Privacy Policy

1. Who we are

Bettr World Limited("Bettr", "we", "us") is the agency responsible for personal information described in this policy. We are based in New Zealand. The Service is the Bettr web application at www.bettr.world, including previews, the studio, share links, embeds, and related email.

Privacy contact: info@bettr.world. See also our Terms of Service.

2. Who this covers

This policy covers three groups:

• Customers and teammates, people who create a preview, hold an account, are invited to an organisation, or open a share link.
• Enquirers, people who use our contact or demo form.
• Visitors, people who send messages to a chatbot a customer has previewed or embedded. For those messages, the customer decides why the bot exists. We process the messages to provide the Service on the customer's instructions.

If you are a visitor, the organisation that placed the bot should also give you its own privacy notice. That notice and this policy both apply. Their notice explains their purposes. This policy explains what Bettr does with the information.

3. Information we collect

We collect the following, depending on how you use Bettr.

• Account and profile.Email address, name, avatar if the sign-in provider supplies one, authentication identifiers, organisation name, organisation size, how you heard about Bettr, and the website URL you submit. If you choose Google sign-in, Google shares the basic account details needed to authenticate you (typically name, email, and an account identifier). Google's own policy applies to that sign-in.
• Team invites.The invitee's email address and role, and who sent the invite.
• Project and branding. URLs you submit, scraped public-page content, titles, colours, logos, widget settings (including a privacy-page link you enter), and share-link tokens.
• Knowledge base. Text from public pages and sitemaps you ask us to ingest. If those pages contain personal information, such as a staff name or email address, that information is stored so the chatbot can answer from the source. Submit only material you are allowed to use for this purpose.
• Conversations. Messages visitors and preview users send to the bot, replies, and related transcript metadata. Customers can view transcripts in the studio where that module is enabled.
• Billing. Plan, subscription status, and Stripe customer and subscription identifiers. Stripe collects payment card details, billing name, and billing address. We do not store your full card number.
• Enquiries. Name, email, phone number if you provide one, organisation, and the message you send through the contact or demo form. We store the enquiry and email it to our team.
• Technical and security data. IP address (including the IP stored on a guest preview for rate limiting), browser type, approximate device information, cookie identifiers, and diagnostic events. Hosting logs may include request path, IP address, and user agent. If error reporting is enabled, Sentry receives error and performance data such as the page URL and technical error context. We do not use Sentry as a store for chatbot transcripts.

You can use a preview with only a website URL and a browser cookie. An account needs an email address. Paid plans need billing details at checkout. If you do not provide required information, the related feature will not work.

We do not ask you to put sensitive information into Bettr (such as health, biometric, or government identity numbers). Do not put that information in a knowledge base, a chat, or a contact form unless you have a lawful reason and you have agreed it with us in writing.

4. How we use it

We use personal information to:

• create previews, accounts, projects, and branded widgets;
• fetch public site content and operate the knowledge base and chatbot;
• authenticate users, restore sessions, and claim guest previews;
• provide share links, team invites, and role-based access;
• show customers their transcripts, conversation counts, and project settings;
• take payment, run trials, and manage subscriptions;
• reply to contact and demo requests;
• protect the Service, enforce limits, investigate abuse, and fix faults; and
• send service messages about security, billing, and the product you use.

We do not sell personal information. We do not use customer content or visitor conversations to train models that we own. Bettr generates replies from that project's configuration and knowledge base.

5. Sharing and overseas disclosure

We share personal information with providers who process it so we can run the Service, with teammates and share-link holders you authorise, and with advisers or authorities when we must for legal, security, or dispute reasons. We do not allow providers to use the information for their own advertising.

These providers are outside New Zealand, or may process information outside New Zealand. They may not be required to protect personal information in a way that provides comparable safeguards to the New Zealand Privacy Act 2020. If you create an account, start a preview, or submit a contact or demo form, you authorise Bettr to disclose the information you provide to those providers for the purposes in this policy.

Visitor chat messages are disclosed to those same overseas providers because the customer instructed us to run the bot. Sending a message in a widget does not, by itself, mean the visitor has seen this policy or authorised that disclosure to Bettr. The customer must tell visitors before they use the chat, in the customer's own notice and via the widget privacy-page link, that overseas recipients may not be required to protect the information with safeguards comparable to the Privacy Act 2020.

