Privacy Policy

Xneuro Inc. ("Xneuro," "we," "us," or "our"), a corporation incorporated in Alberta, Canada, respects your privacy. BOTONLY is a brand operated by Xneuro Inc. This Policy explains what personal information we collect through botonly.com (the "Site"), why we collect it, who we share it with, and the choices and rights you have.

This Policy covers the Site and our related sales and marketing activities. It does not cover data we process on behalf of a customer under a signed services or support agreement, or personal information collected offline outside the contexts described here.

Who is responsible for your data

Xneuro Inc., an Alberta, Canada corporation, is the organization accountable for the personal information described in this Policy — the "controller" under European law, the "business" under U.S. state law, and the accountable organization under Canadian law.

Privacy Officer: reachable at info@botonly.com
General contact: info@botonly.com
A postal address is available on request

Summary

We collect	For example	Why
Business contact data	Name, company, job title, work email, phone, country	To respond to quote requests and inquiries
Project and application data	Facility type, throughput, payload, layout, timeline, budget range	To scope a suitable solution and prepare a proposal
Technical and usage data	IP address, device and browser type, pages viewed, referring URL, session activity	To operate, secure, and improve the Site
Marketing data	Subscription status, email engagement, and campaign source	To send and measure marketing communications
Communications	Emails, form messages, call notes, meeting notes	To manage the customer relationship

We do not sell personal information for money. With your permission, we use Google Analytics 4 to understand Site use and measure successful RFQ submissions. We do not currently use advertising or retargeting tools. See Section 9 and our Cookie Policy.

Information you give us

Quote and contact forms. Name, company, job title, business email, phone number, country, and the content of your message.
Application details. Information about your facility and requirements, such as building type, aisle widths, pallet or load type, weight, throughput, shift pattern, existing WMS/ERP, deployment timeline, and budget range.
Newsletter and content downloads. Email address and the material you requested.
Events and trade shows. Business card details, badge scans, and notes from conversations.
Support and service requests. Serial numbers, site details, fault descriptions, photos or video you send us.
Recruitment. If you apply for a role, the information in your application.

Please do not submit sensitive personal information (such as health, biometric, racial or ethnic origin, religious beliefs, or government identifiers) through the Site. We do not need it and do not intentionally collect it.

Information we collect automatically

When you visit the Site, we and our service providers may collect:

IP address and approximate location derived from it (city/region level);
browser type and version, operating system, device type, and screen size;
pages viewed, time on page, scroll depth, clicks, files downloaded, and navigation paths;
referring URL, search terms where available, and campaign parameters (for example UTM tags, Google click identifiers);
date and time of access and language preference;
error and diagnostic logs.

We collect this using server logs and, only when you allow Analytics, Google Analytics tags and cookies. We also use necessary first-party browser storage for Site settings, RFQ cart state, and your cookie choice. See our Cookie Policy for details and your controls.

Information from other sources

Web analytics provider, which reports Site-usage and conversion performance only after Analytics consent.
Business data providers and public sources, such as company websites, professional networking profiles, and industry directories, used to verify or enrich business contact records.
Distributors, integrators, and referral partners who pass along a lead with your knowledge.
Group companies and manufacturing affiliates involved in fulfilling your request.

How we use personal information

We use personal information to:

respond to your inquiries and prepare quotations, layouts, and proposals;
arrange demonstrations, site visits, and technical discussions;
deliver, install, commission, and support products and services;
manage our customer and prospect relationships, including in our CRM;
send marketing communications about products, applications, and events, where permitted or where you have consented;
operate, secure, monitor, and improve the Site and our systems;
measure and improve Site and campaign performance using consent-based analytics, without advertising tracking;
carry out research and product development, including analyzing aggregated application requirements;
comply with legal obligations, including export control screening, tax and accounting rules, and sanctions and restricted-party checks;
establish, exercise, or defend legal claims, and prevent fraud and misuse.

We do not use your personal information to make decisions producing legal or similarly significant effects about you through solely automated means.

7.1 Canada (PIPEDA and Alberta PIPA)

Under Canadian privacy law we rely on your consent to collect, use, and disclose personal information, except where the law permits otherwise. Consent may be express (for example, when you submit a quote request or subscribe to our mailing list) or implied from the circumstances, taking into account the sensitivity of the information and your reasonable expectations. Business contact information used solely to communicate with you in a professional capacity is subject to limited exceptions under PIPEDA and Alberta PIPA. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may prevent us from responding to your inquiry or supporting your equipment.

Where the GDPR or UK GDPR applies, we rely on:

Contract or pre-contractual steps — responding to your quote request, delivering products and services (purposes 1–4).
Legitimate interests — operating and securing the Site, B2B marketing to business contacts, measuring campaign performance, product improvement, and defending claims (purposes 4–10). We balance these interests against your rights and you may object at any time.
Consent — non-essential cookies, and email marketing where consent is required. You may withdraw consent at any time without affecting prior processing.
Legal obligation — export control, sanctions screening, tax, and accounting requirements (purpose 9).

We disclose personal information to:

Service providers and processors that support our operations, in the categories of: website hosting and content delivery; CRM and marketing automation; email delivery; consent-based web analytics; customer support and ticketing; cloud storage and productivity tools; video conferencing; payment and accounting; and professional advisers. They are bound to use the data only for the services they provide to us.
Affiliates and group companies, where needed to prepare a proposal, manufacture, ship, or support your order.
Distributors, integrators, and channel partners, where your inquiry relates to their territory or where they will deliver the project. We tell you when we route an inquiry to a partner.
Logistics, installation, and service providers carrying out delivery, commissioning, or maintenance.
Web analytics provider, only when you allow Analytics, to help us understand Site use and successful RFQ submissions. See Section 9.
Legal and regulatory recipients, where required by law, subpoena, court order, or governmental request, including export control and customs authorities.
Corporate transaction counterparties, in a merger, acquisition, financing, or sale of assets, subject to confidentiality.

