config.php (legal section).This is a courtesy translation. In case of any discrepancy, the Italian version prevails.
Privacy policy
Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for people who use teamworkbot (https://vps.teamworkbot.com). Version of 2026-11-01.
1. Data controller
Gabriele Ferrari, Via Cesare Costa 88, 41123 Modena (MO), VAT no. 03615520362. Contact: support@teamworkbot.com, PEC ferrarigabriele68@pec.it.
2. What data we process
- Account data: name, email address, password (stored only as an encrypted hash, never in clear text), sign-up and confirmation dates, acceptance of the terms.
- Waiting list: name, email address, what you do for a living, how many clients you work with and what you would like to hand over to the bots, if you write them in the form, with the date you joined.
- Public page statistics (only if you accept statistics cookies): pages viewed, traffic source, device and browser type, collected by Google Analytics 4 with pseudonymous identifiers.
- Access and security data: IP address, date and time of logins and failed attempts, log of relevant operations (audit).
- Content: messages written to the bots, uploaded files and voice messages, emails and calendars of the services you connect, vault notes, results produced by the bots.
- Credentials for connected services (API keys, tokens, mailbox passwords): stored encrypted and used only to carry out the tasks you ask for.
- Usage and cost data: model consumption, estimated costs, job outcomes.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing the account, providing the service, support | Performance of a contract (Art. 6.1.b) |
| Waiting list: contacting you when a place is available and understanding who needs the service | Pre-contractual steps at your request (Art. 6.1.b) |
| Aggregated statistics on the use of the public pages (Google Analytics 4) | Consent (Art. 6.1.a), which you can withdraw at any time from "Cookie preferences" |
| Security: login attempt limits, access log, abuse prevention | Legitimate interest (Art. 6.1.f) |
| Invoicing and tax obligations | Legal obligation (Art. 6.1.c) |
| Service emails (address confirmation, password recovery, operational notices) | Performance of a contract |
We do not use your data for advertising and we do not sell it. We do not use it to train artificial intelligence models.
4. Data about your clients and contacts
If you use teamworkbot to work on third-party data (clients, contacts, received emails), you are the controller of that data and we act as processor (Art. 28 GDPR), under the agreement in the Terms of service. It is up to you to inform the data subjects and to have a legal basis.
5. Who we share it with
Only with the providers needed for the service, appointed as processors or sub-processors:
| Provider | For what | Where |
|---|---|---|
| Aruba | Hosting of the application and the database (server in an Italian data centre) | Italy |
| Netsons | Sending the application's emails (account confirmation, password recovery) | Italy |
| Anthropic | Claude models that run the bots | USA |
| OpenAI | Voice message transcription only | USA |
| GitHub | Notes vault, if you connect it | USA |
| Calendar and Drive, if you connect them; daily backup copies on Google Drive, encrypted before upload; Google Analytics 4 on the public pages, only with your consent | USA/EU | |
| Telegram | Chat with the bots, if you connect it | EU/outside the EU |
| Replicate, OpenRouter | Images, videos and alternative models, if you use them | USA |
| Other services you connect yourself (MCP servers, automations) | Whatever you ask the bots to do with them | Depending on the service |
Transfers outside the European Union take place under the EU-US Data Privacy Framework, where the provider has joined it, or under the European Commission's standard contractual clauses.
6. How long we keep it
- Account and content: as long as the account is active; after closure we delete them within 30 days, except for backups, which are overwritten within 5 weeks.
- Waiting list: until 30 days after you are invited, or until you ask to be removed, and in any case no longer than 12 months after joining.
- Unconfirmed sign-ups: 30 days, then we delete the account and the space created at sign-up.
- Access and security log: 12 months; after that we delete the access entries and remove the IP address from the other entries of the activity log.
- Google Analytics 4 statistics: 14 months, then deleted by Google.
- Invoicing data: 10 years, as required by law.
7. Your rights
You can request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interest by writing to support@teamworkbot.com. We reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
8. Security
Encrypted connections (HTTPS), passwords stored with Argon2id, connected service credentials encrypted in the database, data access separated by space, login attempt limits, and the bots' outbound actions go through your approval.
9. Cookies
We use a technical session cookie and, on the public pages and only with your consent, Google Analytics 4 cookies: see the cookie policy.