Privacy Policy
Effective Date: December 15, 2024
Last Updated: December 15, 2024
SetupBots ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our AI-powered tools. Please read this policy carefully. By using our Services, you consent to the practices described herein.
Table of Contents
1. Information We Collect
1.1 Information You Provide Directly
We collect information you voluntarily provide, including:
- Contact Information: Name, email address, phone number, company name, job title
- Account Information: Username, password, and profile details
- Business Information: Website URL, industry, company size, revenue range, marketing spend
- Audit Data: Information entered into our AI audit tools, including website URLs and business details
- Communications: Messages, inquiries, and feedback you send us
- Payment Information: Billing address and payment details (processed securely by third-party payment processors)
- Service Data: Information provided during the course of service delivery
1.2 Information Collected Automatically
When you access our Platform, we automatically collect:
- Device Information: Device type, operating system, browser type and version, screen resolution
- Log Data: IP address, access times, pages viewed, referring URL, clickstream data
- Location Data: Approximate geographic location based on IP address
- Usage Data: Features used, actions taken, time spent on pages, interaction patterns
- Cookie Data: Information collected through cookies and similar technologies (see Section 6)
1.3 Information from Third Parties
We may receive information from:
- Analytics Providers: Google Analytics, Semrush, and similar services
- Advertising Partners: Meta, Google Ads, and other advertising platforms
- Public Sources: Publicly available information about your company
- Integration Partners: Services you connect to our Platform
- Referral Sources: Information provided by referring parties
2. AI & Automated Processing
AI Technology Disclosure
SetupBots uses artificial intelligence and machine learning technologies. This section describes how your data may be processed by AI systems.
2.1 AI-Processed Data
The following types of data may be processed by AI systems:
- Website URLs and publicly available website content
- Business information provided during audits or consultations
- User queries and interactions with AI-powered features
- Content submitted for analysis, optimization, or generation
2.2 Third-Party AI Providers
We utilize third-party AI services, which may include:
- OpenAI: For natural language processing and content generation
- Anthropic: For AI-powered analysis and recommendations
- Google AI: For various AI and machine learning capabilities
- Other Providers: Additional AI services as needed for service delivery
Data sent to third-party AI providers is subject to their respective privacy policies and terms of service. We select providers with appropriate data protection measures, but we cannot guarantee their practices.
2.3 Automated Decision-Making
Our Services may involve automated decision-making, including:
- Lead scoring and prioritization
- Content recommendations and personalization
- Audit results and opportunity identification
- Pricing estimates and projections
These automated processes are designed to enhance service delivery but are not used as the sole basis for decisions that significantly affect individuals. You may request human review of automated decisions where legally required.
2.4 AI Training
Unless you opt out, anonymized and aggregated data may be used to improve our AI models and services. Personal information is not used for training third-party AI models without explicit consent.
3. How We Use Your Information
We use collected information for the following purposes:
3.1 Service Delivery
- Provide, operate, and maintain our Services
- Process and complete transactions
- Perform website audits and analyses
- Generate recommendations and deliverables
- Communicate with you about projects and services
3.2 Improvement & Development
- Understand how users interact with our Platform
- Develop new products, services, and features
- Improve and optimize user experience
- Train and improve AI models (with appropriate safeguards)
- Conduct research and analytics
3.3 Marketing & Communications
- Send promotional materials and newsletters (with consent)
- Provide personalized content and recommendations
- Display targeted advertisements
- Conduct surveys and collect feedback
3.4 Legal & Security
- Comply with legal obligations and requests
- Enforce our terms and policies
- Protect against fraud, abuse, and security threats
- Respond to legal process and government requests
- Protect our rights and property
4. Legal Basis for Processing
We process personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contractual obligations to you
- Consent: Processing based on your explicit consent, which you may withdraw at any time
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, marketing, and fraud prevention, balanced against your privacy rights
- Legal Obligation: Processing necessary to comply with applicable laws and regulations
7. Data Retention
We retain personal information for as long as necessary to:
- Fulfill the purposes described in this Privacy Policy
- Provide Services and maintain business records
- Comply with legal, accounting, and reporting requirements
- Resolve disputes and enforce agreements
Specific retention periods:
- Account Data: Duration of account plus 3 years
- Transaction Records: 7 years (for tax and legal compliance)
- Audit Data: 2 years from audit completion
- Marketing Data: Until consent is withdrawn plus 1 year
- Log Data: 12-24 months
After the retention period, data is securely deleted or anonymized.
8. Data Security
We implement industry-standard security measures, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication requirements
- Regular security assessments and monitoring
- Secure data centers with physical security controls
- Employee training on data protection
- Incident response procedures
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal exceptions)
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Restriction: Request restriction of processing in certain circumstances
- Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Opt-Out of Sale: Opt out of the "sale" of personal information (where applicable)
To exercise these rights, contact us at privacy@setupbots.com. We will respond within the timeframe required by applicable law (typically 30-45 days).
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using our Services, you consent to such transfers.
For transfers from the European Economic Area, UK, or Switzerland, we rely on:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Your explicit consent where required
11. Children's Privacy
Our Services are not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it. If you believe we have collected information from a child, please contact us immediately.
12. California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
12.1 Categories of Information
In the past 12 months, we have collected the following categories of personal information:
- Identifiers (name, email, IP address)
- Commercial information (transaction history)
- Internet activity (browsing history, interactions)
- Professional information (company, job title)
- Inferences (preferences derived from other data)
12.2 Your Rights
- Right to Know: Request disclosure of information collected, used, and shared
- Right to Delete: Request deletion of personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of "sale" or "sharing" of personal information
- Right to Limit: Limit use of sensitive personal information
- Non-Discrimination: We will not discriminate against you for exercising your rights
12.3 Do Not Sell or Share
We may "share" personal information with advertising partners for targeted advertising purposes, which may constitute a "sale" under California law. To opt out, contact us at privacy@setupbots.com or use the "Do Not Sell My Info" link on our website.
12.4 Authorized Agent
You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization and we may require verification of your identity.
13. GDPR Compliance (EEA/UK Users)
If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
- All rights listed in Section 9 above
- Right to Lodge Complaint: You may lodge a complaint with your local data protection authority
- Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you, and to request human intervention
Data Controller: SetupBots is the data controller for personal data collected through our Services.
Contact for GDPR Inquiries: privacy@setupbots.com
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Post a notice on our website or notify you by email (for significant changes)
- Obtain consent where required by law
Your continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.
15. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Privacy Inquiries: privacy@setupbots.com
- General Inquiries: hello@setupbots.com
- Website: setupbots.com
We will respond to all privacy-related inquiries within 30 days (or sooner if required by applicable law).
By using SetupBots Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.