Privacy statement

Toros Ricos OÜ, Kiikri 6/2, 10159 Tallinn, Estonia, company number 16767169, is the data controller for bobbyguru.com.

Data protection questions go to support@bobbyguru.com.

Account data: name, email address, organisation, and the credentials you use to sign in.

Billing data: billing address, VAT number, plan, invoices and payment status. Card details are held by Stripe, not by us.

Service data: the sites, repositories and endpoints you connect, and the prompts, runs and outputs produced by the agent.

Technical data: IP address, browser and device information, and log entries needed for security and debugging.

To provide the service you subscribed to (performance of a contract).

To bill you and meet Estonian accounting and tax obligations (legal obligation).

To keep the platform secure, prevent abuse and improve reliability (legitimate interest).

To send product and billing email you cannot opt out of, and marketing email you can (consent).

Stripe - payments, invoicing and tax calculation.

Our hosting and database providers - running the site and storing your account and run history.

AI model providers - executing agent runs on the content you submit.

Email delivery providers - transactional and account email.

Each processor is bound by a data processing agreement. Some are outside the EEA; those transfers rely on the European Commission's standard contractual clauses.

Bobby Guru does not currently save Ask Bobby conversations as conversation history. There is no saved thread to reopen, and closing or refreshing the page ends the conversation.

Keep your own copy of anything you want to keep. We cannot retrieve a conversation for you.

This describes conversation history only. It is not a claim that no network, hosting, security log or AI model provider processing happens while a message is being answered: the sections above and below describe that processing, and the retention periods there apply to it.

Account data: while your account exists, then up to 12 months.

Invoices and accounting records: 7 years, as Estonian law requires.

Agent runs and outputs: 12 months by default, or a shorter window on request for enterprise accounts.

Security logs: 90 days.

You can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest.

You can withdraw consent for marketing at any time without affecting anything else.

Write to support@bobbyguru.com and we answer within 30 days.

If you are unhappy with the answer you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

We do not sell personal data.

We do not use your private code or content to train public models.

We do not run advertising trackers on this site.

Access to production data is limited to the people who need it, protected by multi-factor authentication and logged.

Data is encrypted in transit and at rest. Connected credentials are stored encrypted and can be revoked by you at any time.