Privacy Policy | Can I Hire a Bot?

Section 1 of 15

Data Controller

The data controller responsible for your personal data is the entity operating Can I Hire a Bot?, domiciled in Spain. For any enquiries regarding your data or this policy, please use the contact information available on this website.

Section 2 of 15

Information We Collect

We collect the following categories of data:

Analysis inputs: job title, job description, daily tasks, salary or compensation data, country, industry sector, company size, and any additional details you provide through the analysis form.
Contact and lead data: name, email address, company name, phone number, and any message you send us through a contact or lead capture form.
AI-generated outputs: the analysis reports, ROI calculations, and recommendations generated based on your inputs.
Technical and usage data: IP address, browser type and version, operating system, device type, pages visited, interaction events, referring URL, and timestamps. This data is collected automatically through server logs and, where applicable, cookies or similar technologies.

Section 3 of 15

Legal Basis for Processing (GDPR Art. 6)

We process your personal data under the following legal bases:

Consent (Art. 6(1)(a)): when you voluntarily submit your data through our forms, you consent to its processing for the stated purposes. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Legitimate interest (Art. 6(1)(f)): for product improvement, analytics, fraud prevention, and security monitoring, where our legitimate interest does not override your fundamental rights and freedoms.
Legal obligation (Art. 6(1)(c)): where we are required to retain or disclose data to comply with applicable law, regulation, or legal process.
Performance of a contract or pre-contractual measures (Art. 6(1)(b)): when processing is necessary to provide the service you have requested.

Section 4 of 15

How We Use Your Information

We use the data we collect for the following purposes:

To provide, operate, and deliver the service, including generating AI-powered analysis reports based on your inputs.
To respond to your enquiries, follow up on lead submissions, and facilitate commercial communication where you have expressed interest.
To improve, develop, and optimise our platform, user experience, and analysis quality through aggregated and anonymised analytics.
To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
To comply with applicable legal obligations, including tax, accounting, and regulatory requirements.

Section 5 of 15

Third-Party AI Providers and Data Processing

To generate analysis reports, we send the data you submit (job details, tasks, salary, country, sector) to third-party large language model (LLM) API providers for processing. This data is transmitted solely for the purpose of processing your specific request and generating the corresponding output.

Our agreements with these providers include data processing terms that require them to:

Process data only on our instructions and for the specific purpose of fulfilling your request.
Implement appropriate technical and organisational security measures.
Not retain your data beyond what is necessary to process the request.
Not use your data to train, improve, or fine-tune their foundational AI models.

Section 6 of 15

AI Training — Your Data Is Not Used to Train Models

Can I Hire a Bot? does not use your personal data or submitted inputs to train, fine-tune, or improve any foundational AI or machine learning models — neither our own nor those of third parties. Your data is used exclusively to process your specific analysis request and is not fed back into any model training pipeline.

This commitment applies to all data categories: analysis inputs, contact information, and AI-generated outputs.

Section 7 of 15

Data Sharing and Recipients

We do not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

AI and LLM providers: to process your analysis request (as described in Section 5).
Cloud hosting and infrastructure providers: to store and serve the application and database.
Analytics providers: to collect anonymised usage data for product improvement.
Authentication providers: to manage secure access to protected areas of the service.
Legal and regulatory authorities: where required by applicable law, regulation, court order, or governmental request.
Professional advisors: such as auditors, lawyers, or accountants, where necessary for compliance or dispute resolution.

Section 8 of 15

International Data Transfers

Some of our third-party providers may be located outside the European Economic Area (EEA). When personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR Chapter V, including:

Transfers to countries with an EU adequacy decision (GDPR Art. 45).
Standard Contractual Clauses (SCCs) approved by the European Commission (GDPR Art. 46(2)(c)).
Other applicable derogations under GDPR Art. 49, where no other mechanism is available.

Section 9 of 15

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law:

Analysis data (inputs and outputs): retained for the operational life of the service to allow you to access your results, unless you request deletion.
Lead and contact data: retained for as long as necessary for commercial follow-up and relationship management, and thereafter for as long as required by applicable legal retention periods.
Technical and usage data: retained in aggregate or anonymised form for analytics purposes; identifiable server logs are retained for a maximum of 12 months.
When data is no longer needed, it is securely deleted or irreversibly anonymised.

Section 10 of 15

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, where appropriate, encryption in transit and at rest, access controls, secure infrastructure, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.

Section 11 of 15

Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR. You may exercise these rights at any time by contacting us through the contact information available on this website:

Right of access (Art. 15): you have the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, to access that data and receive a copy.
Right to rectification (Art. 16): you have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to erasure / right to be forgotten (Art. 17): you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful.
Right to restriction of processing (Art. 18): you have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to data portability (Art. 20): you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
Right to object (Art. 21): you have the right to object to the processing of your personal data based on legitimate interest or for direct marketing purposes.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint: you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos, AEPD) at www.aepd.es, or with the supervisory authority in your EU Member State of residence.

Section 12 of 15

Automated Decision-Making

The AI-generated reports produced by this service involve automated processing of the data you submit. However, these outputs are informational estimates only and are not used to make legally binding or similarly significant decisions about you. No automated profiling with legal or equivalent effects is carried out.

If you believe that an automated decision has significantly affected you, you may contact us to request human review.

Section 13 of 15

Children's Privacy

This service is not directed at individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that data promptly.

Section 14 of 15

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (such as local storage or analytics scripts) to operate the service and collect usage data. Where required by applicable law, we will obtain your consent before placing non-essential cookies.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the service.

Section 15 of 15

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with the revised date. We encourage you to review this page periodically.

Your continued use of the service after changes are posted constitutes acceptance of the revised policy.

Last updated: March 2026.