myBluebot

Privacy

2026-11-09 · myBluebot.com

Controller and contact

The contact brand is myBluebot.com, info@mybluebot.com. A brand alone does not identify the legal data controller.

Data and purposes

Google provides verified email, name and account identifier for sign-in and project profiles. The platform stores conversations, assistant memory, uploaded projects and media, active usage time and orders to provide the service. Access rights are checked on the server. Google passwords are not stored.

Legal bases

Account and ordered features are provided to perform a contract. Essential security relies on legitimate interests, subject to objection; mandatory accounting relies on legal obligations. Optional media and newsletters require separate consent. MedicSort health data requires explicit consent, withdrawable at /health-consent.php. An AI reply is not an exclusively automated decision with legal effects.

Recipients and location

Text AI may run in your browser. Downloading model files contacts their providers and exposes ordinary network information to them. When a compute server is connected, the request and required attachments are sent to it for processing. Generated media is stored in your chosen cloud. Google handles sign-in, connected providers supply storage, banks handle transfers and the Czech National Bank supplies public rates. Actual providers, countries and safeguards for transfers outside the EEA appear in the confirmed operator details.

Retention and rights

Conversation history can be deleted in the app. Usage summaries older than 35 days are pruned on access checks. Cookie choices last one year; consent records older than 400 days are pruned when another choice is saved. Specific details must be stated in the operator information below. Contact info@mybluebot.com to request access, correction, erasure, restriction, portability or object. GDPR responses normally take one month. You can complain to the relevant supervisory authority.

Contact and abuse protection

Contact details and messages are used to handle your enquiry. The form stores it in central administration. Abuse protection uses short-lived counters with HMAC identifiers, pruned periodically.

Google Drive and other storage

Choose Google Drive or OneDrive for media. Google drive.file concerns files created or selected for this application, not unrestricted access to the entire drive. Access tokens are encrypted at rest. Revoke permissions with the provider or disconnect centrally. No other drive is selected silently after disconnection. Disconnecting does not delete files on your drive. GitHub is optional for projects. Contact and erasure requests do not require a connected drive.

Drafts and errors

Draft prompts stay in sessionStorage for that window for up to 12 hours, separated by account and tool; starting a new conversation clears the draft. Draft content is not sent to the server while typing. Error reports contain the error category, local page path and line number, without console text, user messages or URL query parameters.

Newsletter

The newsletter is optional and independent of a subscription. With your consent, we use your email, language, consent time and subscription state to send news. Unsubscribe in settings or in each message. We do not track email opens or use advertising pixels. We record mail-server acceptance and delivery errors. A necessary suppression record remains after withdrawal to prevent further sending; the operator specifies retention. Order, security and renewal messages are service communications and do not constitute consent to advertising.

MedicSort · Change consent