Hosted in the UK/EU
The platform and its database run on cloud infrastructure in the London region (AWS eu-west-2). Your data isn't scattered across arbitrary regions.
Security & data protection
Your customers' data, treated like it's ours
BotSquirrel stores customer names, phone numbers, addresses, photos and conversations on your behalf. This page explains — specifically, not vaguely — how that data is protected. We only list controls that are actually in place.
How the platform is built
Encrypted in transit
All traffic between your customers, your team and the platform is encrypted with TLS (HTTPS). WhatsApp messages are carried over WhatsApp's own encrypted delivery.
Tenant isolation
Every record is scoped to your business at the database-query level, and we run automated cross-tenant isolation tests. One customer's data is invisible to another — by design, not by policy.
Role-based access
Team members get the access their role needs. Sensitive actions — like editing business information the AI answers from — require an admin role.
Audit logging
Changes to your business data — who changed what, and when — are recorded in an audit trail, including changes made by our own platform administrators.
Humans stay in control
The AI never confirms bookings or invents prices on its own. Appointments are booked by your team from real availability, and uncertain conversations hand over to a person.
How AI providers see your data
Plainly: what leaves the platform, and what doesn't.
Answers come from your approved business information
The AI is given your own services, prices and policies to answer from. It's instructed to say "I'm not sure" and hand over rather than guess.
API-based AI providers, not consumer chatbots
We use commercial AI APIs whose terms state that API data is not used to train their models.
Your data is never sold
Customer and business data is used to run your workspace — nothing else. No selling, no sharing with unrelated third parties, no advertising use.
Who we rely on
The service providers that process data so the platform can run.
| Provider | What for |
|---|---|
| Amazon Web Services (London) | Application hosting and database |
| Meta (WhatsApp Business Platform) | Delivering WhatsApp conversations |
| AI model providers (API) | Generating assistant replies from your approved information |
| Paddle | Subscription billing — we never see or store your card details |
Your data, your call
We build towards UK GDPR alignment — and we'd rather under-claim than over-claim.
Export on request
Ask us for a copy of your business and customer data and we'll provide it in a usable format.
Deletion on request
Leave the service and want your data gone? We delete your business's data on request, subject to legal retention requirements (e.g. invoices).
Retention
Data is kept while your account is active. It isn't mined, repurposed or kept "just in case" after you leave.
Something goes wrong? You hear about it
If an incident affects your data, we investigate, fix and tell you what happened — see our privacy notice and complaints route.
Questions about security?
Ask the engineer who built it — directly, on WhatsApp or email.