Privacy Policy

1. Introduction

Voodoo Robotics, Inc. ("Voodoo Robotics," "we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us through our website at voodoorobotics.com (the "Site"). This Privacy Policy explains what information we collect when you visit or interact with the Site, how we use it, and your rights regarding that information.

This policy applies solely to information collected through this website. It does not cover data practices related to Voodoo Robotics hardware, software products, cloud services, or APIs, which are governed by separate agreements.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our Site, you may voluntarily provide personal information, including:

• Contact form submissions: Name, email address, company name, phone number, job title, and any message content you include.
• Meeting scheduling: When you book a meeting through our integrated calendar (powered by HubSpot), we collect your name, email address, and any information you provide during the scheduling process.
• Email communications: If you contact us via email, we retain the content of those communications.

2.2 Information Collected Automatically

When you visit the Site, some information is collected automatically. Part of it is collected by the provider that hosts and serves the Site (Cloudflare) on every request, without cookies. The rest is collected through cookies and similar technologies, which you can decline at any time (see Section 5):

• Server and security logs: IP address, requested page, referring URL, browser type, time of request, and technical diagnostics, recorded by our hosting provider to serve the Site and protect it from abuse.
• Performance and traffic measurements: Page visited, referring URL, browser type, country (derived from IP address), and page load timings, collected without cookies or persistent identifiers.
• Device and browser information: Browser type, operating system, screen resolution, and device type.
• Usage data: Pages visited, time spent on pages, click paths, referring URLs, and navigation patterns.
• Cookie identifiers: Unique identifiers assigned by cookies to recognize returning visitors — not used if you decline cookies.
• Advertising click identifiers: If you arrive from a Google or ChatGPT advertisement, a click identifier in the link is used to attribute a later contact-form submission or meeting booking to that advertisement.

3. How We Use Your Information

We use the information collected through this Site for the following purposes:

• Responding to inquiries: Processing and responding to contact form submissions and meeting requests.
• Sales follow-up: Contacting you about Voodoo Robotics products and services when you have expressed interest through the Site.
• Site analytics: Understanding how visitors use the Site so we can improve content, navigation, and user experience.
• Marketing communications: Sending relevant information about our products, case studies, or events. You can opt out at any time.
• Legal compliance: Meeting legal obligations, resolving disputes, and enforcing our agreements.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Consent: When you submit a contact form, schedule a meeting, or accept non-essential cookies, you consent to our processing of that data for the stated purpose. You may withdraw consent at any time.
• Legitimate interest: We have a legitimate business interest in analyzing Site usage to improve our content and services, and in following up with visitors who have expressed interest in our products.
• Contractual necessity: When processing is necessary to respond to your request or take steps before entering into a business relationship.
• Legal obligation: When we are required to process data to comply with applicable law.

5. Cookies and Tracking Technologies

When you first visit the Site, a cookie banner (powered by HubSpot) lets you accept or decline non-essential cookies. How it behaves depends on where you are visiting from:

• European Economic Area, United Kingdom, Switzerland, Canada, and Brazil (opt-in): no non-essential cookie is set until you click Accept. If you do nothing, or click Decline, only the strictly necessary cookies are used.
• Everywhere else, including the United States (opt-out): non-essential cookies are set when you arrive and are removed or stopped as soon as you click Decline, on your first visit or at any later time.

In both cases, if your browser sends a Global Privacy Control signal we treat it as a decline automatically. The cookies used on this Site are:

If you decline (or, in opt-in regions, do not accept): HubSpot removes any analytics and lead-intelligence cookies it set, no new ones are set, and the Google and OpenAI tags do not use advertising cookies. Two things still happen without cookies: our hosting provider continues to record ordinary server logs and cookieless performance measurements (Section 6), and the Google Ads tag may send Google a cookieless signal containing the page URL, your IP address, and browser type, which Google uses only for aggregate, non-identifying measurement. The OpenAI measurement tag sends no measurement events after you decline.

You can change your choice at any time through the Cookie settings link in the Site footer, which re-opens the banner. You can also control cookies through your browser settings; disabling strictly necessary cookies may cause the banner to reappear.

