (September 23, 2026)

During an active browser-extension assistant session, relevant rendered page text, structure, links, control states and ordinary form values can be sent to WebAvatar and the widget's configured AI provider to answer the user's questions and carry out requested actions. Microphone audio, conversation text, tool outcomes and usage information are processed for the call. Password, payment-credential and authentication-code fields are excluded from page tools. Page data is not collected for advertising or unrelated browsing analytics by these tools.

Chrome site access, consent to this processing, and permission to perform page actions are separate controls. The extension asks for processing consent before its first call. Ordinary-action approval can cover a short task or, at the user's choice, be remembered for an exact origin on this device. Remembered grants do not authorize consequential purchases, submissions, deletions or account changes. Review/revoke individual grants or reset all grants in the extension settings. Withdrawing processing consent there ends the call and clears saved action grants; the next call asks again. Existing older grants do not automatically gain these capabilities. Disabling navigation or ending the call stops assistant page actions.

An ordinary website embed can recover an interrupted conversation after navigation to the same widget on the same origin. Recovery context is bounded and expires after ten minutes; an opaque, single-use capability is held in the tab's session storage. The recovery expiry does not change retention of ordinary conversation/usage records described elsewhere in this policy. Extension calls instead use an offscreen session host, and stop on pages that already embed WebAvatar.

These browser-assistant data uses are limited to the prominently disclosed, user-facing assistant functionality, consistent with the Chrome Web Store User Data Policy including Limited Use. A remembered action approval never broadens the purposes for which page data is processed.