Botpresso Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how Botpresso collects, uses, shares and protects your personal information when you visit botpresso.com (the “Website”), contact us, subscribe to our content, attend our webinars or events, or work with us.

Botpresso is the brand name of SEO Surgeon Private Limited (“Botpresso”, “we”, “us” or “our”), a company registered in India with its registered office at First Floor, 143, Mukharji Park, New Delhi, West Delhi, Delhi 110018. For the personal information described in this policy, we decide why and how it is processed, which makes us the data controller (called a “Data Fiduciary” under Indian law).

This policy applies to the Website and to our everyday business dealings with prospects, clients, event attendees, job applicants and other visitors. If we work with you as a client, your signed agreement may add further terms on how we handle your data, and those terms prevail where they differ.

By using the Website, you confirm that you have read this policy. If you do not agree with it, please do not use the Website.

2. Information we collect

We collect only what we need to run our business and respond to you.

Information you give us

• Contact and enquiry forms: your name, work email, phone number, company name, job title, website URL and the message you send us.
• Newsletter, webinar and event sign-ups: your name, email address, company and role.
• Emails, calls and meetings: the details you share with us in correspondence, proposal discussions and discovery calls, including notes we take.
• Job applications: your CV, contact details, work history and anything else you choose to share with us.
• Client engagements: business information and account access you provide so we can deliver our services, as set out in your service agreement.

Information collected automatically

When you browse the Website, we collect technical and usage data such as your IP address, device type, browser, operating system, approximate location, the pages you visit, how long you stay, the links you click, your referring page and how you move around the site. We gather this through cookies and similar technologies (see Section 4).

Information from other sources

We may receive business contact details from public sources such as LinkedIn, company websites and event organisers, and from referrals or partners, when we reach out about our services. We use this only for relevant business communication.

We do not knowingly collect sensitive personal information such as financial account details, government ID numbers or health data through the Website. Please do not send it to us.

3. How we use your information

We use personal information to:

• respond to your enquiries and prepare proposals or discovery calls;
• deliver, manage and improve our SEO, GEO and related services for clients;
• send newsletters, webinar invitations, research and updates you have asked for, or that are relevant to your business role (you can opt out at any time);
• run webinars, events and communities;
• understand how the Website is used, fix problems and improve content and user experience;
• assess and respond to job applications;
• keep our systems secure, prevent fraud and misuse, and meet legal, tax and accounting obligations;
• establish, exercise or defend legal claims.

Our legal basis. Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we process personal data based on your consent, or for legitimate uses recognised by the Act, such as responding to a request you made, meeting legal obligations, or employment-related purposes. If the GDPR applies to you, we rely on consent, performance of a contract, our legitimate interests (running and promoting our business in a way that does not override your rights), or legal obligation, depending on the activity.

We do not sell your personal information. We do not use it to make decisions that have legal effects on you through automated means.

4. Cookies and analytics

Cookies are small files stored on your device when you visit a website. We use them, and similar technologies, to make the Website work and to understand how people use it. We use three tools:

These tools set cookies and may collect your IP address (which Google and Microsoft may anonymise or truncate), device and browser details, and interaction data. Google and Microsoft process this data under their own privacy terms: Google Privacy Policy and Microsoft Privacy Statement. Clarity masks sensitive form fields by default, and we do not use it to capture information you type into forms.

Your choices. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Blocking some cookies may affect how parts of the Website work.

5. Who we share your information with

We share personal information only where needed and only with:

• Service providers that help us run our business, such as website hosting, email and newsletter platforms, CRM and sales tools, video conferencing and webinar tools, project management software, cloud storage and analytics providers (including Google and Microsoft, as described above). They may process data only on our instructions and for the purposes we specify.
• Professional advisers such as lawyers, accountants, auditors and insurers.
• Event and webinar partners or sponsors, only where you registered for a joint event and we told you so at sign-up.
• Authorities and courts, where required by law, regulation or legal process, or to protect our rights, property or safety.
• A successor business, if Botpresso is involved in a merger, acquisition or sale of assets. We would tell you if your information became subject to a different privacy policy.

We do not sell or rent your personal information to third parties.

6. How long we keep your information and how we protect it

Retention. We keep personal information only for as long as we need it for the purpose it was collected, or as the law requires. As a guide: enquiry and sales conversations are kept for up to [24] months after the last contact; newsletter subscriptions until you unsubscribe; client records for the length of the engagement plus the period required for tax, accounting and legal purposes; unsuccessful job applications for up to [12] months; and analytics data according to the retention settings we configure in each tool. When data is no longer needed, we delete or anonymise it.

Security. We use reasonable technical and organisational safeguards, including access controls, encrypted connections (HTTPS) and limits on who can see personal data, to protect your information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

7. Your rights

Under Indian law (DPDP Act, 2023), you can:

• ask for a summary of the personal data we process about you and who we share it with;
• ask us to correct inaccurate or incomplete data, update it, or erase it when it is no longer needed;
• withdraw your consent at any time (this does not affect processing done before withdrawal);
• ask for grievance redressal about how we handle your data;
• nominate another person to exercise these rights if you die or become unable to.

If the GDPR or UK GDPR applies to you, you also have the right to restrict or object to processing, to receive your data in a portable format, and to lodge a complaint with your local data protection authority.

How to use your rights. Email or write to us using the details in Section 9. We may ask you to verify your identity first, and we aim to respond within [30] days. You can unsubscribe from marketing emails at any time using the link in each email.

If you are unhappy with how we handled a request, please contact us first so we can put it right. You may also approach the Data Protection Board of India, or your local supervisory authority if you are in the EU or UK.

8. International transfers, children and third-party links

International transfers. Some of our service providers, including Google and Microsoft, store or process data on servers outside India. Where we transfer personal data across borders, we do so as permitted by applicable law and use providers that apply appropriate safeguards. If you are in the EU or UK, we rely on recognised transfer mechanisms such as standard contractual clauses where required.

Children. The Website and our services are meant for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Third-party links. The Website may link to other sites, social platforms and tools. We do not control them and are not responsible for their privacy practices. Please read their policies before sharing information.

9. Changes to this policy and how to contact us

We may update this policy from time to time to reflect changes in our practices, tools or the law. If we make a material change, we will post a notice on the Website or contact you where appropriate.

For questions, requests or complaints about your personal data, contact:

This policy is governed by the laws of India.