We do not sell personal information for monetary consideration.

Analytics and cookies

With your permission, we use Google Analytics 4 (GA4) to understand how the Site is used and to measure successful RFQ submissions. GA4 may process pages viewed, approximate location derived from IP address, device and browser information, referring source, campaign parameters, and pseudonymous identifiers stored in first-party analytics cookies.

Analytics is off by default. On your first visit, you can:

choose Reject non-essential to keep GA4 off;
choose Manage preferences to review the Necessary and Analytics categories; or
choose Accept analytics to enable GA4 from that point forward.

You can change or withdraw Analytics consent at any time through the Cookie Preferences link in the Site footer. Withdrawing consent stops future analytics collection and removes accessible first-party GA cookies; it does not automatically delete information already collected. We do not currently use advertising or retargeting tools, and we configure the RFQ conversion event so that names, email addresses, phone numbers, company names, message text, uploaded-file names, and RFQ identifiers are not sent to GA4. See our Cookie Policy for details.

International transfers

We operate internationally. Personal information you provide may be accessed, stored, or processed in Canada, the United States, the People's Republic of China, and other countries where we, our affiliates, or our service providers operate. These countries may have data protection laws that differ from those in your country, and personal information may be accessible to law enforcement and national security authorities in those countries under their laws.

Notice to Alberta residents. As required by Alberta's Personal Information Protection Act, we advise you that we use service providers outside Canada to process personal information, including for website hosting, CRM, email delivery, and consent-based web analytics. You may contact our Privacy Officer at info@botonly.com for information about how that information is handled and for the name and position of a person who can answer questions about it.

Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with supplementary technical and organizational measures where needed. You may request a copy of the relevant safeguards by contacting us.

Retention

We keep personal information only as long as needed for the purposes described in this Policy:

Data	Typical retention
Inquiry and quote records that did not become a project	As long as needed to respond to and follow up on the inquiry, subject to applicable legal requirements.
Customer and project records	For the duration of the relationship and thereafter as required for warranty, product-safety traceability, tax, accounting, and other legal obligations.
Marketing contact records	Until you unsubscribe or we determine that the record is no longer needed for marketing.
Cookie and analytics data	As stated in the Cookie Policy, generally up to 14 months.
Server and security logs	As long as needed for security, diagnostics, and legal compliance.

We may retain information longer where required by law or to establish, exercise, or defend legal claims. When no longer needed, we delete it or irreversibly anonymize it.

Security

We maintain technical and organizational measures appropriate to the risk, including encryption in transit (TLS), access controls and role-based permissions, multi-factor authentication on business systems, network and endpoint protection, logging, vendor due diligence, and employee confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have some or all of the following rights:

Access / know — confirmation of whether we process your information and a copy of it, including the categories collected, sources, purposes, and recipients.
Correction — to have inaccurate information corrected.
Deletion — to have your information deleted, subject to legal exceptions.
Portability — to receive your information in a portable format, or have it transmitted to another controller where technically feasible.
Restriction and objection — to restrict processing or object to processing based on legitimate interests, including direct marketing.
Opt out of targeted advertising, sale, sharing, and certain profiling.
Withdraw consent at any time, where processing is based on consent.
Non-discrimination — we will not discriminate against you for exercising your rights.
Appeal — if we decline a request, residents of certain U.S. states may appeal by replying to our response or emailing info@botonly.com. We will respond to appeals within the period required by law.
Complain — to your local supervisory authority (EEA/UK), your state attorney general (U.S.), or, in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Canadian residents have the right under PIPEDA and Alberta PIPA to access the personal information we hold about them, to be told how it has been used and to whom it has been disclosed, to request correction of inaccuracies, and to withdraw consent. We respond to access requests within 30 days, or notify you if we need an extension permitted by law.

How to exercise. Email info@botonly.com with your request and enough detail for us to locate your records. We will verify your identity, usually by confirming control of the email address on file or by matching information we already hold, and we may ask for additional information for higher-risk requests. We respond within the timeframe required by applicable law, generally 30 days (EEA/UK) or 45 days (U.S. states), and will tell you if we need an extension.

Authorized agents. An authorized agent may submit a request on your behalf with written authorization; we may contact you to confirm.

Marketing choices

Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages only where we have your express consent, or where implied consent exists under CASL — for example, because you have an existing business relationship with us, because you made an inquiry within the preceding six months, or because you published or provided your business email address without a statement declining commercial messages and the message relates to your professional role. Every commercial message we send identifies Xneuro Inc., includes our mailing address and contact information, and contains a working unsubscribe mechanism that we action within 10 business days.

Unsubscribing. You can unsubscribe from marketing email using the link in any message, or by emailing info@botonly.com. We will still send transactional and relationship messages such as quotations, order confirmations, service notices, warranty communications, and safety or recall notices — these are not commercial electronic messages requiring consent.

Children

The Site is directed at businesses and is not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Third-party sites and embedded content

The Site may link to or embed third-party content such as videos, maps, or social widgets. Those providers may set their own cookies and collect data under their own privacy policies. We are not responsible for their practices. Review their policies before interacting with them.

Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new effective date, and where required by law we will notify you or seek your consent. Please review this page periodically.

Contact us

Xneuro Inc. Email: info@botonly.com

A postal address is available on request.