Last updated: July 2026
Legal review: This policy reflects the current request-preview, contact, account, and analytics implementation. Independent legal review is recommended before live payment activation.
BotRiders (trading name) is operated by (Botriders) Startup Development Studio DOO, registered in Montenegro under company registration and PIB number 03216845, with a registered office at 26 Novembar BB, Ulcinj, Montenegro.
We are the data controller of the personal data you provide when using botriders.com and our services.
For privacy-related questions, contact us at info@botriders.com.
| Data | Where collected |
|---|---|
| First and last name | Contact form, checkout, account registration |
| Email address | Contact form, checkout, account registration |
| Phone number (optional) | Contact form, checkout |
| Message / project description | Contact form |
| Route-preview request text | Request-first homepage and campaign landing pages |
| Product selection and delivery mode | Pricing calculator, checkout |
| Account password (hashed) | Account registration |
| Business name or website (optional) | Contact form (for business enquiries) |
| Data | Source |
|---|---|
| IP address | Server access logs |
| Browser type and version | Server logs / analytics |
| Pages visited and interaction events | Google Analytics, only after analytics consent |
| Referral source and campaign identifiers | Google Analytics and server request attribution, only after analytics consent |
| Device type and approximate country/region | Google Analytics, only after analytics consent |
When you request a route, quote or service, we may record the request ID, request text, selected services, service mode, estimated value, attribution fields you consented to share, and request status. This is stored on a DigitalOcean droplet in the LON1 United Kingdom region.
Online payment is not currently active. BotRiders does not ask for or store card numbers, CVV codes, or equivalent payment credentials. This policy will be updated before a payment provider is activated.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Create a route preview | Request text and request ID | Steps requested before entering a contract and legitimate interest in abuse prevention |
| Process a quote or fulfil a service | Name, email, request and service details | Steps before contract and contract performance |
| Send request, quote and service updates | Name, email | Steps before contract and contract performance |
| Respond to contact enquiries | Name, email, message | Legitimate interest (responding to requests) |
| Manage your account | Name, email, account data | Contract performance |
| Prevent fraud and abuse | IP address and request metadata | Legitimate interest (security) |
| Analyse website usage and improve our services | Analytics data (pseudonymised) | Consent |
| Send marketing emails (if opted in) | Email address | Consent |
| Comply with legal obligations | Order and financial records | Legal obligation |
| Data type | Retention period |
|---|---|
| Raw route-preview request text and generated preview | 30 days |
| Request ID, hash and technical status | Kept only as long as needed for attribution reconciliation, security and legal obligations |
| Quote, service and financial records | Kept for the applicable accounting, contract and legal limitation periods |
| Account data | While the account is active and for a limited period needed to handle closure, security and legal requests |
| Contact enquiries | Until the enquiry and reasonable follow-up are complete, unless a longer legal period applies |
| Consent records | Until replaced by a new choice or no longer needed to demonstrate consent |
| Analytics data | According to the configured GA4 retention period and only after consent |
| Server access logs | For the shortest period reasonably needed for security and incident investigation |
After the applicable retention period, data is securely deleted or anonymised.
We do not sell, rent, or trade your personal data. We share data only with the following categories of third-party service providers ("subprocessors") who help us operate our business:
| Subprocessor | Purpose | Country | Safeguards |
|---|---|---|---|
| Google LLC (Google Analytics) | Consent-based website analytics | International | Google data protection terms and applicable transfer safeguards |
| Web3Forms | Contact form processing | International | Provider privacy and data protection terms |
| DigitalOcean | Website and database hosting | United Kingdom (LON1) | Data Processing Agreement and applicable transfer safeguards |
| OpenAI | Moderation and generation of route previews and service outputs | International | Provider data processing terms and applicable transfer safeguards |
We may also disclose data where required by law, court order, or to protect the rights and safety of BotRiders or others.
Some of our subprocessors are based outside the European Economic Area (EEA). Where data is transferred to countries that do not have an adequate level of data protection recognised by the European Commission, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards as permitted under GDPR.
Montenegro is not an EU or EEA member state, but has data protection legislation that aligns with GDPR principles. We follow GDPR standards as a baseline for all data we process, regardless of where our customers are located.
We use cookies and similar tracking technologies on botriders.com. Please see our Cookie Policy for full details.
In brief:
You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer or via your browser settings.
If you are in the EU/EEA or UK, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@botriders.com. We will respond within the period required by applicable law. We may need to verify your identity before processing your request.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In Montenegro, this is the Agency for Personal Data Protection and Free Access to Information (AZLP).
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of the page. Material changes will be communicated to registered users by email.
For privacy-related questions, requests, or concerns: