Privacy Notice

Last updated: 23 October 2026 · prepared revision

Prepared for invited Android beta testing; not yet adopted as the live notice. The existing published notice remains in force until this revision is approved and published. This page does not announce a public Android release or activate voice.

AUTOBOTSZ is operated by AUTOBOTSZ COMMERCE OS LTD, company number 17484053, registered in England and Wales.

Registered office:
Unit 4, 241, Autobotsz Commerce Os Ltd, Waterloo Street, Bolton, United Kingdom, BL1 8HU.

Privacy contact: privacy@autobotsz.com

1. Who we are

AUTOBOTSZ COMMERCE OS LTD is responsible for deciding how and why personal information collected for website enquiries, account administration and our service security is used.

Where we handle a business organisation’s information on its instructions, that organisation may be the controller and AUTOBOTSZ its processor. The applicable service agreement determines those roles; we can help route requests to the relevant organisation.

Privacy contact: privacy@autobotsz.com

2. What this notice covers

This notice explains how we handle personal information when you:

• visit the AUTOBOTSZ website;
• complete an Automation Assessment;
• contact us about our services;
• use an authorised account or Command Centre;
• participate in the invited Android beta, including optional uuko voice where enabled; or
• otherwise interact with website functions that process personal information.

Initial Android distribution is for invited beta testers only. Voice is part of the planned controlled beta, conditional on informed microphone opt-in and verified technical and privacy arrangements. It is not a public voice service. The Android app displays remotely hosted pages: information can leave the phone, and installation does not make the service offline.

It does not describe all processing arrangements that may apply to future customer automation implementations. Those arrangements will depend on the services, systems, permissions and data involved and may require separate contractual and privacy documentation.

3. Information we collect

Automation Assessments

When you submit an Automation Assessment, we currently ask for:

Required information:

• your name;
• business email address; and
• industry.

Optional information may include:

• company name;
• website;
• main business challenge;
• activities taking most of your time;
• systems currently used;
• processes you would like to automate;
• preferred level of human control or approval; and
• for ecommerce businesses, information such as sales channels, listing volumes and approximate monthly order volumes.

Please do not submit passwords, API keys, account credentials, patient information, confidential client information or other sensitive personal information through the Automation Assessment or general enquiry routes.

Owner access

Authorised owner access may process information including an email address, authentication credentials and session information required to provide and secure the sign-in service.

Invited accounts and authorised business use

Account and service information can include your account identifier, verified profile, membership, organisation details, device registration and security events. Authorised Command Centre use can involve workflow, approval, exception and audit records within your organisation’s permissions. Demonstrations do not establish that connected services are active.

uuko text assistance

uuko is an AI assistant, not a human adviser. The currently reviewed website and ordinary Command Centre answer paths use prepared or deterministic service logic. Interaction audit records can include an account or actor identifier, intent, outcome, message length and a content fingerprint. A fingerprint is not proof that text is never retained elsewhere.

Other separately enabled AI features may send messages and permitted context through an AI processing service to a model provider. Those recipients and processing terms must be identified before that feature is offered; this notice does not represent that a model provider receives every uuko message. Check important answers and avoid unnecessary sensitive information.

Technical information

Our hosting and infrastructure providers may process technical information necessary to provide, secure and operate the website, such as IP addresses, request information, browser/device information, security events and technical logs.

The AUTOBOTSZ application is not currently configured to operate advertising tracking, behavioural analytics, heatmaps or session-recording tools.

4. How we use personal information

We may use personal information to:

• receive and respond to Automation Assessments and enquiries;
• understand the business processes and automation requirements you ask us to consider;
• communicate with you about a requested assessment or potential service;
• prepare for or take steps towards providing requested services;
• administer and secure authorised owner access;
• protect the website, systems and information from misuse or security threats;
• troubleshoot technical problems;
• maintain appropriate business and compliance records; and
• establish, exercise or defend legal rights where necessary.

We do not currently use website assessment information for automated marketing campaigns.

5. Our lawful bases

The lawful basis depends on why we use the information.

Where you ask us to assess requirements, provide information about a potential service, prepare a proposal or take other steps at your request before entering into a contract, we may rely on processing necessary to take steps at your request before entering into a contract.

For appropriate business administration, security, responding to business enquiries and protecting our systems or legal interests, we may rely on our legitimate interests where those interests are not overridden by your rights and interests.

Where processing is necessary to meet a legal obligation, we may rely on that legal obligation.

Where another lawful basis is required for a particular activity, we will identify and apply the appropriate basis before carrying out that processing.

Account and agreed service processing may rely on contract where applicable, or legitimate interests for administering a business organisation’s authorised users. Optional microphone use requires an informed choice; Android permission alone does not establish a lawful basis for every downstream use. Any processing that requires consent must have an appropriate withdrawal mechanism.

6. Who processes or receives information

We use service providers and infrastructure to operate the website and related functions.

Our website and application use third-party cloud infrastructure and service providers to support hosting, security and operation of the platform.

The primary application database currently used by the AUTOBOTSZ website is provisioned in Ireland.

Infrastructure used to deliver the website may operate through distributed networks and other provider locations.

Our hosted platform uses cloud hosting, database and authentication providers. Controlled voice uses speech-recognition and speech-generation processors as described below. Separately enabled AI-processing services and downstream model providers may receive permitted messages or context; they must not be assumed to have the same data path or terms as voice.

We may also disclose information where required by law, to protect legal rights, or to professional advisers where reasonably necessary and subject to appropriate confidentiality requirements.

7. WhatsApp

AUTOBOTSZ provides links that allow you to choose to contact us using WhatsApp.

Simply viewing an AUTOBOTSZ page does not, based on our current implementation, cause the website to send information to WhatsApp merely because the link is displayed.

If you choose to activate a WhatsApp link, you leave or interact outside the AUTOBOTSZ website environment and WhatsApp will process information under its own applicable terms and privacy arrangements.

A pre-filled greeting may be provided for convenience. You control whether you edit and send that message.

8. International processing

Our primary application database is currently provisioned in Ireland.

However, some infrastructure and service-provider processing may take place in, or be accessible from, other countries depending on the service involved.

Where applicable, appropriate contractual or legal safeguards should be used for restricted transfers of personal information.

We do not represent that every category of AUTOBOTSZ website data is processed exclusively in the UK or Ireland.

9. How long we keep information

We aim to keep personal information only for as long as reasonably required for its purpose.

Our current retention approach is:

• Non-converted enquiries: normally retained for up to 12 months from the last meaningful contact, unless there is a legitimate reason to retain them for longer.
• Converted customers: relevant assessment or enquiry information may become part of the customer record and will then follow the applicable customer, contractual, accounting, legal or compliance retention requirements.
• Spam and junk submissions: deleted as soon as reasonably identified.
• Test and QA records: deleted once they are no longer reasonably required for testing or evidence.

A legal, regulatory, dispute, fraud, security or other legitimate hold may temporarily override a normal deletion date where continued retention is necessary.

Deletion from active systems may not always result in immediate removal from provider-managed backup copies. Residual copies may remain temporarily within backups until they expire, are overwritten or otherwise cease to be retained under the provider's applicable backup arrangements.

We are still confirming the precise backup retention arrangements applicable to the current managed infrastructure and therefore do not state a fixed backup-expiry period here.

Account, device, workflow, audit, support, technical and voice-related records require purpose-specific retention and deletion arrangements. Exact provider periods, backup expiry and any model-improvement use remain under verification. We do not promise a universal retention period, zero provider retention or immediate erasure of all copies.

10. Security

We use technical and organisational controls intended to protect personal information appropriate to the nature of the service.

Current website controls include restricted database access, permission-based administration and authentication controls.

No internet-based service can guarantee absolute security.

Please do not send passwords, API keys or other account credentials through our Automation Assessment or general website enquiry routes.

11. Automated decision-making

The current public website Automation Assessment does not make solely automated decisions producing legal or similarly significant effects about you.

Information submitted through an assessment may be used to help us understand your requirements and determine what automation may be appropriate to explore.

12. Your information rights

Depending on the circumstances and lawful basis involved, UK data protection law may give you rights relating to your personal information, including rights to:

• access information held about you;
• have inaccurate information corrected;
• request deletion in applicable circumstances;
• request restriction of processing in applicable circumstances;
• object to certain processing;
• receive certain information in a portable format where applicable; and
• withdraw consent where processing is based on consent.

Not every right applies in every circumstance.

To exercise a right or ask a privacy question, contact:

privacy@autobotsz.com

We may need to take reasonable steps to verify identity before acting on a request.

You can request deletion of your AUTOBOTSZ account and associated personal information outside the app. Requests are human-reviewed, not automatic deletion. Uninstalling or signing out does not delete hosted records. Business records controlled by another organisation and legally required records need separate assessment.

13. Your right to object

Where we rely on legitimate interests to process your personal information, you may have the right to object to that processing.

We will consider any objection in accordance with applicable data protection law.

14. Complaints

If you are concerned about how AUTOBOTSZ has handled your personal information, please contact:

privacy@autobotsz.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

15. Links to other services

Our website may contain links to external services such as WhatsApp or third-party platforms.

Once you follow an external link, that organisation may process information under its own terms and privacy arrangements. AUTOBOTSZ does not control the privacy practices of independent external websites or services.

16. Changes to this notice

We may update this Privacy Notice as AUTOBOTSZ services, systems, providers or legal requirements change.

The current version and its update date will be displayed on this page.

17. Optional uuko voice in the invited Android beta

Voice is a planned controlled tester feature, not categorically excluded from beta testing. It is available only where the invited account, approved environment and technical and privacy checks permit it. Telephone receptionist calls, live child services and background listening are not authorised by this beta scope.

Your choice and microphone controls

Before starting, read the microphone notice and choose Start talking. You can choose Not now and continue by typing. The Android microphone permission is an additional device choice. Use End conversation to stop; you can also revoke microphone permission in Android settings. The intended service is a foreground conversation, not always-on listening; permission, stop, mute and background behaviour must be verified on the beta build before tester capture.

Please avoid passwords, payment card details, confidential client records, medical information and other sensitive information. Voice does not prove identity or authorise approvals or consequential actions.

What is processed and who receives it

In the reviewed voice path, microphone audio is sent through our hosted service to a speech-recognition processor to convert speech into text. The transcript is returned to the existing uuko answer service. Reply text is sent to the same supplier’s speech-generation service to generate spoken audio, which is returned for playback on your device. Audio and reply text therefore leave the phone; this is not offline speech processing.

The ordinary reviewed website and Command Centre voice answers use the same deterministic answer paths as text assistance, not a separate model-gateway call. Any additional enabled AI processing of transcripts or context requires its own identified recipients and disclosure before use.

Conversation information, logs and retention

The conversation can involve microphone audio, transcripts, reply text, generated audio and session information. Captions are displayed in the conversation. Service logs include session identifiers, mode, timings, durations, character counts and end or failure reasons; hosting and security services may also handle IP addresses and request or error information. Ending a session does not establish that all these records have been erased.

The reviewed speech relay does not deliberately write audio or transcripts to a recording file. This is not a guarantee that our infrastructure or speech-processing supplier retains nothing. That supplier’s account-specific retention, deletion, model-improvement use, processing locations, subprocessors and applicable contract and international-transfer safeguards have not yet been verified for this beta. We do not claim no recordings, no training use, UK-only processing or a fixed deletion period.

Those arrangements and the applicable lawful basis must be confirmed before controlled tester voice processing begins. Contact privacy@autobotsz.com for privacy questions or to make a data request. In-app voice testing does not enable telephony, payments, child audio or new business integrations.