GDPR & Compliance

GDPR commitments

Where the EU General Data Protection Regulation applies, we act as a controller for website inquiries and as a processor or controller for product data depending on the module and contract. We process personal data under lawful bases such as contract, legitimate interests, and consent where required.

• Right of access, rectification, erasure, and portability
• Right to restrict or object to certain processing
• Right to withdraw consent where processing is consent-based
• Right to lodge a complaint with a supervisory authority

Data processing requests

Email hello@autobot360.com with GDPR request in the subject. We aim to respond within 30 days, or sooner when required. We may ask for information needed to verify the requester.

Subprocessors and vendors

We use carefully selected infrastructure, email, and analytics providers. Vendor access is limited to what is needed to deliver the service. We review security and privacy practices when onboarding material vendors.

Security controls

• Encrypted transport (HTTPS/TLS) for public sites and product surfaces
• Access controls and least-privilege practices for internal systems
• Monitoring and logging appropriate to service risk
• Incident response process for suspected personal-data incidents

Industry data

Modules may handle sensitive operational data (for example healthcare or HR). Product deployments are designed so customers control what they upload. Customers remain responsible for lawful collection of their end-user data and for configuring roles appropriately.

Contact

Compliance and data protection: hello@autobot360.com