Privacy
Policy.
Effective date: 29 October 2026
GoPro Consultants Ltd operates gobotAi ("GoBot", "we", "us"). Our ICO registration number is ZC192395. Privacy enquiries: privacy@gobotai.ai. Support: support@gobotai.ai. Privacy postal enquiries: Office 3.5, Stanley House, Stanley Business Centre, Crawley, West Sussex, RH10 9SE, United Kingdom.
1. Who is responsible for your information
We act as controller for our website visitors, account holders, staff contacts, billing, support, security and our own legal and fraud-prevention activities. When GoBot handles calls, messages, appointments and customer records for a business, that business normally acts as controller and GoBot processes the information on its behalf. Callers should contact the business they called about its use of their information. You may also contact our privacy address so we can help identify the appropriate business.
2. Information we handle
- Account and business information, including names, email addresses, telephone numbers, business addresses, settings and authentication information.
- Business verification information, Companies House and Google business-listing information, and identity or address documents supplied where verification requires them.
- Billing information, subscriptions, invoices and payment status. Stripe processes payment-card details.
- Call and message information: telephone numbers, times, durations, delivery status, information callers provide, appointment details, transcripts, summaries and recordings where recording is enabled.
- Business knowledge supplied or imported for the receptionist, including services, prices, opening hours, public website content and uploaded documents. Vehicle registration and MOT information may be used where the relevant business uses vehicle lookup.
- Support messages, technical and security logs, account activity, allowance usage and information used to investigate misuse or duplicate trials.
- Website and advertising information, including page visits, browser or cookie identifiers and campaign attribution, subject to the available consent choices.
Please avoid including sensitive personal information in business knowledge or support messages unless it is necessary. Businesses are responsible for the information they ask GoBot to process and the notices and permissions needed for their callers.
3. Why we use information
We use information to create and operate accounts, provide the receptionist and related services, verify businesses, allocate and manage numbers, handle appointments and messages, manage trials and subscriptions, provide support and service notifications, and maintain security and investigate misuse.
For our controller activities, the applicable lawful basis depends on the purpose: performing our contract; complying with legal obligations; our legitimate interests in operating and protecting the service and responding to enquiries; or consent where required for optional advertising technologies or marketing. You can object to processing based on legitimate interests and withdraw consent for consent-based processing. Withdrawing advertising consent does not cancel your service account.
Business verification uses automated business-information checks and human review. Our current verification implementation does not include an automated sanctions-screening provider. Contact support if you want a person to review a verification issue.
4. Calls, AI and business instructions
GoBot uses AI speech and language services to understand and answer callers and produce information such as transcripts and summaries. Call announcements identify the AI receptionist; recording depends on the business configuration. AI output can be inaccurate, so businesses should check their information and important outcomes.
The business using GoBot determines its purposes for caller information and its receptionist configuration. Its own privacy notice should explain those purposes and any additional data it collects. We do not sell caller information.
5. Providers and other recipients
GoPro Consultants Ltd operates GoBot and its internal support-ticket system. External services used in the current setup include:
- Hostinger: website hosting and transactional email, including account verification, welcome, notifications and support-related email.
- Google Cloud and Vertex AI: application infrastructure, storage and AI speech and language processing.
- Twilio: telephone numbers, calls, SMS and telephone verification, together with the networks carrying those communications.
- Stripe: payments and subscriptions.
- Companies House and Google Places: business-information and listing lookups.
- DVSA MOT History: vehicle and MOT lookup where used.
- Jina Reader: reading public website pages for business imports where a direct fetch is unavailable.
- Google advertising services, Meta and TikTok: website advertising measurement where enabled, subject to consent choices.
Information may also be disclosed to professional advisers, regulators, courts or law enforcement where necessary and permitted or required by law, or to parties involved in a business restructuring or sale with appropriate confidentiality arrangements. Customer-configured integrations may receive information when the business enables them.
6. Processing locations and transfers
GoBot is operated for UK businesses, but processing is not limited to the UK. Google Cloud services use service-specific regions and settings. The current database backup bucket is in the Netherlands and the separate VM backup bucket is in the EU. AI and communications processing locations depend on the service, routing and business settings; we do not promise that all processing remains in London or in a single region.
Providers may process information outside the UK, including in the EEA and the United States. The transfer arrangements applicable to a particular provider and service may include UK adequacy regulations or contractual safeguards. Contact privacy@gobotai.ai for information about the arrangements relevant to your data.
7. Retention and deletion
Different records follow different processes. Closing an account, deleting live content and removing backup copies are separate actions. We do not promise that account closure instantly deletes all information or that every record has the same expiry.
| Information | Current retention behaviour |
|---|---|
| Caller content covered by the retention process | The current default is 365 days where no business-specific policy applies. A call-specific retention policy is recorded when the call occurs. The content-removal process does not remove every call record, telephone number, audit record or associated backup. |
| Uploaded verification documents | Scheduled for deletion 365 days after upload. Verification decisions and audit records are separate from the uploaded documents. |
| Account, support, billing, verification decisions, security, misuse, traffic and trial-eligibility records | These are not all covered by the caller-content deletion timer. Their retention depends on the account or enquiry, outstanding billing or disputes, security and fraud investigations, applicable legal obligations and the record involved. There is no single verified automatic expiry for all these categories. Contact us for record-specific retention information or an erasure request. |
| Production database backups | The current cloud lifecycle rule makes objects eligible for deletion 180 days after creation. Deleted objects have a further seven-day recovery window. A separate 30-day minimum retention setting prevents early deletion; it does not mean backups expire after 30 days. Lifecycle processing is asynchronous, so these are not exact-day deletion guarantees. |
| Separate VM backups | The current EU storage bucket has no automatic age-based deletion rule. It is separate from the database-backup lifecycle, so we do not describe every backup as automatically deleted after 180 days. |
| Website cookies and advertising storage | See our cookie information and the available Cookie settings control for consent choices. Provider storage and expiry can differ by technology. |
Deletion requests are assessed against the information held, our role, the business controller's instructions and any applicable legal exception. Information that must be retained for a legal claim or obligation may not be erased immediately. Contact us if you need details about a particular record or backup.
8. Cookies and advertising choices
The website uses Google Tag Manager to manage measurement tags and uses Google advertising measurement, Meta Pixel and TikTok Pixel where configured. Optional advertising measurement follows the advertising-consent choice. You can reject optional cookies or change your choice using Cookie settings. A visit to a signup page is different from a completed registration; measurement setup and provider reporting may differ. We do not treat a tracking report as proof that a service account was successfully created.
9. Your rights and contact details
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing, including direct marketing. You may withdraw consent where processing relies on it and request human review of a relevant automated decision. These rights have legal conditions and exceptions.
Email privacy@gobotai.ai. We may need to confirm your identity and normally respond within one month; the law permits extensions in some circumstances. If your request concerns a business's caller records, contact that business first or ask us to help route the request.
You may complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or telephone 0303 123 1113.
10. Security and children
GoBot uses access controls, encryption appropriate to the service and storage, and audit logging. Security controls and processing locations differ between services. No system is completely secure. We handle personal-data incidents and notifications as required by applicable law and our role.
GoBot is a business service and is not directed at children. Businesses should not configure it to target children without considering the relevant legal requirements.
11. Changes to this notice
We may update this notice when the service or its processing changes. The effective date identifies this version. Material changes may also be communicated through the service or by email.