Privacy policy

Last updated November 3, 2026

Bopmigo is a feedback tool made by Avara (“we”). This policy explains what we collect, why, and the choices you have. Questions go to privacy@bopmigo.com.

Two kinds of people use Bopmigo

Teams sign up for a workspace and read feedback. Reporters send feedback from a website that uses Bopmigo. Reporters don’t need an account. For feedback sent through a team’s website, that team decides what Bopmigo collects and is responsible for telling its own users; we process that feedback on the team’s behalf.

What we collect from teams

• Account details: your email address and password (stored only as a secure hash by our sign-in provider). If you sign in with Google, we receive your name, email address and profile picture from Google. We don’t get access to your Google account beyond that.
• Workspace details: workspace and website names, allowed web addresses, teammates you invite and their roles, and the guidance you write for the assistant.
• Billing details: when paid plans start, payments are handled by our payment provider. We don’t see or store full card numbers.

What we collect from reporters

• What you send: your description, your answers to follow-up questions, replies, and the screenshot you review and choose to send. Nothing is sent until you press send.
• Page details: the page address (without query strings or fragments), browser, language, time zone, screen and window size, and app version or error references the website provides.
• Details the website adds: a website can attach its own information, such as your user ID, name or email, if you’re signed in there. That is the website’s choice.
• A reply token stored in your browser, so you can see answers to your feedback. It isn’t used to track you elsewhere.

How we use it

• To run Bopmigo: deliver feedback to the right team, show conversations, send sign-in and team emails.
• To ask a useful follow-up question. The description and page details (not the screenshot) are sent to an AI provider, which returns one short question. Providers we use don’t train their models on this data under our agreements with them.
• To keep Bopmigo safe: rate limits, abuse prevention and fixing problems.

We don’t sell personal information, show ads, or use feedback to build profiles of people.

Who processes it

We use a small set of providers to run Bopmigo: Vercel (hosting), Supabase (database and sign-in, hosted on AWS in the United States), OpenAI (follow-up questions), Resend (email delivery), Zoho (our team inbox) and Google (if you choose Google sign-in). They process data only to provide their service to us.

How long we keep it

Workspace data, including feedback and screenshots, stays until the team deletes it or closes the workspace. If a trial ends without a plan, the inbox pauses and data is kept so the team can pick up where they left off. When a workspace is closed, we delete its data within 30 days, except where we must keep records for legal or billing reasons.

Your choices

• Teams can update their details, remove teammates, delete feedback, or ask us to close their workspace and delete their data.
• Reporters can ask the team that runs the website, or email us, to see, correct or delete feedback they sent.
• Depending on where you live, you may have rights to access, correct, delete or export your data, or to object to how it’s used. Email privacy@bopmigo.com and we’ll respond within 30 days.

Security

Data is encrypted in transit. Database access stays on our servers, never in browsers or the widget. Passwords are handled by our sign-in provider and never stored in plain text. No system is perfectly secure; if something goes wrong that affects your data, we’ll tell you.

Children

Bopmigo is for businesses and isn’t meant for children. We don’t knowingly collect their information.

Changes

If we make meaningful changes, we’ll update this page and the date above, and let workspace owners know by email.