Privacy Policy
Last Updated: April 20, 2026
1. Introduction
Botless Systems ("we," "us," "our") is a Los Angeles–based digital agency offering web design, SEO, and software development services. This policy explains what personal information we collect from visitors to botless.systems, how we use it, and the rights you have over it. We serve business clients nationwide; this site is not directed at children.
By using this website or contacting us, you agree to this policy.
2. Information We Collect
We collect only what we need to respond to inquiries and run our business:
- Contact form submissions: name, email address, project type, optional budget range, and the contents of your message. For abuse prevention we also record the IP address, browser user agent, and referring URL at the moment of submission.
- Chatbot conversations: text you send to our on‑site assistant, plus any contact details you voluntarily provide in the chat.
- Server logs: IP address, browser user agent, pages requested, timestamps. Collected automatically by our hosting provider for security and diagnostics.
- Analytics & advertising data (only when enabled — currently disabled): aggregated and pseudonymous data via Google Analytics 4, Google Tag Manager, and Meta Pixel. We will update this policy before enabling.
We do not operate user accounts, do not collect payment card data on this site, and do not knowingly collect information from anyone under 18.
3. How We Use Your Information
- To respond to your inquiry and send project proposals or follow-ups.
- To deliver services you have engaged us to perform.
- To send project‑related email communications (you may opt out at any time).
- To secure the site, detect abuse, and troubleshoot technical issues.
- To measure website and ad performance in aggregate.
- To comply with legal obligations.
We do not sell your personal information for money. We do not use information from the contact form or chatbot for advertising targeting.
4. How We Share Information
We share personal information only with service providers who help us operate the business, and only for the purposes described here:
- Hosting & email: our cPanel hosting provider and email delivery services.
- Internal notifications: Telegram (Telegram FZ-LLC) — contact-form submissions are forwarded to a private internal Telegram chat so we can respond quickly. Data is used for internal notification only; we do not use Telegram for marketing or further sharing.
- Analytics (when enabled — currently disabled): Google (GA4, Tag Manager). We will update this policy before enabling.
- Advertising (when enabled — currently disabled): Meta/Facebook (conversion tracking via Meta Pixel). We will update this policy before enabling.
- Professional advisors: accountants or attorneys when required.
- Legal: law enforcement or regulators when we are legally required to disclose.
We do not sell personal information for money. "Share" has the meaning given in California Civil Code §1798.140(ah) — disclosure of personal information to a third party for cross-context behavioral advertising, whether or not for monetary consideration. We are not currently sharing personal information for cross-context behavioral advertising. If and when we enable Meta Pixel or similar tools, California residents may opt out at any time — see Section 6.
5. Cookies & Tracking Technologies
We use a small number of cookies and similar technologies:
- Essential: session and security cookies needed for the site to function.
- Analytics (when enabled — currently disabled): Google Analytics 4 — would measure pageviews and traffic sources. If enabled, opt out with the Google Analytics Opt-Out.
- Advertising (when enabled — currently disabled): Meta Pixel — would measure conversions from Meta ads. If enabled, manage preferences at Facebook Ad Settings.
Most browsers let you block or delete cookies in settings. We honor the Global Privacy Control (GPC) signal as an opt-out of sharing for California residents.
Do Not Track: our site does not currently respond to DNT browser signals, per CalOPPA §22575(b)(5) disclosure requirements. We do respond to GPC signals.
6. Your Privacy Rights
California Residents (CCPA / CPRA)
Although we are likely below the thresholds that make CCPA/CPRA mandatory, we voluntarily honor these rights for any California resident:
- Right to know what personal information we have collected about you (Cal. Civ. Code §1798.100, §1798.110).
- Right to delete personal information we hold about you (§1798.105).
- Right to correct inaccurate personal information (§1798.106).
- Right to opt out of sale or sharing of personal information (§1798.120). We do not sell data; if you want to opt out of advertising‑cookie "sharing," email us or enable GPC in your browser.
- Right to limit use of sensitive personal information (§1798.121) — we do not collect sensitive categories from this site.
- Right to non‑discrimination for exercising your rights (§1798.125).
Categories of personal information we collect (per §1798.140(v)): identifiers (name, email, IP), commercial information (inquiry history), internet activity (pages viewed), geolocation (approximate, from IP). We do not collect biometric, health, precise location, or other sensitive categories.
We retain contact-form and chatbot data for up to 36 months from last contact, and we run periodic automated deletion of records older than that; server logs for up to 12 months; analytics data per Google/Meta defaults when those services are enabled.
Age threshold (CCPA §1798.120(c)): we do not knowingly sell or share the personal information of California residents under the age of 16 without the required opt-in consent (from a parent or guardian for users under 13, or from the user for ages 13–15).
Right-to-know lookback: your right to know covers the 12 months preceding your request, as provided by §1798.130(a)(2).
Residents of Other US States
If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, New Jersey, New Hampshire, Minnesota, Maryland, Indiana, Kentucky, or Rhode Island, you have substantially similar rights under your state's privacy law. We apply California-level protections nationwide.
How to Exercise Your Rights
Email request@botless.systems with the subject line "Privacy Request" and describe what you want (access, deletion, correction, opt-out). We will verify your identity by matching two or more pieces of information you already provided, then respond within 45 days as required by §1798.130. You may designate an authorized agent to act for you; authorized agents must provide signed written authorization from the consumer and, where required, proof of registration with the California Secretary of State. We may contact the consumer directly to confirm the agent's authority before processing the request.
7. Data Retention
We keep personal information only as long as needed for the purpose collected:
- Leads who do not become clients: up to 36 months from last contact.
- Active clients: for the life of the engagement plus 7 years for tax/legal records.
- Server logs: up to 12 months.
- Chatbot transcripts: up to 24 months from last activity.
When retention expires, we delete or anonymize the data. An automated purge task enforces the retention limits for contact-form and chatbot data on a periodic basis; you may also request earlier deletion at any time (see Section 6).
8. Security
We use reasonable administrative, technical, and physical safeguards: HTTPS/TLS in transit, access controls on our hosting account, least-privilege for team members, and regular backups. No system is perfectly secure; we cannot guarantee absolute security of information transmitted over the internet.
9. Children
This site is a business-to-business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§6501–6506). If you believe a child has submitted information to us, email request@botless.systems and we will delete it.
10. Email Communications
If we send marketing emails in the future, they will (a) identify Botless Systems as the sender, (b) include a working unsubscribe link, and (c) honor opt-out requests within 10 business days, as required by the CAN-SPAM Act (15 U.S.C. §7704). We currently do not operate a marketing email list.
11. Third-Party Links
Our site may link to third-party websites. We are not responsible for the privacy practices of those sites. Review their policies separately.
12. International Visitors
Our services are operated from the United States. If you visit from outside the US, your information will be processed in the US, which may have different privacy laws than your country. We do not actively market to EU/UK residents; if you are in the EEA or UK and contact us anyway, you may email request@botless.systems to exercise GDPR rights.
13. Changes to This Policy
We may update this policy. The "Last Updated" date at the top reflects the most recent change. Material changes will be announced on this page at least 14 days before taking effect.
14. Contact Us
Questions, complaints, or privacy requests:
Botless Systems
Email: request@botless.systems
Website: https://botless.systems/