Terms and Conditions

Last updated: May 27, 2026

These terms govern the subscription to and use of Bota, a conversational AI chatbot for car rental companies that want to automate customer support, booking management, and sales through their website and WhatsApp.

Bota is a B2B SaaS conversational AI product, operated by Zentia Labs LLC. Bota is not a marketplace, does not act as a rental broker, and does not take the customer’s contractual position vis-à-vis its end users.

1. Service scope

Bota provides an AI-powered chatbot that car rental companies can deploy on their website (widget) and WhatsApp to handle customer inquiries, automate booking flows, and manage sales. The service includes an admin panel, escalation rules, messaging channel integrations, and configuration tools.

Available functionality depends on the product documentation, the accepted commercial proposal, and any applicable order form or master agreement.

2. Eligible customer and authority

  • Bota is intended for companies and professionals in the vehicle rental sector, not for consumers as the SaaS contracting party.
  • Anyone subscribing on behalf of a customer represents that they have sufficient authority to bind the relevant entity.
  • The customer must provide accurate information, keep it updated, and designate authorized users for service administration.

3. Account, implementation, and third-party channels

  • The customer is responsible for credential custody, user administration, and the use made of Bota by its authorized users.
  • The customer is responsible for its domains, pages, copy, prompts, chatbot behaviour rules, branding assets, and third-party accounts connected to Bota.
  • If the customer enables WhatsApp Business or other messaging integrations, it must comply with the policies, terms, and technical requirements of those third parties.

4. Data protection and roles

The customer generally acts as controller for leads, end customers, reservations, or conversations that it routes through Bota in its own environments (website, WhatsApp).

Zentia Labs generally acts as processor or technology provider for that operational data (chat messages, conversational content, booking intents), under the customer’s documented instructions and the applicable data processing agreement.

Zentia Labs acts as independent controller for B2B marketing, onboarding, accounts, support, billing, security, and use of the Bota website or admin portals.

5. Use of AI and human supervision

  • Bota uses language models (LLM, currently Anthropic Claude) to generate conversational responses. Despite Zentia Labs’ reasonable efforts, the service outputs may contain errors, omissions, or inaccuracies; the service is provided "as-is" with respect to those outputs, with no warranty of error-free operation.
  • The customer is responsible for reviewing the chatbot’s functional configuration, defining escalation rules to human agents, and validating flows with commercial, contractual, or reputational impact.
  • The customer is solely responsible for the commercial relationship with its end users, including prices, availability, booking terms and conditions, and fulfilment. Zentia Labs will not be liable to the customer or to third parties for claims arising out of the content, prices, or conditions communicated to the end user through the service.
  • Zentia Labs does not guarantee that Bota’s automated responses will replace human supervision in every scenario. The customer must ensure that a human escalation mechanism exists where necessary.

6. Fees

Bota is provided under a results-only commercial model, with no setup fee and no fixed monthly subscription. The customer will pay Zentia Labs a success commission equal to 1.9% of the gross amount of each booking originated through the service. A booking is deemed originated through the service when the first contact or closing took place on the WhatsApp channel or the web widget managed by Bota.

The customer’s billing currency (USD or EUR) is set at first account configuration based on the customer’s country. Where a booking is collected from the end customer in a currency other than the billing currency, the gross amount will be converted to the billing currency on the booking confirmation date using the daily reference exchange rate of the European Central Bank (ECB). Zentia Labs may change the reference provider provided it maintains a public source of recognized standing and equivalent quality. The rate applied to each booking is recorded in the admin panel and in the monthly report, making the conversion traceable and auditable.

Unless expressly stated otherwise, applicable indirect taxes (VAT, GST or equivalent), duties, and regulatory charges are not deemed included.