6. Chatbot visitors

A visitor message is sent to Bettr so the bot can reply, and Bettr stores a transcript so the customer can review it. The transcript can include whatever the visitor typed, which may include personal information the visitor chose to enter.

Conversation transcripts are kept for up to 6 months (180 days). That is how long Bettr keeps them. They are not kept longer than that. Customers cannot set a different period yet. A control for the customer to choose a shorter period is not part of the Service yet.

Visitors who want access, correction, or deletion should contact the organisation that operates the website, because that organisation decides the purpose of the bot. They may also contact us at info@bettr.world. If we are processing the information only for a customer, we will tell the customer, or help them respond, unless the law requires us to act directly.

7. Cookies

We use cookies that are required to run the Service. We do not use advertising cookies, and we do not run a third-party marketing analytics tag.

• bettr_anon_session is an httpOnly cookie, lasting about 90 days, that reconnects a browser to an unclaimed preview.
• bettr_auth_return stores a short-lived return path during sign-in so we can bring you back to the right page.
• Supabase sets authentication cookies that keep you signed in.

Blocking cookies will stop sign-in and preview restore. If we add non-essential analytics cookies later, we will update this policy first and, where the law requires it, ask before setting them.

8. Retention

• Transcripts. Conversation transcripts are kept for up to 6 months (180 days). That is how long Bettr keeps them. They are not kept longer than that. Customers cannot set a different period yet.
• Accounts, projects, and knowledge bases. While the account or project is active, and then for a limited backup and wind-down period unless a longer period is required for a dispute, security investigation, or legal obligation.
• Unclaimed previews. We may delete previews that were never attached to an account.
• Enquiries. Until we have finished with the request, and longer if needed to keep a record of what we replied.
• Billing records. For as long as tax and accounting law requires us to keep them. In New Zealand that is generally seven years.
• Security logs and guest IP addresses. For as long as needed to enforce rate limits, investigate abuse, and keep the Service reliable, then deleted or de-identified.

You may ask us to delete personal information we hold about you. We will do so unless we need to keep it for a purpose in this section. Deleting an account does not automatically delete information a visitor typed into your chatbot before that retention period ends, and it does not delete records we must keep.

9. Security

We use access controls on projects and roles, httpOnly cookies for session continuity, encrypted transport (HTTPS), and the security controls of our hosting and database providers. Share links can be rotated, which revokes the previous link. No method of transmission or storage is completely secure. Please use a unique password and limit who receives a share link.

10. Access, correction, and complaints

Under the Privacy Act 2020 you may ask us whether we hold personal information about you, ask for access to it, and ask us to correct it if you think it is wrong. Email info@bettr.world. We will respond as soon as reasonably practicable, and within 20 working days, which is the period the Act requires. We may ask you to confirm you are the person the information is about. If we refuse a request, we will tell you why, unless the law says we should not, and we will tell you how to complain.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner: www.privacy.org.nz.

If another country's privacy law applies to you as well (for example because you are in the European Economic Area or the United Kingdom), contact us and we will explain the additional rights that apply to that request, including access, correction, deletion, restriction, and objection where those rights exist. Those rights do not replace the New Zealand process above.

11. Children

Bettr is not directed at children under 16, and we do not knowingly collect account information from them. If you believe a child has given us personal information, email info@bettr.world and we will delete it. Customers must not aim an embedded bot at children without their own lawful basis and a notice suitable for that audience.

12. Messages we send

We email you about the Service you use: account and security notices, billing, replies to a contact or demo request, and team invites you were sent. We do not add you to a promotional mailing list. If we later send promotional email, we will only do that with your consent where the Unsolicited Electronic Messages Act 2007 requires it, and each message will include a way to opt out.

13. Changes

We may update this policy by posting a new version with a new date. If a change materially affects how we handle personal information, we will give account holders notice by email or in the product before the change takes effect, unless a shorter time is needed for security or legal reasons. The date at the top of this page is the date the current version took effect.

14. Contact

Privacy requests and questions: Bettr World Limited, info@bettr.world. Please use the subject "Privacy request" and include the email address on the account, or the website where you used a chatbot, so we can find the right record.