1. About Bobbot
Bobbot is an internal customer support panel developed and operated by Mh Musik, LLC, a company registered in the United States. It is used by authorized team members ("agents") of Mh Musik and DistroShield to manage customer conversations that arrive through WhatsApp and web chat.
This privacy policy explains what information Bobbot collects, how we use it, who we share it with, and your rights regarding that information.
2. Who this policy applies to
This policy covers two distinct groups:
- Agents — team members of Mh Musik or DistroShield who log into Bobbot to handle support cases. They are the direct users of the app.
- Customers — end users of Mh Musik's and DistroShield's services whose conversations are routed through Bobbot for support. They interact with Bobbot indirectly through WhatsApp or the web chat widget on our sites.
3. Information we collect
3.1 From agents (direct users of the app)
- Login credentials (username and password, stored hashed)
- Session tokens and refresh tokens (to keep you logged in)
- Assigned display name and profile photo (if uploaded)
- Firebase Cloud Messaging (FCM) or Apple Push Notification (APNs) device tokens (to deliver push notifications to your phone)
- Approximate activity data (last online timestamp) to show online/offline status to other agents
- Messages you send inside the app: replies to customers, notes on cases, chats with other agents
3.2 From customers of Mh Musik and DistroShield
- WhatsApp messages, media (images, audio, video, PDFs), and profile name as provided by WhatsApp/Twilio
- Web chat messages, name, and email address (email is optional) submitted through the DistroShield support widget on distroshield.com
- Phone number in E.164 format, or opaque WhatsApp identifiers (LIDs) when the user has WhatsApp privacy features enabled
- Case metadata: status, assigned agent, timestamps, transfer notes
3.3 Technical data
- Server logs including IP addresses and request timestamps for security and rate-limiting purposes
- Error logs for troubleshooting
4. How we use the information
- To authenticate agents and secure access to the panel
- To deliver customer messages to the right agent and enable replies
- To generate automated responses through our AI assistant (Claude) when a case has not yet been claimed by a human agent
- To send push notifications to agents when new cases arrive or messages need attention
- To maintain conversation history so agents can see context when responding to a customer
- To detect and prevent abuse (rate limiting, blocking of abusive senders)
5. Who we share information with
Bobbot uses the following third-party service providers to operate:
| Provider | Purpose | Data shared |
|---|
| Twilio | WhatsApp Business messaging (send and receive) | Customer phone numbers, messages, media |
| Anthropic | AI-generated responses (Claude models) | Conversation transcripts (last 15 messages), current customer message, customer name |
| Google Firebase | Push notifications (FCM), authentication tokens | Agent device tokens, notification payload |
| Apple APNs | Push notifications on iOS | Agent device tokens, notification payload |
We do not sell personal information to any third party. We do not use customer conversations for advertising.
6. Data retention
- Customer messages and case history: retained indefinitely to allow historical support review. Customers can request deletion (see section 8).
- Agent session tokens: expire after 30 days of inactivity.
- Push notification tokens: retained while the agent's device is active. Removed on logout or uninstall.
- Server logs: retained for 90 days for security auditing, then rotated out.
7. Security
- All data in transit is encrypted with TLS (HTTPS).
- Agent passwords are hashed using industry-standard algorithms.
- Access to the underlying database is restricted to authorized personnel and cloud infrastructure with authentication controls.
- Push notification tokens are stored server-side and are only used to deliver notifications to the corresponding device.
8. Your rights
Depending on your jurisdiction (GDPR in the EU, CCPA in California, or similar laws elsewhere), you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: request that we correct inaccurate information
- Deletion: request that we delete your personal information
- Objection: object to certain uses of your information
- Portability: request your information in a machine-readable format
To exercise these rights, contact us at support@mhmusik.com with a description of your request. We will respond within 30 days.
9. Children
Bobbot is not intended for use by children under 13 (or 16 in the EU). We do not knowingly collect information from minors. If you become aware that a minor has provided information through our platforms, please contact us and we will delete it.
10. International transfers
Mh Musik, LLC is based in the United States. If you access Bobbot or send messages to Mh Musik or DistroShield from outside the United States, your information may be transferred to and processed in the United States. By using our services, you consent to this transfer.
11. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to agents through the app.
For any questions about this privacy policy or how we handle your information, contact:
Mh Musik, LLC
Email: support@mhmusik.com
This policy applies to the Bobbot mobile application (iOS and Android), the desktop application (Windows / Mac), and the web panel accessible at wa.mhmusik.com.