7. Billing, payment, and reporting

  • Reporting and invoicing: Bota will automatically issue, on the first business day of each month, a report of bookings and commissions accrued during the previous month, together with the corresponding electronic invoice in the customer’s billing currency.
  • Payment terms and method: the customer will pay each invoice by bank transfer (international SWIFT where applicable) to the account designated by Zentia Labs on the invoice, within fifteen (15) calendar days from the issue date.
  • Bank fees: transfer issuing fees are borne by the customer. Zentia Labs must receive the net invoiced amount free of bank deductions.
  • Indirect taxes: amounts do not include indirect taxes. Zentia Labs will not charge indirect taxes as it is not tax-established in the customer’s jurisdiction. The customer will comply with any tax obligations arising from the cross-border acquisition of the service under its local law.
  • Withholding taxes: if the customer’s law requires withholding taxes, the customer will settle them with the tax authority without reducing the net amount transferred to Zentia Labs, and will deliver the withholding certificate within thirty (30) days following payment.
  • Non-payment: after fifteen (15) calendar days from the due date, Zentia Labs may, upon written notice with five (5) days’ advance notice, suspend the service in whole or in part without that being a contractual breach or giving rise to compensation.

8. Acceptable use

  • Do not use Bota for illegal, fraudulent, or rights-infringing activities.
  • Do not attempt to bypass security controls, extract unauthorized data, degrade the platform, or interfere with normal operations.
  • Do not use Bota to distribute unlawful, misleading, discriminatory, abusive, or otherwise non-compliant content.
  • Do not configure the chatbot to impersonate a real person or to mislead users about the automated nature of the responses where the law requires disclosure.

9. Intellectual property and license

Zentia Labs products, software, documentation, interfaces, brands, and other product elements are owned by Zentia Labs LLC or its licensors.

The customer receives a limited, non-exclusive, revocable, and non-sublicensable license to use the service during the term of the commercial relationship and in accordance with the contract.

10. Confidentiality

Each party undertakes to protect the other party confidential information with a reasonable standard of care and to use it only for performance of the commercial or technical relationship.

11. Availability, maintenance, and changes

  • Zentia Labs will use commercially reasonable efforts to keep Bota available, subject to maintenance, incidents, and third-party dependencies (including LLM providers and WhatsApp Business API).
  • We may introduce improvements, functional changes, or technical adjustments where necessary for the product, security, or legal compliance.
  • Enhanced support commitments or SLA levels apply only where expressly agreed in writing.

12. Brand usage and commercial reference

The customer expressly authorizes Zentia Labs LLC, on a broad, non-exclusive, worldwide, royalty-free basis, to mention its trade name and logo as a customer on the website of the contracted product (including the customer, testimonial, and case-study sections), in commercial presentations, pitch decks, press materials, owned social media, marketing campaigns, press releases, and any other communications materials, for the purpose of evidencing the customer portfolio and promoting the service.

This authorization extends to the production and dissemination of case studies describing the customer’s experience with the service in an aggregated form and with reasonable quantitative metrics (for example, percentage increase in bookings, response-time savings, NPS, conversation volume). Zentia Labs will not disclose personal data of end customers or strategic confidential information of the customer.

If the customer believes that a specific piece does not adequately reflect its positioning, it may request its amendment or withdrawal in writing; Zentia Labs will act diligently.

Each party undertakes not to make public statements that disparage the other party’s reputation.

13. Suspension and termination

  • The customer may stop using Bota at any time, with no minimum term and no penalty: if no bookings are generated through the service, no commissions will accrue.
  • Zentia Labs may suspend or limit access in cases of non-payment, security risk, unlawful use, material breach, or service protection needs.
  • Upon termination, access may be revoked and data will be handled in line with the contract, privacy policy, and applicable retention or deletion process. Obligations that by their nature should survive termination remain in force, including those relating to confidentiality, data protection, limitation of liability, and dispute resolution.

14. Cross-selling and adjacent services

The parties acknowledge that Bota may, in the future, offer the customer additional cross-selling functionality for its end users (for example, accommodation, tourist activities, insurance, transfers, or other services complementary to vehicle rental).

The activation of any cross-selling functionality involving commercial communications to end users will require the customer’s prior written approval and will be governed by a specific annex or addendum defining revenue models, content, legal basis for processing, and consent mechanisms.