6. Third-Party Services

The following companies process data on our behalf when you use this Site:

• Cloudflare (hosting, content delivery, security, and traffic measurement) — Every request to the Site passes through Cloudflare's network. Cloudflare keeps ordinary request, security, and error logs, which include your IP address, the page requested, referring URL, browser type, and time of request, and uses them to serve the Site and to block automated abuse. Cloudflare also runs a small measurement script on each page (Cloudflare Web Analytics) that records the page visited, referring URL, browser type, country, and page load timings. It sets no cookies, does not fingerprint your device, and reports aggregate statistics only. Cloudflare processes data in accordance with its Privacy Policy.
• HubSpot (CRM, forms, meeting scheduling, cookie consent, and visitor analytics) — When you submit a form or book a meeting, your information is stored in HubSpot's CRM and we use it to respond and follow up. With your consent, HubSpot's tracking code records the pages you view and, once you submit a form, links that browsing history to your contact record. HubSpot processes data in accordance with its Privacy Policy.
• Google Ads (advertising measurement) — We advertise on Google Search. A Google tag on the Site lets Google count how many people who clicked one of our ads went on to submit a contact form or book a meeting. When cookies are permitted (see Section 5) it sets the _gcl_au cookie; otherwise it may still send Google a cookieless signal (page URL, IP address, browser type) that Google uses for aggregate measurement and not to identify you. We do not use Google remarketing or personalized advertising. Google processes data in accordance with its Privacy Policy and explains its advertising cookies at policies.google.com/technologies/ads.
• OpenAI (advertising measurement in ChatGPT) — We advertise in ChatGPT. An OpenAI measurement tag on the Site lets OpenAI count how many people who arrived from one of those ads went on to submit a contact form or book a meeting. It sends measurement events only while cookies are permitted (see Section 5). It records a click identifier from the ad link and your consent choice in first-party cookies (__obref, __oaiq_consent). OpenAI processes data in accordance with its Privacy Policy. Separately, the "Voodoo Oracle AI" link on the Site opens a custom GPT on chatgpt.com; anything you type there is handled under OpenAI's terms, not this policy.
• YouTube (embedded video) — Some pages embed videos using YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube sets no cookies until you press play; once you do, Google's Privacy Policy applies to the video session.
• Self-hosted fonts — We use the Inter typeface, hosted on our own servers. No third-party font service is contacted when you visit the Site.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Advertising measurement (Google Ads, OpenAI) runs only while cookies are permitted under Section 5 and stops as soon as you decline.

7. Data Sharing

We may share your personal information in the following limited circumstances:

• Service providers: With the providers listed in Section 6 (Cloudflare, HubSpot, Google, OpenAI), who process data on our behalf to host the Site, manage our CRM, and measure advertising.
• Legal requirements: When required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would be transferred as part of that transaction.
• Protection of rights: When necessary to protect the rights, property, or safety of Voodoo Robotics, our users, or others.

8. International Data Transfers

Voodoo Robotics is based in the United States. If you are visiting the Site from the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with data protection laws, please be aware that your data will be transferred to and processed in the United States.

We rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and our service providers' data processing agreements, to ensure appropriate safeguards are in place for international transfers of personal data.

9. Data Retention

We retain personal data collected through the Site for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form and meeting data: Retained in HubSpot CRM for as long as the business relationship is active, or until you request deletion.
• HubSpot cookie and analytics data: Retained for up to 13 months from the date of collection, in accordance with HubSpot's data retention practices.
• Hosting, security, and performance logs: Retained by Cloudflare for a limited period under its own retention schedule; the traffic measurements it reports to us are aggregate and contain no personal data.
• Advertising measurement data: The _gcl_au cookie expires after 90 days. Conversion counts reported to us by Google and OpenAI are aggregate; the underlying click data is retained by those providers under their own policies.
• Email communications: Retained for as long as reasonably necessary for business and legal purposes.

10. Your Rights

10.1 Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of your personal information.
• Right to opt out of sale or sharing: We do not sell your personal information. The advertising measurement tags described in Section 6 may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out at any time by clicking Decline in the banner or through the Cookie settings link in the Site footer, and we honor Global Privacy Control signals as an opt-out.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

11. How to Exercise Your Rights

To exercise any of the rights described above, or to ask questions about this Privacy Policy, please contact us:

We will respond to all legitimate requests within 30 days. In some cases, we may need to verify your identity before processing your request.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes using encrypted connections (HTTPS/TLS) for all Site traffic, serving the Site through Cloudflare's network with automated abuse protection, and relying on service providers (Cloudflare, HubSpot, Google, OpenAI) that maintain industry-standard security certifications.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

13. Children's Privacy

This Site is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: