Privacy and cookie policy
Last updated: 28 October 2026
This policy explains what personal data customerbot.io ("CustomerBot", "we") collects, why, and what you can do about it. Because the site is open to visitors in the European Union and the UK, it follows the EU General Data Protection Regulation (GDPR), the UK GDPR and the EU ePrivacy rules on cookies, and it respects the privacy rights of visitors in other places, including US states with privacy laws.
Who is responsible for your data
The controller is 42TSM LLC, a Wyoming limited liability company, 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, USA. Email: hello@42tsm.com. You can also write to us through our contact form.
What we collect and why
| What | Data | Purpose | Legal basis |
|---|---|---|---|
| "Write to the editor" form | Name, email, subject (correction, partnership/advertising, press, other), message, the page you sent it from | Answer your question, correction or partnership request | Our legitimate interest in replying to messages you send us (Art. 6(1)(f)) |
| "Add a vendor or book placement" form | Product name, homepage, pricing page, category, the request you choose (free profile, correction or a paid option), contact name, email, notes, the page you sent it from | Review and publish or correct a vendor profile, and reply about paid placements you ask about | Steps you ask us to take before a contract (Art. 6(1)(b)); legitimate interest for free profiles and corrections (Art. 6(1)(f)) |
| "Get matched" form | What you want to cover, industry, rough monthly call or chat volume, systems it must connect to, the help you want, monthly tool budget, name, business email, business website, the page you sent it from | Send you a shortlist of products and, if you ask for setup help, introduce you to one implementer who quotes a fixed price | Steps you ask us to take before a contract (Art. 6(1)(b)) |
| Server logs | IP address, date and time, page requested, browser type | Deliver the site securely and fix errors | Legitimate interest in running a secure website (Art. 6(1)(f)) |
If you arrive through a link that carries campaign tags (for example utm_source), the forms may record those tags too, so we know which link brought you.
Please do not put sensitive information (for example health or patient details) into the free-text fields. We do not need it.
How setup introductions work. If you ask for setup help in the "Get matched" form, we share your answers and contact details with the implementer we match you with, so they can contact you and quote. That implementer becomes a separate controller of the data from then on. The introduction is free for you. The implementer may pay us a referral fee (see disclosures). We do not sell your data or use it for advertising.
We do not make automated decisions about you that have legal or similarly significant effects.
What we do not collect. CustomerBot does not run analytics, advertising or tracking scripts, and it has no user accounts. The savings calculator and the directory filters run entirely in your browser; the numbers you type are not sent to us.
Cookies and similar storage
We set no cookies of our own. The only storage on your device comes from the embedded Tally forms, and only on pages that show a form (contact, vendors and get matched):
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
FORM_SESSION_<form-id>, RESPONDENT (local storage on tally.so) |
Tally | Necessary for the form | Keep your form progress while you fill it in | Set by Tally; cleared when you clear browser storage |
Because nothing on the site needs your consent today, there is no cookie banner. If we add anything that does, we will ask first and update this table.
Who else processes your data
- Tally BV (forms), Ghent, Belgium. Tally acts as our processor under its Data Processing Agreement and stores form data in the EU. See Tally's privacy policy and GDPR page.
- Spaceship, Inc. (hosting). Spaceship acts as our processor under its Data Processing Addendum. Our server is located in the United States (Phoenix, Arizona).
- The implementer we introduce you to ("Get matched" form, only if you ask for setup help). They may be based anywhere in the world, including outside the EEA and the UK. We share your details only with the implementer needed to arrange the introduction you asked for.
International transfers
Our hosting provider is in the United States. Spaceship's DPA includes the European Commission's Standard Contractual Clauses (SCCs, Decision 2021/914) for transfers to the US. Tally keeps form data in Europe, and any transfer outside the EEA by Tally's sub-processors is covered by SCCs under its DPA.
How long we keep data
- Form submissions: 12 months after our last contact with you. After that we delete them from Tally, and Tally removes deleted data from its backups within 90 days.
- Server logs: up to about two months, then deleted automatically.
We may keep data for longer only where the law requires it, or to deal with a legal claim.
Your rights
You can ask to access, correct or delete your data. You can also object to or restrict how we use it, or ask for a copy to take elsewhere (portability). Where we rely on consent, you can withdraw it at any time. That does not affect processing that happened before you withdrew. Email hello@42tsm.com and we will reply within one month. We may ask you to confirm your identity.
If you live in a US state with a privacy law, you may have similar rights to know, correct and delete your data and to opt out of its sale or use for targeted advertising. We do not sell personal data or use it for targeted advertising. Email us to use any of these rights; we will not treat you differently for doing so.
If you think we have not handled your data properly, you can complain to the data protection authority where you live or work (for example the ICO in the UK, the AEPD in Spain or the CNIL in France). We would appreciate the chance to fix it first.
Links to other sites
Our pages link to vendors' websites. Some outbound links may be affiliate or referral links; each vendor profile states whether we have a commercial relationship with that vendor, as explained in our disclosures. If you sign up through such a link, the vendor may pay us a commission at no extra cost to you. Once you leave our site, the other site's privacy policy applies.
Changes to this policy
When we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies.