Privacy Policy

This policy explains what personal data pandorabot.io collects, why, where it goes, and how you exercise your rights under the UK GDPR and the EU General Data Protection Regulation.

Who controls your data

The data controller is SmartyAI Ltd (company number 15254574), 20 Wenlock Road, London N1 7GU, United Kingdom. For anything concerning your data, write to info@pandorabot.io.

What we collect

When you submit the AI Profit Scan form

Only what you type into it:

• Email address — required, so we can send you the report.
• Business website — required, it is the subject of the analysis.
• Instagram profile — optional.
• Phone number — optional.

We do not ask for and do not need payment details, passwords, or access to any of your systems in order to run the scan.

When you simply browse

We use Google Analytics 4 and Google Tag Manager, which collect usage data such as pages viewed, approximate location, device type and referral source, using cookies. You can read the site without telling us who you are.

What the AI Profit Scan looks at

The scan analyses publicly available business signals only: your public website, your public social profile, and public search signals.

Where your data goes

To produce and deliver the report, the form submission is sent to the analysis service we operate on Google Cloud Run, and from there to:

Some of these providers process data outside the UK and the European Economic Area, under the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses. We do not sell personal data.

If you call a PandoraVoice number

PandoraVoice is an AI voice agent that our customers use to answer their own business telephone lines. If you telephone a business that uses it, you are told at the start of the call that you are speaking to an automated assistant and that the call is recorded.

In that situation the business you called is the data controller and decides why the call happens, what is asked and how long the recording is kept. SmartyAI Ltd acts as their processor, under a written agreement. Requests to access or erase a call recording should go to that business, and we will support them in answering you.

The call audio, its transcript and a short summary are processed to complete what you asked for on the call, to write the outcome into the systems the business operates, and to give both sides an accurate record of what was agreed. Retention is set by the business, not by us.

Legal basis

• Performance of a contract / pre-contractual steps — to deliver the report you asked for.
• Legitimate interests — to operate, secure and improve the site and the service.
• Consent — for analytics cookies and for any marketing that is not a reply to your request. You can withdraw it at any time.

How long we keep it

We keep the request and the report for as long as needed to provide them and to answer follow-up questions. You can ask us to delete your data at any time and we will do so without undue delay.

Your rights

You have the right to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object, and rights relating to automated decision-making and profiling.

To exercise any of them, email info@pandorabot.io. You may also complain to a supervisory authority — the Information Commissioner's Office (ico.org.uk) in the UK, or the Hellenic Data Protection Authority (dpa.gr) if you are in Greece.

Security

Data is transmitted over HTTPS and held in controlled environments with restricted access. No transmission over the internet is completely secure, so we cannot guarantee absolute security.

Links to other sites

This site links to services we do not control. We are not responsible for their privacy practices — read their own policies.

Changes

We may update this policy. The date it was last changed is shown below.