Privacy Policy

This policy explains what botreeve — a product of Guten Group US Holdings, Inc. (“Guten Group”, “we”) — collects, why, who receives it, how long we keep it, and what you can do about it. It applies to botreeve.ai and the botreeve apps, and is part of the Terms of Service.

1. What we collect

• —Account information: your email address (or the private relay address Apple gives us if you choose to hide yours), your display name, and a salted hash of your password if you set one. If you sign in with Apple or Google we store that provider’s identifier for you, and the name and email it shares. We keep a sign-in token for each signed-in device (stored hashed on our side).
• —Your bots and what you tell them: the bots you create, their names, instructions and rules, and your conversations with them.
• —Connections: for each service you connect, the credential you give us or that the service issues — an access token, an API key, or, if you choose that option, a stored password and an optional two-factor seed — kept encrypted and scoped to your account. We also store which bot you allowed to use the connection, and what we read back from the service for you. For a Robinhood Financial LLC connection that is the account identifier, positions, balances, orders and fills; for a MetaApi trading account, balance, equity, margin, leverage, open positions, pending orders, closed deals and prices; for a Fysigo connection, programs, assignments and adherence (for a coach, their clients’ as well) and the text of any change a bot proposes, such as a supplement schedule.
• —Your own AI model key: if you bring your own key for an AI model, we store it encrypted.
• —Groups: the groups you create or join, your membership, the messages and cards you and your bots post, reports and blocks (see section 4).
• —Action and approval records: what a bot proposed or did through a connection, which rule or approval allowed it, and the outcome. This is an audit trail.
• —Plan and billing: your plan, its status and renewal dates, and the identifiers our payment processor assigns. Your card details go to the payment processor, not to us.
• —Usage counts: how much AI-model usage each bot and account consumes, so plan limits can be applied.
• —Sign-in security records: when you sign up or sign in we record the time, a one-way hash of your IP address, and your browser or device description, to detect abuse. We delete these after 180 days.
• —Mail and calendar items (Comms sweep): if you turn on the Comms sweep, the app reads your mail and invitations on your device under your own Google permission and sends us, for each item, its source, the time received, the title, an excerpt of at most 500 characters, a label for the sender’s role (never a name or address), and whether you spoke last. Our server does not connect to your mail itself.
• —Web search queries: what you ask a web-search bot is sent to the search and AI providers in section 3. Our server does not store the query.
• —Notification tokens: if you allow notifications, the token your device’s notification service gives us.
• —Support correspondence: anything you send to legal@guten.group.
• —On this website: if you join the waitlist we collect your email address, the the device type you pick, your IP address (used to limit abuse) and the time; if you ask us to delete your account from the web page, we collect the email address, your optional reason, your IP address and the time. Each is stored encrypted. Our website host also processes ordinary request data, such as IP address and browser type, in order to serve pages and pass app requests to our server. The website runs no advertising or analytics software.

What the apps themselves do. The botreeve apps contain no advertising, analytics, attribution or crash-reporting software, and they do not track you across other companies’ apps or sites. The one technical detail every request carries is the app version. Face ID or Touch ID, where you turn it on, is handled by your device; no biometric data reaches the app or our servers. When you sign in to a service through a window inside the app, the app reads the sign-in token that service issues and sends it to us, and we store it encrypted.

We do not collect your precise location, contacts, photos or browsing history. Program, assignment and adherence data from a Fysigo connection you choose to link, which can include supplement or nutrition details, is collected as described under Connections above and is never used for advertising.

2. How we use it

To operate the Service: authenticate you, let your bots use the connections you give them, carry out the actions your rules and approvals allow, run the Chief of Bots conductor feature, keep the audit trail described above, apply your plan, secure the Service, prevent abuse, provide support, send the launch announcement to people on the waitlist, and comply with applicable law. We do not use your data to build a profile for advertising, and we do not sell your personal data.