15. General provisions

  • Assignment: neither party may assign these terms without the other party’s written consent, except for an assignment to a company of the same group or as a consequence of a corporate transaction (merger, spin-off, sale of the business), in which case notice to the other party will suffice.
  • Notices: notices will be delivered by email to the addresses designated by each party. Notices relating to breach or termination will additionally be sent by a reliable means of delivery.
  • Language: these terms are published in Spanish; should versions in other languages exist, the Spanish version will prevail unless mandatory applicable law provides otherwise.
  • No waiver: failure or delay in exercising any right under these terms will not constitute a waiver of such right.
  • Severability: a declaration of invalidity or unenforceability of any clause will not affect the validity of the remaining provisions, which will remain in force.
  • Entire agreement: these terms, together with any specific contractual documentation that may have been signed with the customer and the applicable annexes, constitute the entire agreement between the parties and supersede any prior agreement on the same subject matter.

16. Limitation of liability and indemnity

To the maximum extent permitted by law, neither party will be liable for indirect damages, loss of profit, loss of business, loss of opportunity, reputational harm, or data loss not directly attributable to a breach by such party, nor for outages caused by third parties outside its reasonable control.

Except where liability cannot lawfully be excluded, Zentia Labs’ aggregate liability arising out of the service is limited to the amounts actually paid by the customer during the 12 months preceding the event giving rise to the claim.

The foregoing limitations and exclusions will not apply in cases of wilful misconduct or breach of confidentiality or data-protection obligations.

Each party will indemnify and hold the other harmless against third-party claims arising out of the breach of its own obligations under these terms or of the content, data, or services it contributes to the service.

17. Governing law and dispute resolution

These terms are governed by the laws of the State of Wyoming (United States of America), without prejudice to mandatory rules applicable to the customer by reason of its domicile.

The parties will resolve any dispute arising out of or relating to the service through the following mandatory, tiered procedure. No party may move to a later stage without first having exhausted the previous ones.

  • (a) Direct negotiation: the affected party will notify the other in writing of the dispute. The commercial representatives of both parties will negotiate in good faith for thirty (30) calendar days from the notification.
  • (b) Mediation: failing agreement, the parties will submit the dispute to mediation under the Mediation Rules of the International Chamber of Commerce (ICC), seated in Madrid, in Spanish, for a maximum of thirty (30) days from the appointment of the mediator. Mediation costs will be shared 50/50.
  • (c) Arbitration: disputes with an amount in controversy exceeding fifty thousand US dollars (USD 50,000) that are not resolved through (a) and (b) will be finally submitted to arbitration under the ICC Rules of Arbitration, before a sole arbitrator, seated in Madrid, in Spanish. The award will be binding and enforceable under the 1958 New York Convention. The parties may voluntarily submit to arbitration disputes equal to or below USD 50,000 by written agreement.
  • (d) Residual jurisdiction: only disputes equal to or below USD 50,000 that have not been resolved through (a) and (b), and for which the parties have not agreed to voluntarily submit to the arbitration in (c), will be exclusively submitted to the competent courts of the State of Wyoming (United States of America).
  • (e) Interim relief: either party may seek urgent interim measures before the competent courts of the other party’s domicile without waiving the procedure agreed herein.

For legal, contractual, or privacy matters, contact info@bota-chat.com.

18. Data Processing Agreement (DPA)

By accepting these terms, the customer (data controller) and Zentia Labs LLC (data processor) agree to the following conditions regarding the processing of personal data carried out in the context of providing Bota.

Scope and roles

Zentia Labs acts as data processor solely with respect to the operational data processed on behalf of the customer in the context of providing Bota. The customer retains its status as data controller over such data.

Processing locations

Zentia Labs processes the customer’s personal data from the following locations: (i) United States of America (registered office and primary cloud and AI subprocessors); (ii) Spain (authorized personnel); and (iii) Colombia (authorized personnel). By accepting these terms, the customer expressly authorizes these locations and undertakes to reflect them in the information provided to its end users whenever applicable law so requires.

