SimpleBot Privacy Policy

Version: 1.0<br> Effective Date: September 9, 2026<br> Status: Published

Entheo AI Inc. (“Entheo AI,” “we,” “us,” or “our”), located at 2021 Fillmore St., PMB 2035, San Francisco, California 94115, provides SimpleBot and related services (“SimpleBot” or the “Services”). SimpleBot enables organizations to create, configure, train, connect to MCP servers and other tools, embed, and operate AI chatbot agents, including agents with Calendly appointment-booking capabilities.

This Policy explains how Entheo AI collects, uses, discloses, and protects information in connection with SimpleBot.

1. Scope and Roles

This Policy applies to:

• SimpleBot accounts and administrative users;
• AI agents created, configured, or deployed through SimpleBot;
• websites and applications containing a SimpleBot widget;
• MCP servers, APIs, Calendly, and other integrations;
• chatbot conversations and appointment-booking workflows; and
• communications, billing, support, security, and usage of the Services.

A SimpleBot customer may independently collect information through its agent, website, or business operations. In those circumstances, the customer generally determines the purposes and means of processing, and Entheo AI processes information on the customer’s behalf. The customer is responsible for providing legally required notices, obtaining consents, honoring individual rights, and complying with applicable privacy, consumer-protection, marketing, accessibility, AI-governance, and sector-specific laws.

2. Information We Collect

We may collect:

• Organization names, addresses, and contact information;
• Account, billing, and administrative information;
• Names, titles, email addresses, and login information of authorized personnel;
• Invitations, permissions, authorizations, and access records;
• Communications with Entheo AI;
• Device, browser, log, security, diagnostic, and audit information;
• Customer Content, including prompts, instructions, documents, websites, knowledge bases, configurations, and training materials;
• Chatbot messages, conversation history, feedback, and generated responses;
• Information submitted through a customer’s embedded agent;
• Appointment, scheduling, contact, and event information exchanged with Calendly;
• Information obtained from MCP servers, APIs, and other integrations selected by a customer; and
• Payment and transaction information processed through payment providers.

Customers should not submit sensitive personal information, health information, financial information, biometric information, children’s information, or other regulated information unless the use is lawful, necessary, and supported by the applicable agreement and Service configuration.

3. How We Use Information

We may use information to:

1. create and administer accounts;
2. authenticate users and manage permissions;
3. host, operate, maintain, and provide SimpleBot;
4. process Customer Content and operate configured agents;
5. facilitate chatbot conversations and appointment booking;
6. connect to MCP servers, APIs, Calendly, and other authorized integrations;
7. provide support and service communications;
8. process payments and administer subscriptions;
9. monitor access, detect fraud, prevent abuse, and investigate security incidents;
10. analyze performance and improve the Services;
11. comply with law, legal process, or regulatory requirements;
12. protect rights, safety, security, and property; and
13. enforce our agreements.

Unless separately agreed or authorized, Entheo AI does not use a customer’s Customer Content to train a general-purpose model for unrelated customers. We may use aggregated, deidentified, or otherwise non-identifying information to operate, secure, analyze, and improve the Services where permitted by law.

4. Artificial Intelligence

SimpleBot uses artificial-intelligence technologies that may generate inaccurate, incomplete, outdated, biased, or inappropriate content. SimpleBot outputs are not necessarily reviewed by a human and should not be treated as legal, medical, financial, employment, or other professional advice.

Customers are responsible for:

• reviewing and testing agents before deployment;
• configuring appropriate instructions, limitations, disclosures, and safeguards;
• monitoring outputs and user interactions;
• providing human assistance where required;
• identifying the agent as artificial intelligence where required; and
• ensuring that the agent does not make unlawful or impermissible decisions.

5. MCP Servers, Tools, Calendly, and Other Integrations

A customer may connect SimpleBot to MCP servers, APIs, Calendly, and other third-party services. When enabled, SimpleBot may transmit information, prompts, instructions, and user requests to those services as necessary to perform the configured function.

Customers are responsible for:

• selecting lawful and trustworthy integrations;
• obtaining all required permissions and consents;
• limiting tool access to what is necessary;
• reviewing tool outputs and actions;
• preventing unauthorized transactions or disclosures; and
• complying with each third party’s terms and privacy practices.

Calendly may receive names, contact information, appointment preferences, scheduling details, and other information configured by the customer. Calendly’s processing is governed by its own privacy practices.

6. Service Providers and Subprocessors

Entheo AI uses service providers and subprocessors to operate SimpleBot. Providers may process information only as necessary to perform their functions and subject to applicable contractual, privacy, and security requirements.

The provider list may be updated as the Services evolve. Material changes will be communicated as required by applicable law.

7. Disclosures

We may disclose information:

• To the customer that submitted or controls the information;
• To authorized customer personnel and end users;
• To the providers and subprocessors listed above;
• At the direction of a customer or user;
• To comply with legal process or regulatory requirements;
• To investigate abuse, fraud, security incidents, or violations;
• To protect rights, safety, security, and property; or
• In connection with a merger, acquisition, reorganization, financing, bankruptcy, or sale of assets.

We do not sell personal information for monetary consideration. Customers remain responsible for information they independently receive, store, copy, or disclose.

8. Cookies and Analytics

SimpleBot may use cookies, pixels, SDKs, logs, and similar technologies for authentication, security, functionality, analytics, and service improvement. Where required, we will obtain consent before using nonessential technologies. Customer websites may use additional technologies controlled by the customer.

9. Retention and Deletion

Information is retained subject to Entheo AI’s Retention, Backup, Legal-Hold, and Regulatory-Retention Policy and as reasonably necessary to provide the Services, maintain security, prevent abuse, comply with law, resolve disputes, and enforce agreements.

When an account ends, Customer Content may be deleted or returned according to the applicable agreement and ordinary deletion procedures. Deletion may not immediately remove information from backups, legal holds, security records, or systems where retention is legally required.

10. Security

Entheo AI maintains reasonable administrative, technical, and physical safeguards designed to protect information. No system is completely secure. Customers are responsible for securing their accounts, credentials, API keys, MCP credentials, access tokens, embedded websites, and personnel access.

Security concerns should be reported promptly to support@entheo.ai.

11. International Processing

Entheo AI and its providers may process information in the United States and other countries. Those countries may have different data-protection laws. Customers are responsible for determining whether notices, consents, transfer mechanisms, data-processing agreements, Standard Contractual Clauses, or other safeguards are required.

12. Privacy Rights

Depending on applicable law, individuals may have rights to access, correct, delete, receive, restrict, or object to the processing of personal information, withdraw consent, opt out of certain sale or sharing, and appeal a privacy decision.

Requests concerning information controlled by a customer should generally be directed to that customer. Entheo AI may assist the customer as required by the applicable agreement and law. Requests concerning Entheo AI’s own processing may be sent to support@entheo.ai.

We may verify requests as permitted by law and will not discriminate against individuals for exercising applicable rights.

13. Children

SimpleBot is not directed to children under 13. Customers must not configure SimpleBot to knowingly collect children’s information without appropriate authorization, notices, consent, and safeguards.

14. Changes

Entheo AI may update this Policy by posting a revised version. The version and effective date identify the applicable Policy. Material changes will be communicated as required by applicable law.

15. Contact

Entheo AI Inc.<br> 2021 Fillmore St., PMB 2035<br> San Francisco, California 94115<br> Email: support@entheo.ai