Privacy Policy

1. General

FRENZY.BOT ("we," "us," or "our") is operated by Frenzy, an Israeli company. This Privacy Policy governs how we collect, use, store, and protect personal information when you use our platform, website, or services (collectively, the "Service").

All data processing is governed by the Israeli Protection of Privacy Law, 1981 and its regulations, including Amendment 13 to the Privacy Protection Regulations (Data Security), 5777-2017.

By continuing to use the Service, you consent to the collection and processing of information as described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

Data processing is carried out using computerized systems and IT tools, as well as organizational procedures designed to protect personal information.

We reserve the right to amend this Policy at any time. Changes will be communicated via the customer dashboard and/or email notification. Continued use after notification constitutes acceptance of the updated Policy.

2. Information We Collect from Customers (Bot Owners)

When you register for or use FRENZY.BOT as a customer (bot owner), we may collect:

• Account registration data: full name, email address, password (stored as bcrypt hash), and payment details
• Dashboard usage data: IP address, device type, browser, and session information
• Settings and configuration data: bot settings, integrations, API keys (encrypted via Fernet), and knowledge base configuration
• Communication records: support tickets, emails, and chat messages with our team

Legal bases for processing: performance of our agreement with you, legitimate business interests, and your consent where applicable.

3. Use of AI in Communications

FRENZY.BOT chatbots are powered by artificial intelligence via OpenRouter, which routes requests to third-party AI platforms including OpenAI, Anthropic Claude, Google Gemini, and other providers.

Chat inputs submitted by end users are processed by these third-party AI platforms to generate responses. We send provider.data_collection: "deny" to OpenRouter to block training on customer data.

AI-generated content is not guaranteed to be accurate and should not be considered professional, legal, medical, or financial advice.

Customers must disclose AI use to their end users. The FRENZY.BOT widget includes an automatic AI disclosure notice that handles this requirement.

Users should avoid submitting sensitive personal information in chat conversations unless necessary for the intended purpose.

4. Information Collected from End Users (Widget Visitors)

When end users (visitors to a customer's website) interact with a FRENZY.BOT-powered chatbot, the following information may be collected:

• Chat transcripts between the visitor and the chatbot or live agents
• Personal information provided during chat: name, email, phone number, and inquiry content
• Technical data: IP address, device type, browser, and approximate geolocation (country/city via local MaxMind database — no external API calls)
• Lead form submissions and contact details

This data is collected for the purpose of providing the chatbot service, generating reports for the bot owner, and improving service quality.

Under Israeli law, the bot owner (customer) is the Database Owner (בעל מאגר מידע). The bot owner is responsible for: registering the database with the Israeli Privacy Protection Authority if required, providing privacy notices to their end users, obtaining necessary consents, and configuring appropriate security settings.

FRENZY.BOT acts as the Data Holder/Processor (מעבד מידע) on behalf of the bot owner. See our Data Processing Agreement for details.

5. Data Location

Self-hosted model: FRENZY.BOT is installed on the customer's own server, typically a Hetzner Cloud VPS in Germany. Customer data (chat transcripts, knowledge bases, user records) resides on the customer's infrastructure — FRENZY.BOT does not centrally store customer operational data.

FRENZY.BOT Central (our management platform) stores: server IP addresses, provisioning metadata, and encrypted API keys — hosted on secured infrastructure.

AI processing is routed via OpenRouter to provider infrastructure, which varies by the AI model selected by the customer.

6. Data Disclosure

We do not sell personal data to third parties.

Data is shared only with subprocessors necessary to deliver the Service (see Section 7 below).

We may disclose information to comply with legal requirements, court orders, or to prevent fraud.

Bot owners can view all data collected through their bot via the management dashboard.

7. Subprocessors and Third-Party Services

The following third-party services are used in the delivery of the FRENZY.BOT platform:

An updated subprocessor list is available upon request. Customers using additional integrations (Zapier, Make, Slack, Salesforce, etc.) add those subprocessors under their own responsibility. Self-hosted components (Loki/Grafana logging stack, Caddy + Coraza WAF, and Postfix email) run entirely on FRENZY.BOT infrastructure and are therefore not listed as separate subprocessors.

8. Cookies and Local Storage

Widget (Chatbot)

The FRENZY.BOT widget uses localStorage (not cookies) to store: session ID, language preference, theme preference, and consent status. These are functional only and are not used for marketing or tracking.

Dashboard

The management dashboard uses cookies for: authentication session (httponly, samesite=lax) and CSRF token protection.

No third-party marketing cookies are set by FRENZY.BOT. Bot owners who add Google Analytics or similar tracking to their own sites are responsible for those cookies and the associated disclosures.

For more information, see our Cookie Policy.

9. Data Protection

We implement the following security measures to protect personal information:

• SSL/TLS encryption in transit for all widget and dashboard traffic
• Fernet symmetric encryption for sensitive settings (API keys, tokens, TOTP secrets)
• bcrypt password hashing with per-user salts
• Role-based access controls (RBAC) with per-bot membership permissions
• IP restriction options for dashboard access
• Encrypted backups (AES-256-CBC or password-protected archives)

The default security level is Basic (as defined under Israeli data protection regulations). Higher security levels (Medium/High) are available by written agreement and may involve additional costs.

No security measure is 100% effective. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

10. Age Restriction

The FRENZY.BOT Service is intended for users who are at least 18 years old, or the age of majority in their jurisdiction. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete that information.

11. Third-Party Practices

This Privacy Policy does not cover third-party services, advertisers, or websites not owned or operated by FRENZY.BOT. We encourage you to review the privacy policies of any third-party services you interact with.

12. Israel-Specific Provisions

FRENZY.BOT is an Israeli product. Israeli law governs the processing of personal data under this Policy.

Key definitions under Israeli law:

• Personal Data (מידע אישי): Any information about an identified or identifiable individual
• Database Owner (בעל מאגר מידע): The entity that controls the purpose and means of processing — in the FRENZY.BOT context, this is the customer (bot owner)
• Data Holder/Processor (מעבד מידע): The entity that processes data on behalf of the Database Owner — this is FRENZY.BOT

Customers are responsible for: registering their database with the Israeli Privacy Protection Authority (if required by law), providing privacy notices to end users, obtaining consents, and selecting the appropriate security level for their needs.

13. International Use

The FRENZY.BOT platform is not specifically designed or certified for compliance with GDPR, CCPA, LGPD, HIPAA, or other international privacy frameworks.

It is the customer's responsibility to determine whether the platform is suitable for their jurisdiction and regulatory requirements. Data location depends on where the customer deploys their server.

14. Data Subject Rights

Bot Owners (Customers)

You can update your personal information directly in the dashboard settings. For additional requests (data export, account deletion), contact us at info@frenzy.bot.

End Users (Widget Visitors)

End users should contact the bot owner directly for data access, correction, or deletion requests. FRENZY.BOT acts as a processor only — we process data on behalf of the bot owner.

Bot owners can use the management dashboard to view, export, and delete end-user data collected through their chatbot.

15. AI Services Integration

FRENZY.BOT integrates with third-party AI platforms via OpenRouter. When AI features are enabled:

• Chat inputs are sent to AI providers for response generation
• We send provider.data_collection: "deny" to OpenRouter to block training on customer data
• AI outputs are not guaranteed to be accurate and do not constitute professional advice
• Customers agree to the terms of the applicable AI providers when enabling AI features

The widget AI disclosure notice (shown automatically to end users) satisfies the requirement to disclose AI use in communications.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: