1. Who we are
Ultimo Bots is operated by Robert Klöpsch, Stegmattstrasse 11, 6033 Buchrain, Switzerland. For any privacy question, write to build@ultimo-bots.com.
This policy explains how we handle personal data from two groups:
- Agent owners, who build and run AI agents on our platform.
- Website visitors, who chat with those agents.
We follow the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).
2. What we collect
From agent owners
Name, email, hashed password, optional company name, IP address, browser and device information, the website content or files you upload for training, your agent configuration, subscription and billing data, usage logs, and support conversations.
From website visitors
Chat messages, timestamps, browser and device data, IP address, referring URL, and anything a visitor chooses to enter, such as name, email or phone number.
Who is responsible: agent owners are the data controllers for their visitors’ data and are responsible for informing visitors and obtaining any required consent. Ultimo Bots acts as a data processor on their behalf.
3. Why we process it
- To run and improve the platform.
- To let owners manage and measure their agents.
- To build new features and improve our AI.
- To keep the service secure and reliable.
- To meet legal and accounting obligations.
- To provide onboarding, support and service notifications.
4. Legal basis
- Performance of our contract with you.
- Our legitimate interests, such as analytics, security and product development.
- Legal obligations, such as accounting.
- Your consent, where the law requires it (for example cookies or marketing).
5. Who we share it with
We never sell or rent personal data. We share the minimum needed with trusted subprocessors that help us run the service:
- Microsoft Azure – hosting, infrastructure and storage.
- Stripe – subscription billing and payments.
- OpenAI (or an equivalent provider) – to generate agent replies.
- Google Workspace – internal communication, onboarding and support.
- Analytics tools – to monitor performance and usage.
We may change subprocessors, as long as they meet FADP and GDPR requirements and sign the appropriate agreements (DPAs and, where relevant, SCCs).
6. How long we keep it
We keep personal data only as long as needed for the purposes above, including legal compliance and dispute resolution. Some data may be kept after an account is closed where the law requires it.
7. How we protect it
- Encryption of data in transit and at rest.
- Access controls and activity logging.
- Role-based access and firewall protection.
- Secure cloud infrastructure on Microsoft Azure.
If a data breach occurs, we notify affected users as required by law.
8. Your rights
Under the GDPR and FADP you can:
- Access and correct your data.
- Request deletion, restriction or portability.
- Object to certain processing.
- Withdraw consent where processing is based on it.
Website visitors should contact the relevant agent owner directly. Owners can reach us at build@ultimo-bots.com.
9. Cookies
We use cookies and similar technologies for login sessions, analytics and security. You can disable cookies in your browser, and consent banners appear where required.
10. International transfers
Your data may be processed outside Switzerland or the EU by our subprocessors. Where it is, we rely on appropriate safeguards such as DPAs and Standard Contractual Clauses.
11. Updates
We may update this policy from time to time. For material changes we will notify you by email or in the platform, so it is worth checking back now and then.
12. Contact
Ultimo Bots
Operated by Robert Klöpsch
Stegmattstrasse 11, 6033 Buchrain, Switzerland
build@ultimo-bots.com