Privacy notice

1. Who I am

Keep is operated by Botzone Limited, a company registered in Ireland, company number 814822, registered office in Dún Laoghaire, Co. Dublin, Ireland. Botzone Limited is the data controller for everything described on this page.

For anything on this page, including a deletion request, write to stephen@botzone.ai. A person reads it.

2. What I hold about you

Where I have contacted you, or intend to, I hold:

• Your name.
• Your job title or role.
• Your work email address, and whether it verified as deliverable.
• The employer it belongs to, and how I worked the address out.
• Whether an email was sent to you, when, and whether you replied or asked to be removed.

I do not hold your personal email address, your phone number, your home address, any special category data, or anything at all about you outside your professional role. I do not build a profile of you and I do not track what you do on this website.

3. What I hold about your employer

Public business information only: the company name and website, the text of the job posting, a headcount estimate taken from public sources, the country, and a short list of dated public signals such as a funding announcement, a product launch, a press item or a review. Each signal is stored with the URL it came from and the date it was published.

That material is combined into a one-page churn-risk snapshot. The revenue figure in it is modelled from published sector benchmarks applied to the headcount estimate. It is not measured, and it is not information about your company that I have obtained privately.

4. Where it came from

Public sources, and nothing else:

• The applicant-tracking systems companies publish their own vacancies through: Greenhouse, Lever, Ashby and Workable.
• Adzuna, a job-listing service, for Great Britain.
• Web search and retrieval through Exa, for the dated public signals and for working out a company's own domain.
• Companies House, for United Kingdom company registration details.
• The company's own website.

I do not scrape LinkedIn or Indeed, and results from personal social media profiles are excluded in code rather than by policy. I do not buy contact lists.

5. Why this is lawful

The legal basis is legitimate interest, Article 6(1)(f) of the GDPR: business-to-business direct marketing to a named person in a professional role, about a business problem their employer has just advertised publicly. Under the Irish ePrivacy Regulations and the UK PECR, business email addresses may be contacted on this basis.

I balanced that interest against yours by keeping the processing as small as I could make it: public sources only, professional details only, one email per job posting, no follow-up sequence, and deletion on request with no argument.

6. Who else processes it

• Amazon Web Services - hosting, storage and email delivery through SES, in the EU (eu-west-1, Ireland).
• Exa - web search and retrieval used to find the public signals.
• MillionVerifier - checks whether an email address is deliverable, so that I am not sending mail into the void.
• OpenRouter, and the model provider behind it - used to rewrite already-retrieved sentences and to draft the risk summaries. It is never given your contact details.
• Google Sheets - a working table of prospects, in my own Google account.

Your details are not sold, shared for anyone else's marketing, or used to train a model.

7. The snapshot link

Each snapshot is published to a web address containing a long random token, so the address cannot be guessed from a company name. The file is served over HTTPS from encrypted storage. Anyone who has the link can open it, so treat it as you would any link sent to you by email.

Snapshot links do not currently expire on their own. If you would like one taken down, ask and I will delete it.

8. How long I keep it

Prospect records are deleted or anonymised within 12 months where there has been no engagement. If you ask me not to contact you, I delete the record and keep only the minimum needed on a suppression list, so that the system cannot reach you again by accident. That suppression entry is kept indefinitely, because its whole purpose is to outlive the data it replaced.

9. Your rights

Under the GDPR you have the right to:

• Ask what I hold about you, and get a copy.
• Have anything inaccurate corrected.
• Have it erased.
• Object to processing based on legitimate interest.
• Ask for it in a portable format.
• Complain to a supervisory authority.

Email stephen@botzone.ai. I will respond within 30 days, and in practice much sooner. You do not have to give a reason, and objecting costs you nothing.

The supervisory authority here is the Data Protection Commission, dataprotection.ie. If you are in the United Kingdom, the Information Commissioner's Office at ico.org.uk.

10. This website

This site sets no cookies, runs no analytics and embeds nothing from anyone else. It is a set of static files. There is no sign-up, no form and no tracking pixel, which is why every action on it is an email link.

11. Changes

If this notice changes materially I will update the date at the top of the page. Older versions are available on request.

12. Company details

Botzone Limited, company number 814822. Registered office: Dún Laoghaire, Co. Dublin, Ireland, with the full address on the public register at core.cro.ie. Contact: stephen@botzone.ai. See also the terms.