Terms of Service

Last updated: March 22, 2026  |  Effective: March 22, 2026

These Terms of Service ("Terms") govern your use of BossBot, a product operated by KZENOFFRAME STUDIO LLC ("we", "us", "our"). By subscribing to or using our service, you agree to these Terms in full.

1. Service Description

BossBot AI provides an AI-powered WhatsApp assistant for businesses. The service includes:

• Automated AI responses to incoming WhatsApp messages on behalf of your business.
• Appointment scheduling with calendar integration.
• Intelligent escalation of conversations to you via Telegram when human intervention is needed.
• Encrypted conversation storage and analytics dashboard.
• Multi-language auto-detection and response (20+ languages).

The service is provided "as is" and we continually improve features. We may modify, add, or remove features with reasonable notice.

2. User Obligations

By using BossBot AI, you agree to:

• Provide accurate business information: Your business name, services, pricing, hours, and FAQ must be truthful and current.
• Comply with applicable laws: You are responsible for ensuring your use of BossBot complies with local laws, including healthcare regulations, advertising standards, and data protection laws (GDPR, LGPD, HIPAA where applicable).
• Obtain necessary consents: You must inform your patients/customers that they are communicating with an AI assistant and obtain any required consent for automated processing.
• Not use the service for: Spam, harassment, illegal activities, misleading medical advice, or any purpose that violates WhatsApp's Terms of Service.
• Maintain account security: Keep your dashboard credentials and API keys confidential.

3. Billing & Subscription

• Plans: Lite ($19/mo), Starter ($49/mo), Growth ($99/mo), Scale ($199/mo). Pricing may vary by region.
• Billing cycle: Monthly or annual (annual saves 20%). Charged on the same date each month/year.
• Payment: Processed securely via Stripe. We accept major credit/debit cards.
• Cancel anytime: No long-term contracts. Cancel from your dashboard at any time. Service continues until the end of the current billing period.
• Refunds: We do not issue prorated refunds for partial months. If you cancel, you retain access through the end of your paid period.
• Price changes: We will notify you at least 30 days before any price increase. You may cancel before the new price takes effect.

4. Service Availability

• We target 99.5% uptime for the BossBot AI service.
• Scheduled maintenance windows will be communicated at least 24 hours in advance.
• We are not responsible for downtime caused by WhatsApp, Telegram, or other third-party service outages.

5. Limitation of Liability

To the maximum extent permitted by applicable law:

• BossBot AI is an assistant tool, not a replacement for professional medical, legal, or financial advice. AI-generated responses may contain errors.
• We are not liable for any direct, indirect, incidental, consequential, or punitive damages arising from the use or inability to use the service, including but not limited to: missed appointments, incorrect information provided by the AI, lost revenue, or business interruption.
• Our total liability for any claim shall not exceed the amount you paid for the service in the 3 months preceding the claim.
• You agree to review AI-generated responses periodically and update your business training data to ensure accuracy.

6. Intellectual Property

• Our IP: The BossBot platform, brand, code, algorithms, ZeroTrace technology, and all related intellectual property remain our exclusive property.
• Your content: You retain ownership of your business data, training content, and conversation data. We claim no ownership over your data.
• License: You grant us a limited license to process your data solely for the purpose of delivering the BossBot service.
• You may not reverse-engineer, decompile, or attempt to extract the source code of the BossBot platform.

7. Termination

• By you: Cancel anytime via your dashboard. No cancellation fees.
• By us: We may suspend or terminate your account if you violate these Terms, fail to pay, or use the service in a way that harms other users or our infrastructure. We will provide 7 days notice except in cases of severe abuse.
• After termination: Your data will be available for export for 30 days after cancellation. After 30 days, all data is permanently deleted. You may request immediate deletion at any time.

8. Data Handling

Your data is handled in accordance with our Privacy Policy. Key points:

• All data encrypted with AES-256-GCM.
• Full GDPR and LGPD compliance.
• ZeroTrace cryptographic audit logging.
• Data export available within 24 hours of request.
• Complete data deletion upon account termination.

9. Indemnification

You agree to indemnify and hold harmless KZENOFFRAME STUDIO LLC (operating as BossBot) from any claims, damages, or expenses arising from your use of the service, your violation of these Terms, or your violation of any third-party rights.

10. Governing Law

These Terms are governed by the laws of the European Union (for EU/EEA users) or the Federative Republic of Brazil (for Brazilian users and all other jurisdictions), without regard to conflict of law provisions. Disputes shall be resolved through negotiation first, then through the competent courts of the applicable jurisdiction.

11. Modifications

We may update these Terms periodically. Material changes will be communicated via email at least 15 days before taking effect. Continued use of the service after changes take effect constitutes acceptance of the updated Terms.

12. Service Level Agreement (SLA)

• Measurement: Uptime is calculated as: (total minutes in month − downtime minutes) / total minutes in month × 100.
• Downtime: A period of 5+ consecutive minutes where the webhook endpoint does not return HTTP 200.
• Exclusions: Scheduled maintenance (notified 24h+ in advance), force majeure, WhatsApp/Meta/Google outages, DNS propagation, and issues caused by your configuration.
• Credits: If monthly uptime falls below 99.5%, you may request a service credit: below 99.5% = 10% of monthly fee; below 99.0% = 25%; below 95.0% = 50%. Credits are applied to the next billing cycle. Maximum credit: 50% of monthly fee.
• Claim process: Submit a credit request within 10 business days of the incident via email. Include dates and times of observed downtime.

13. Data Processing Agreement (DPA)

This section constitutes the Data Processing Agreement between you (the "Data Controller") and KZENOFFRAME STUDIO LLC (the "Data Processor") as required by GDPR Article 28 and LGPD Article 39.

• Purpose of processing: To provide AI-powered messaging services on behalf of the Data Controller's business.
• Categories of data subjects: End-users (patients, customers) who message the Controller's WhatsApp or Telegram business number.
• Categories of personal data: Phone number, name, message content, appointment details, conversation metadata.
• Processing duration: For the term of the service agreement plus 30 days for data deletion.
• Processor obligations:
  • Process personal data only on documented instructions from the Controller.
  • Ensure that persons authorized to process data are bound by confidentiality.
  • Implement appropriate technical and organizational security measures (AES-256-GCM encryption, access controls, audit logging).
  • Assist the Controller in fulfilling data subject requests (access, deletion, portability).
  • Delete or return all personal data upon termination of the agreement.
  • Make available all information necessary to demonstrate compliance.
• Subprocessors: The Processor uses the following subprocessors:
  • Google LLC (Gemini API) — AI response generation — USA — Google Cloud DPA
  • Meta Platforms Inc. (WhatsApp Cloud API) — Message delivery — USA — WhatsApp Business DPA
  • Stripe Inc. — Payment processing — USA — Stripe DPA
  • Telegram FZ-LLC — Notification delivery — UAE — Telegram Privacy Policy
• Data breach notification: The Processor shall notify the Controller within 48 hours of becoming aware of a personal data breach, including the nature of the breach, categories of data affected, and measures taken.
• International transfers: Where data is transferred outside the EEA/UK, appropriate safeguards (Standard Contractual Clauses) are in place with each subprocessor.

14. Contact

For general questions: [email protected]