Data processed

  • Chat messages and conversational content (web widget and WhatsApp).
  • IP addresses and visitor identifiers.
  • WhatsApp messages and conversation metadata.
  • Booking data: name, email, phone, dates, vehicle preferences.
  • Booking intents and data extracted by the AI during the conversation.
  • Usage metadata: timestamps, source channel (web/WhatsApp), language.

Sub-processors

Zentia Labs uses the following sub-processors to deliver Bota, belonging to standard technology categories whose use the customer expressly authorizes (AI model providers, cloud infrastructure, messaging, payment gateway, transactional email, and observability):

  • Anthropic — language model provider (LLM) for generating conversational responses.
  • Upstash — real-time cache and storage (Redis).
  • Google Cloud Platform — infrastructure, compute, and storage.
  • Stripe — payment processing and billing.
  • Resend — transactional email (verifications, confirmations, notifications).
  • Brevo — CRM and marketing email.

Zentia Labs will notify the customer with reasonable advance notice of any material change of sub-processors with impact on the processing of personal data. The customer may object on reasonable, justified grounds; if no agreement can be reached, the customer may terminate the contract without penalty.

Security measures

  • Encryption in transit (TLS 1.3) and at rest.
  • Role-based access control with least-privilege principle.
  • Audit logs and security event monitoring.
  • Periodic review of sub-processors and vendors.

Retention and deletion

Chat and WhatsApp conversations and their associated AI usage records, in identifiable form, are retained for 90 days from the last message. Data derived from service use in aggregated, anonymized, or pseudonymized form may be retained for up to twenty-four (24) months for service improvement and defence of claims, after which they will be irreversibly deleted or anonymized, except where legal retention obligations apply.

Aggregated analytics that do not contain conversational content are retained for 1 year. Account and billing data is kept until a deletion request is made or as required by law.

Upon request from the controller, Zentia Labs will delete the data within a maximum period of 30 days, except where legal retention obligations apply (Article 17(3) GDPR — open contracts, accounting obligations, legal claims).

International transfers

The international transfers inherent to the service (United States – Spain – Colombia triangle and subprocessors outside the EEA) are governed by the safeguards recognized under applicable law, in particular the Standard Contractual Clauses (SCCs) adopted by the European Commission under Decision (EU) 2021/914, Module 2 (Controller to Processor), and the model clauses published by the Colombian Superintendence of Industry and Commerce (SIC). This DPA constitutes, by itself, the contractual safeguard mechanism between the customer and Zentia Labs. For additional transfers to subprocessors, Zentia Labs relies on the DPAs and transfer clauses published by those providers.

Audit and compliance evidence

Upon the customer’s reasonable request, Zentia Labs will provide sufficient documentary information to evidence compliance with this DPA (description of technical and organizational measures, up-to-date list of sub-processors, valid certifications if any). Any on-site audit or additional inspection required by the customer will be carried out, upon reasonable and justified request, with at least thirty (30) days’ prior notice, without disrupting Zentia Labs’ operations, and at the customer’s expense, unless a material breach by Zentia Labs is established, in which case Zentia Labs will bear its reasonable direct costs.

Permitted use for service improvement

Zentia Labs may process aggregated, anonymized, or pseudonymized data derived from the use of Bota for (i) provision and technical improvement of the service, (ii) internal training and evaluation of the AI models used, (iii) aggregated statistical analyses of the sector, and (iv) development of new features and adjacent services. Any future cross-selling functionality or additional commercial communication to the customer’s end users will only be activated upon the customer’s written acceptance and with the appropriate legal basis and consents.

Breach notification

Zentia Labs will notify the customer of any security breach affecting personal data within a maximum of 72 hours from detection, providing the information needed for the customer to comply, where applicable, with its notification obligations to the competent authority and to data subjects.

This data processing agreement is incorporated by reference into these terms of service. By accepting the terms, the customer also accepts the data processing conditions described herein.

Contact

General contact
info@bota-chat.com
Controller
Zentia Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA