HeroBot Privacy Policy

Welcome to HeroBot, a product developed and operated by Invira. We believe in complete transparency regarding how we handle your data. To provide our agentic AI services, we collect and protect your information in the specific ways detailed below.

1. Information Collection and Usage

We collect information in three distinct categories to ensure our platform operates effectively for your business.

  • Account and Billing Information: When you register for HeroBot, we collect your name, business email address, company details, and payment information. We use this exclusively to manage your subscription, process payments, and provide technical support.
  • Knowledge Base Data: To customise your AI agent, you will upload business documents, link URLs, or connect product catalogues. This proprietary data is processed strictly to create the operational boundaries and knowledge base for your specific HeroBot instance. We do not claim ownership of this data.
  • End-User Interaction Data: When visitors interact with the HeroBot widget on your website, we process their chat inputs, IP addresses, and browser details. This is necessary to deliver real-time responses, maintain conversational context, and capture sales leads on your behalf. You remain the data controller for all end-user information, and Invira acts entirely as your data processor.

2. Data Sharing and AI Model Training

A primary concern with artificial intelligence is how data is shared. HeroBot is built with strict cognitive security boundaries to protect your corporate intelligence.

  • Protection of Public AI Models: Your proprietary knowledge base, business documents, and customer chat logs are completely ring-fenced. We do not use your private data to train public large language models, nor do we allow our third-party AI infrastructure partners to use your data for their own model training.
  • Third-Party Service Providers: We share information only with trusted third-party providers who are essential to operating our service. This includes secure cloud hosting providers, payment gateways, and enterprise AI API providers. These partners are bound by strict confidentiality agreements and are permitted to process your data only according to our exact instructions.
  • Legal Compliance: We may disclose information if required to do so by law, such as to comply with a subpoena, regulatory request, or similar legal process mandated by UAE or international authorities.

3. Security and Data Retention

We implement enterprise-grade security measures to ensure your data remains safe and accessible only to authorised personnel.

  • Security Measures: All data transmitted between your website, our servers, and our infrastructure partners is encrypted in transit and at rest using industry-standard encryption protocols. HeroBot also employs prompt-injection protection to prevent malicious users from extracting your system instructions or private data.
  • Data Retention: We retain your account information and knowledge base data for as long as your account is active. Chat transcripts and end-user data are stored to populate your analytics dashboard and allow you to review lead performance. If you choose to cancel your subscription, you may request the complete deletion of your workspace, and we will securely erase your data from our active servers within 30 days.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to ensure our website functions correctly, to remember your login sessions, and to analyse how users interact with our platform. You can control your cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to use the HeroBot dashboard effectively.

5. International Data Transfers

HeroBot operates globally. Your information may be transferred to, stored, and processed in countries outside of your residence, including the United Arab Emirates and regions where our secure cloud infrastructure partners operate. When we transfer data internationally, we ensure it is protected by appropriate legal safeguards, such as Standard Contractual Clauses, to maintain compliance with global privacy regulations.

6. Age Limitations

HeroBot is a business-to-business platform. Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such data from our systems.

7. Changes to This Privacy Policy

As our AI technology and global regulations evolve, we may occasionally update this privacy policy. We will post the updated document on this page and revise the effective date. For significant changes, we will also update you via the email address associated with your account so you are always aware of how your data is handled.

8. Global Privacy Rights and Contact Details

Whether you are located in the UAE, the European Union, or elsewhere, HeroBot respects your fundamental digital privacy rights.

  • Your Data Rights: Under the UAE PDPL, GDPR, and other applicable global laws, you have the right to request access to the personal data we hold about you. You may also request corrections to inaccurate data, ask us to restrict the processing of your information, or request the complete deletion of your personal data from our systems.
  • Exercising Your Rights: Website visitors interacting with a HeroBot instance must direct their privacy requests to the company operating the website. If you are a HeroBot customer wishing to exercise your account rights, please contact our privacy team.
  • Contact Us: If you have any questions, concerns, or require assistance regarding this privacy policy, we are here to help. You can reach the Invira team at:
    • Email: info@herobot.co
    • Location: Dubai, United Arab Emirates

We will process your request promptly and update you on the actions we have taken to resolve your inquiry.