Privacy Policy | OverToBot

Template notice. This policy describes how this website is built to handle data. Items in [square brackets] must be completed, and the text should be reviewed by a qualified legal professional for your jurisdiction before launch.

1. Who we are

This website (overtobot.com) is operated by [OverToBot legal entity name], [registered address] ("OverToBot", "we", "us"). For privacy questions, contact us through the contact form or at [privacy contact email].

2. Information we collect

Information you provide

When you submit the contact or consultation form, we collect the details you choose to provide, which may include:

Name, organization, email address, phone and WhatsApp numbers, country and company website
Information about your project: service required, project type, estimated budget, timeline, current systems, AI requirements, problem description and desired outcome
Your preferred contact method and any additional information
Your consent confirmation and the page the form was submitted from

Information collected automatically

Security data: to prevent spam and abuse, our server processes your IP address to apply rate limits. It is stored only in a one-way hashed form and deleted automatically after a short period.
Session cookie: a strictly necessary cookie that protects forms against cross-site request forgery. See our Cookie Policy.
Preferences: your theme choice and cookie decision are stored in your own browser, not on our servers.
Analytics (optional): only if analytics are enabled on this site and you accept analytics cookies.

3. How we use your information

To respond to your inquiry and discuss your project
To prepare recommendations, proposals or estimates you have asked for
To protect the website against spam, fraud and abuse
To understand, in aggregate, how the site is used (only with your consent)

We do not sell your personal information, and we do not use inquiry details for unrelated marketing without your separate consent.

4. Legal basis

Where data-protection law requires a legal basis, we rely on your consent (given with the form checkbox and the analytics banner), on steps taken at your request before entering into a contract, and on our legitimate interest in keeping the website secure. [Adjust to your jurisdiction.]

5. How your information is stored and protected

Forms are submitted over an encrypted HTTPS connection.
Submissions are validated and sanitized on our server before being stored.
Inquiries are stored in a private file on our server that is not accessible from the public internet. In future this may be replaced by a secure database, CRM or spreadsheet service offering equivalent protection.
Access is limited to people who need it to respond to inquiries.

6. Sharing

We share personal information only with service providers who help us operate the website and respond to inquiries (for example hosting providers, and analytics providers if you have consented), under appropriate confidentiality and data-protection terms, or where required by law. [List providers here.]

7. Retention

We keep inquiry details for as long as needed to respond and follow up, and for up to [24 months] afterwards unless a business relationship requires longer. Security records such as hashed rate-limit data are kept for no more than 24 hours.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. To make a request, contact us using the details above. You may also have the right to complain to your local data-protection authority.

9. International transfers

[Describe where the server and any service providers are located, and the safeguards used for international transfers, if applicable.]

10. Children

This website is intended for businesses and organizations and is not directed at children.

11. Changes

We may update this policy. The "Last updated" date above shows when it last changed.