Privacy Policy
This policy explains what personal data pandorabot.io collects, why, where it goes, and how you exercise your rights under the UK GDPR and the EU General Data Protection Regulation.
Who controls your data
The data controller is SmartyAI Ltd (company number 15254574), 20 Wenlock Road, London N1 7GU, United Kingdom. For anything concerning your data, write to info@pandorabot.io.
What we collect
When you submit the AI Profit Scan form
Only what you type into it:
- Email address — required, so we can send you the report.
- Business website — required, it is the subject of the analysis.
- Instagram profile — optional.
- Phone number — optional.
We do not ask for and do not need payment details, passwords, or access to any of your systems in order to run the scan.
When you simply browse
We use Google Analytics 4 and Google Tag Manager, which collect usage data such as pages viewed, approximate location, device type and referral source, using cookies. You can read the site without telling us who you are.
What the AI Profit Scan looks at
The scan analyses publicly available business signals only: your public website, your public social profile, and public search signals.
The scan does not access your CRM, financial records, advertising accounts or customer data. It connects to no private system of yours without your explicit, separate authorisation.
Where your data goes
To produce and deliver the report, the form submission is sent to the analysis service we operate on Google Cloud Run, and from there to:
| Recipient | Purpose |
|---|---|
| Google Cloud (Cloud Run, Firestore) | Runs the analysis and stores the request |
| Google Gemini | Generates the analysis and recommendations |
| Apify | Collects public signals from the web |
| SendGrid | Sends the confirmation email and the report |
| GoHighLevel | CRM record, so we can respond to your request |
| Google Analytics / Tag Manager | Website usage statistics |
Some of these providers process data outside the UK and the European Economic Area, under the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses. We do not sell personal data.
Legal basis
- Performance of a contract / pre-contractual steps — to deliver the report you asked for.
- Legitimate interests — to operate, secure and improve the site and the service.
- Consent — for analytics cookies and for any marketing that is not a reply to your request. You can withdraw it at any time.
How long we keep it
We keep the request and the report for as long as needed to provide them and to answer follow-up questions. You can ask us to delete your data at any time and we will do so without undue delay.
Your rights
You have the right to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object, and rights relating to automated decision-making and profiling.
To exercise any of them, email info@pandorabot.io. You may also complain to a supervisory authority — the Information Commissioner's Office (ico.org.uk) in the UK, or the Hellenic Data Protection Authority (dpa.gr) if you are in Greece.
Security
Data is transmitted over HTTPS and held in controlled environments with restricted access. No transmission over the internet is completely secure, so we cannot guarantee absolute security.
Links to other sites
This site links to services we do not control. We are not responsible for their privacy practices — read their own policies.
Changes
We may update this policy. The date it was last changed is shown below.
SmartyAI Ltd · Company number 15254574 · Last updated 21 August 2026