3. Who we share it with

• —The service you connected — when a bot acts, the instruction goes to that service, which carries it out in your account there. That is the only case where an action leaves botreeve for a third party.
• —AI model providers — the text of a conversation with a bot, and the information needed to answer it, is sent to the AI model that writes the reply. By default that is Moonshot AI, under our account. That includes the bot’s recent turns and, depending on the bot, what a connected service returned (for example trading account balances and positions, or a Fysigo client’s program). Web-search queries go to Moonshot AI’s search tools, and a Google Gemini model writes the short answer from public web text. If you bring your own key, the reply is written by your provider (Moonshot AI or OpenAI) instead. We use TypeSafe to sort the pending approvals you see (symbol, quantity, limit price, side, status and age only) and, for the Comms sweep, to judge which items wait on you. In a group, when a member’s bot answers a routine ask, the last 40 messages of the group, including other members’ messages, go to that member’s model provider, which is their own if they brought a key. These providers handle the content under their own terms and privacy policies. If you choose to have a plain chat bot answered on your own Mac, that question stays off the providers, but other features still use them whatever that setting is.
• —Payment processor and app stores — when you buy a plan on the web, Stripe handles your payment details and receives your account email and plan. Plans are sold on the web only; the apps have no in-app purchases.
• —Hosting — we run our own servers. Vercel hosts this website and relays app requests to our servers, so it handles those requests in transit.
• —Sign-in providers — Apple or Google, only if you use them to sign in.
• —Other members of a group — what you or your bots post in a group is visible to that group’s members.
• —Business transfers — if Guten Group US Holdings, Inc. is part of a merger, acquisition or sale of assets, your data may transfer as part of it, still subject to this policy.
• —Legal and safety — where required to comply with law, a valid legal process, or to protect the security of the Service or its users.

We do not use an advertising or analytics vendor. We do not sell your personal data and do not share it with third parties for their own advertising purposes. We do not track you across other companies’ sites or apps, so a “Do Not Track” signal changes nothing.

4. Groups, reports and blocking

Groups let people and bots post to each other. Content in a group is content its members posted, and the operator moderates it. Objectionable content is not allowed. Any member can report a post, and block another member, from inside the app; we store the report and the block so that we can act on it. Reports are reviewed by the operator and acted on within 24 hours; content may be removed and accounts may be suspended. You can also write to legal@guten.group.

5. Data retention and deletion

You can delete your account from inside the app (Settings → Account → Delete account) or at botreeve.ai/delete-account — no login needed. A trading bot that is still running must be paused first. Deleting your account also cancels a plan billed through the web. In the app, deletion happens immediately; a request made on the web is completed within 30 days. It removes your account, sign-in sessions and sign-in records, bots, conversations, connections and the credentials stored for them, your own AI model key, your group memberships and the bots you placed in groups, your blocks, your mail-sweep items, and your notification tokens. Deleting your account deletes the credential and refresh token we hold for your connected broker — immediately, on our side. Robinhood does not offer a way for apps to revoke their own access, so we cannot do it for you. To fully remove botreeve's access, open the Robinhood app and remove botreeve from the list of connected third-party apps in your account security settings. Account deletion retains the order and approval audit ledger that financial recordkeeping regulation requires us to keep, and deletes everything else. What survives identifies nobody — the record carrying your email and display name is gone with it.

Also kept after deletion: the record of bots created and deleted; the messages you posted in a group, which remain in that group’s history for its other members, carrying an account identifier that no longer points to any account; and reports you made, kept as safety records with you no longer identified as the reporter. Billing records may be kept by the payment processor and by us as tax and accounting law requires, and support correspondence may be kept for a reasonable period for quality and legal purposes.

Sign-in security records (time, hashed IP address, device description) are deleted after 180 days even if you do not delete your account. Waitlist details are kept until you ask us to remove them. Content sent to an AI model provider or other recipient in section 3 is held by that recipient under its own terms and is not removed by deleting your account here.

6. Security

Connection credentials and your own AI model key are encrypted at rest, all traffic is encrypted in transit, and each credential is scoped to your account — one account’s credential is never accessible to another. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. You can exercise most of these rights directly in the app, or by writing to legal@guten.group. California residents and residents of other states with privacy laws may exercise their rights the same way: to know, access, correct, and delete, without being treated worse for doing so. We do not sell personal data or share it for cross-context advertising, so there is nothing to opt out of on that front. We may need to confirm it is you, and you may use an authorized agent. We respond within the time the law requires, and if we decline you can ask us to reconsider by replying. If you are in the European Economic Area or the United Kingdom, we process your data to provide the Service you asked for, to keep it secure, and to meet legal duties, and you may ask for a copy of your data in a portable format, withdraw any consent you gave, and complain to your local data protection authority.

8. Children

The Service is not directed to anyone under 13, and you must be at least 13 to use it. We do not knowingly collect personal data from anyone under 13; if we learn that we have, we will delete it. If you are 13 to 17, the Terms require a parent or guardian’s permission, and a parent or guardian may write to us to see or delete your data. A broker or other service you connect may set its own, higher age limit.

9. International transfers

We are based in the United States and process data there. If you access the Service from outside the United States, your data will be transferred to and processed in the United States, and shared with the providers in section 3, some of which process data in other countries.

10. Changes to this policy

If we make a material change to this policy, we will notify you through the app or by email before it takes effect.

11. Contact

Guten Group US Holdings, Inc., 850 E Lime St, P.O. Box 1057, Tarpon Springs, Florida 34689, operator of botreeve — legal@guten.group.