Last updated: 7 August 2026
Botlor is operated by Alexiuz AS, Gamlegrensa 8A, 3747 Skien, Norway. We are the data controller for the personal data described in this policy. For any privacy question or request, contact [email protected].
Botlor is an artificial intelligence assistant, not a human. Every response in the chat is machine-generated.
Botlor maintains a rolling written summary of what you have told it, so it does not need to be reminded of your situation in every conversation. This summary is generated from your own messages, is stored against your account, and is included as context in later requests to our AI providers. It persists until you clear it or delete your account.
We do not use it for advertising, we do not sell it, and we do not use it to profile you for any purpose other than answering you better inside Botlor. You can view and clear it at any time from your settings.
Our legal bases under the GDPR are performance of our contract with you for the core service, your consent for optional personalization, and our legitimate interest in keeping the Service secure.
To generate responses, your messages and the context described above are sent to the AI provider behind the model you have selected. Depending on that choice, this may be Anthropic, OpenAI, Google or Moonshot AI. These providers process the data on our behalf as service providers, under their API terms, and are not permitted to use it to train their models or to target advertising at you.
Voice output uses Google Cloud Text-to-Speech. When semantic search over your notes is used, the note text is converted into a numerical embedding by OpenAI and stored in our own vector database; the embedding is not readable as text and is not shared further.
Botlor calls other services operated by Alexiuz AS to fulfil specific requests. Data is only sent when you use the relevant feature:
All of these are operated by Alexiuz AS under compatible privacy policies. Where a feature requires an account on one of them, it is created on your behalf using your email address only at the point you first use that feature, never automatically at registration.
Your Alexiuz account, credit balance and purchases are held centrally at alexiuz.com, which is shared across Alexiuz AS products.
When you ask Botlor to find products, tours or tickets, your search terms are sent to the relevant provider so results can be returned. This includes eBay, Commission Junction, Viator and Ticketmaster. We do not send them your email address, your conversation history or your stored memory.
We earn affiliate commission on some product, travel and ticket links Botlor shows you. This costs you nothing extra. Commission never influences what Botlor recommends, and Botlor does not use anything you have told it about your personal circumstances to decide what to sell you.
To answer factual questions, Botlor may pass your query to public data sources on your behalf: Open-Meteo for weather, Frankfurter for currency rates, Wikipedia, Google Books, Google Maps, The Movie Database, Nutritionix for nutrition data, and TheCocktailDB. These receive only the query needed to answer you, never your identity or your conversation history.
Data is stored on secure servers in Europe and encrypted in transit. Conversations, notes, goals and your rolling summary are kept until you delete them or close your account. Diagnostic logs are kept for up to 90 days. Deleted data is removed from active systems immediately and from backups within 30 days.
If you are in the EEA or the UK you have the right to access, correct, delete, export, restrict or object to our processing of your personal data, and to withdraw consent at any time. You can exercise most of these directly:
For anything you cannot do in the app, contact [email protected] and we will respond within 30 days. If you believe we have handled your data improperly, you may complain to the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
Botlor is not intended for children. You must be at least 16 years old to use the Service in the EEA, or at least 13 elsewhere. We do not knowingly collect data from anyone below these ages; if we learn that we have, we delete it.
We will post any significant change on this page and update the date above. Continued use after a change means you accept the updated policy.