Privacy policy
Last updated: 25 August 2026 · applies to BobBot release v1.02 · Jump straight to exporting or deleting your data
BobBot is provided by Robert Bradley, trading as Bob Bradley Business Author, Speaker, Facilitator and Coach ("Bob", "we", "us"). This policy explains how we handle your personal data when you use BobBot, in line with UK GDPR and the Data Protection Act 2018.
Who we are
Robert Bradley, trading as Bob Bradley, of Woodlands, Freeland, OX29 8HD, is the data controller for the personal data processed through BobBot. Contact: bob@bobbradley.co.uk.
What data we collect
- Account details — your name and email address (and, if you sign in with Google, the basic profile info Google shares).
- Conversations — the full text of your coaching sessions with BobBot, the actions you agree, and the short set of key-point notes BobBot carries forward from one session to the next.
- Usage and technical data — sign-in timestamps and session duration, and, for our own records only, the IP address and browser type used to access BobBot.
- Payment and invoicing data — if you pay for a subscription, your billing details are processed by Stripe (our payment provider); we hold a record of the payment and, where applicable, invoicing details you provide (business name, address, VAT number).
- Referral and testimonial details — if you refer someone or leave a testimonial, we hold what you tell us for that purpose. Where you give either one in exchange for a free week of access, you're asked to confirm explicitly that it may be attributed to you by name, and we record that confirmation alongside it. A testimonial is only ever published if Bob approves it for publication; referrals are used to tell the person you referred that the recommendation came from you.
- Names of people you mention — if you name a colleague or contact during a session (e.g. "my finance director, Sarah"), BobBot keeps that name and role so it doesn't have to ask again next time — never anything more about that person than you've volunteered, and it's deleted along with the rest of your data (see below).
How we use it, and why it's lawful
- To provide the coaching service — running your sessions, remembering context between sessions, generating your action points and summaries. Lawful basis: performance of a contract with you.
- To support and improve the coaching — conversations are reviewed by Bob to support your coaching and to help him improve BobBot's coaching quality, and (in de-identified form only) to refine BobBot's general coaching approach. Lawful basis: legitimate interests, balanced against your right to confidentiality (see "Who sees your conversations" below).
- To take payment and issue invoices, where applicable. Lawful basis: performance of a contract / legal obligation (VAT record-keeping).
- To send you service emails — session summaries, renewal reminders, and (occasionally) a safeguarding follow-up if a conversation suggests you may be at risk. Lawful basis: performance of a contract / legitimate interests.
- For safety and abuse prevention — for example, if BobBot's safeguarding response is triggered, a brief internal alert is sent to Bob so he can follow up. Lawful basis: legitimate interests / vital interests where relevant.
We do not use your data for marketing, and we do not sell or share it with third parties for their own purposes.
Who sees your conversations
Unless you agree otherwise with Bob directly, your conversations are seen only by:
- Bob Bradley — the human coach behind BobBot. If you ask to be emailed your session, Bob also receives a copy of that email;
- You — and anyone signed in to BobBot as you, which is entirely under your own control (for example, if you share your device or sign-in link with someone else);
- BobBot itself — which means, technically, the conversation text is sent to our AI provider (Anthropic) to generate replies, and processed as necessary by our hosting and email providers below, purely as data processors acting on our instructions, not as independent recipients.
Service providers (processors)
We use the following processors to run BobBot. Each only processes your data to provide their service to us, under contract:
| Provider | Purpose |
|---|---|
| Anthropic | Generates BobBot's coaching replies from your conversation |
| Render | Hosts the application and database |
| Resend | Sends service emails (sign-in links, session summaries, reminders) |
| Stripe | Processes subscription payments |
| Sign-in, if you choose "Continue with Google" | |
| Voyage AI | Powers search over Bob's published articles (does not process your personal conversation data) |
Some of these providers may process data outside the UK/EEA (for example, in the US). Where they do, we rely on their standard contractual clauses or equivalent UK-approved safeguards.
How long we keep your data
Your personal data is deleted automatically 12 months after your last use of BobBot. You don't need to do anything for this to happen.
You can also export or delete it yourself, any time, using the options below — or ask BobBot directly during a chat.
Gives you a copy of everything BobBot holds about you — profile, every conversation, agreed actions, referrals, testimonials, and payment history — as a text file.
Removes your conversations, actions, and contacts from BobBot. Your account stays, but past sessions won't be recoverable.
Removes your account entirely from BobBot, along with your conversations, actions, and contacts. This can't be undone — you'd need to register again from scratch.
Invoice records may be kept for longer where we're legally required to (UK tax law requires VAT records to be kept for 6 years) — this is the one exception to full deletion.
Safeguarding
If something you say to BobBot suggests you may be at risk of harm, BobBot is designed to step out of coaching and point you towards appropriate support (without naming a specific service). A brief internal alert is also sent to Bob so he can check in and follow up personally — as with any session, Bob may also see the conversation itself if it's included in a session log.
Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete your data (see above);
- restrict or object to certain processing;
- receive your data in a portable format;
- complain to the Information Commissioner's Office (ICO) at ico.org.uk if you think we've got something wrong.
To exercise any of these, use the "Download my data" or delete buttons above, or contact bob@bobbradley.co.uk — Bob replies to any data request within a month, as UK GDPR requires.
Cookies
BobBot uses one essential cookie to keep you signed in. We don't use tracking or advertising cookies.
Changes to this policy
We'll update this page if how we handle your data changes, and note the date at the top.
Questions about this policy? Email bob@bobbradley.co.uk.