Skip to main content
© Circle. All rights reserved.
Powered by YOOtheme.

Privacy Policy

Privacy Policy for Sandbots

Last Updated: March 16, 2026

This Privacy Policy explains how Sandbots (“we,” “us,” or “our”) collects, uses, and protects your information when you use our platform, accessible at app.sandbots.ai. By using Sandbots, you agree to the terms outlined below.


1. Information We Collect

We only collect the data necessary to provide you with a functional AI experience.

  • Identity Data: When you sign in using Google OAuth or Microsoft Login, we receive your name, email address, and profile picture. We do not see or store your passwords.
  • Interaction Data: We store the prompts you enter and the responses generated by the AI to provide chat history and continuity.
  • Technical Data: This includes your IP address, browser type, and usage patterns (e.g., features used, time spent) to help us maintain security and improve the platform.

2. How We Use Your Information

  • Authentication: To manage your account and keep your sessions secure.
  • AI Services: To process your requests through third-party AI models (e.g., Google Gemini).
  • Improvement: To troubleshoot bugs and optimize the user interface.
  • Safety: To detect and prevent fraudulent or harmful activity.

3. Third-Party Service Providers

Sandbots integrates with high-quality third-party providers. Your data is processed by:

  • Google & Microsoft: For secure authentication services.
  • Google Gemini (API): To power the AI chat capabilities.
    • Note: We use the professional/paid tier of Gemini API. According to Google’s enterprise privacy terms, your data submitted via our API is not used to train their global machine learning models.
  • Supabase: To securely store your account profile and chat history.

4. Data Retention & Deletion

  • Chat History: We retain your chats as long as your account is active so you can access them across sessions.
  • Account Deletion: You may request to delete your account at any time. Upon deletion, we will remove your personal identifiers and chat history from our active databases within 30 days.

5. Your Rights

Depending on your location (such as the EU/UK under GDPR or California under CCPA), you have the following rights:

  • Access: Request a copy of the data we hold about you.
  • Correction: Ask us to update inaccurate information.
  • Erasure: Request that we delete your personal data.
  • Portability: Request your data in a machine-readable format.

6. Security

We implement industry-standard encryption (TLS/SSL) for all data in transit. While we strive to protect your personal information, no method of transmission over the Internet is 100% secure.


7. Contact Us

If you have questions about this policy or wish to exercise your data rights, please contact us at: Email: support@sandboxmedia.ca