Who we are
iAutomateDev is an independent studio based in the Philippines. We build AI phone agents, chat assistants and back office automations. We decide why and how the personal data described here is used, which makes us the personal information controller under the Data Privacy Act of 2012 (Republic Act 10173).
Write to privacy@iautomatedev.com about anything in this policy.
What we collect, and why
What we hold depends on which part of the site you use. Each block below says what is collected, what for, and nothing more than that.
Visiting the site
Your IP address reaches our servers with every request. Where we need it, to cap how often one person can start a demo or a chat, we turn it into a one way hash and keep the hash, not the address. Forms that cost us money to run carry a Cloudflare Turnstile check, which decides whether a visitor is a person. Your country, as read from the request, is used once to preselect a dial code and a currency in the page. It is not stored. We do not run advertising trackers or third party analytics on the site.
The call demo
- Your first name, the mobile number you enter and the country it belongs to.
- A check on the number with our text provider, to confirm it is a mobile line, and a six digit code sent by text to confirm the number is yours.
- The call itself: a recording, a transcript and a short summary. The transcript, the summary and your first name stay with the demo session. The recording stays with our call provider, Retell, which deletes it after 60 days.
- A one way hash of your number, so the same number cannot start a second demo for three days. That three days is how long the limit applies. The hash and the rest of the session are stored for 60 days, and then deleted. We also keep the number itself, encrypted, with the session for those 60 days. It is used to check your code, place the call and send the one confirmation text if you book a demo appointment.
- The version of the consent wording you saw when you ticked the box, and the time.
The purpose is to run the demo you asked for. We do not use these details to market to you.
The automation demo
You give a name, an email address and the type of business. Our automation tool, n8n, uses them to send you one demo email and to write a sample lead into a demo practice. Those sample records are deleted when the session is 24 hours old. The email address and the session record are deleted after 60 days.
The chat assistant
What you type is stored with a chat session so the conversation holds together, and a session cookie keeps your place. Each message goes to a language model provider to be answered and to a moderation check before that. If you give your contact details in the chat, they are stored with the session.
The price calculator and quotes
A quote stores the options you picked, the total, your chosen currency and the dates it applies. If you ask us to email it to you, we store that address with the quote and send it through our email provider.
Your account and the client portal
When you sign up we hold your email address, your name and, if you add them, a phone number, your time zone and your preferred currency. Once you are a client the portal also holds your quotes, contracts, invoices, payment records, support tickets, messages and revision requests. This is what we need to deliver the work you pay for and to bill you for it.
We take payment through Payoneer payment requests. You pay on Payoneer's own page, and we record that a payment arrived. We never see or store your card number. When contract signing through DocuSign is switched on, DocuSign receives the signer's name and email address to run the signature.
Video calls with a client run in a Daily room opened from the portal. Calls are recorded in Daily's cloud, and the recording is then copied into our own storage. A transcript and written minutes are made from it by our automation tool, and they appear in your portal. The room is tied to your booking.
Client rooms
A client room is a private page we make for one prospect or client. We hold the name and email address of each person invited to view it, and a record of what they do there: opening the room, how far they watched a video, clicking a button, and asking for a call or for access. A room can embed a video from YouTube, Vimeo, Loom or Google Drive. If it does, that provider sees your request for the video. A cookie remembers the language you chose for the room.
Phone calls to our numbers
A call to one of our business phone numbers can be answered by an AI voice agent, run by Retell or by ElevenLabs. The agent hears what you say, and the call audio and what the agent captures are handled by that provider for us.
People we contact for business
Our team keeps a contact record for people who asked about our work or whom we reach as a business: name, email address, job title, what they asked about, country, time zone, preferred language and phone numbers, with a note of what permission we have. If we phone you, a spoken notice at the start of the call says it is recorded and transcribed, and the recording, transcript and a summary are stored against your contact record. Someone who tells us not to contact them goes on a suppression list that the dialer checks before any call. To prepare for a call, and to caption or translate it live, our team may send business details and call audio to OpenAI.
Who processes it for us
We use the providers below to run the site. Each handles personal data only to provide its service to us. Some of them are outside the Philippines, so your data can be processed in other countries.
- Supabase
- Our database and sign-in. Holds accounts, quotes, demo sessions, contacts and rooms.
- Vercel
- Hosts the website and its server code.
- Cloudflare
- Sits in front of the site, runs the Turnstile check on forms, and stores call recordings in its R2 storage.
- Twilio
- Sends verification codes and confirmation texts, checks that a number is a mobile line, and carries our phone calls. Twilio keeps its own log of the texts it sends, under its own privacy policy.
- Retell
- Runs the AI voice on the call demo and answers some calls to our numbers. Holds the demo recording until it deletes it after 60 days.
- ElevenLabs
- Runs an AI voice agent that answers some calls to our numbers.
- Daily
- Hosts and records the video calls opened from the client portal.
- Resend
- Sends our email, including demo emails and quotes you ask us to send.
- n8n
- Runs our automations, including the automation demo and the steps that follow a quote or a booking.
- Google and OpenAI
- Language models that answer the chat assistant. OpenAI also runs the moderation check on chat messages and supports our team's call research and live captions.
- Upstash
- Holds the counters that limit how often a visitor can start a demo. The counters are keyed by hashes.
- Payoneer
- Collects client payments. Card details are entered on Payoneer and never reach us.
- DocuSign
- Runs contract signatures once that feature is switched on.
Text messages
We send text messages from iAutomateDev for two reasons only: a verification code when you ask for a demo call, and one confirmation if you book a demo appointment on that call. We do not send marketing texts.
We do not sell, rent or share your mobile number or SMS consent with third parties or affiliates for their marketing purposes.
Your number is shared only with the providers that deliver the texts and place the call, listed above and used only for that purpose. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Your carrier and our text provider handle those replies by their standard rules. The full program terms are in the SMS terms.
How long we keep it
- Demo data, which means the call and automation demo sessions and everything stored with them, is deleted after 60 days. The sample records the automation demo writes go after 24 hours. You can ask us to delete it sooner.
- The one way number hash behind the three day demo limit is stored for 60 days, then deleted. The limit lasts three days; the storage lasts 60.
- Everything else, including accounts, quotes, contracts, invoices, chat sessions, room records and business contact records, is kept for as long as the client relationship needs it, and for as long as the law asks us to keep financial records. When you ask us to delete something and we have no reason to keep it, we delete it.
Your rights
Under the Data Privacy Act of 2012 (RA 10173) you have the right to:
- be informed about how your data is handled, which is what this page is for;
- access the personal data we hold about you;
- object to processing, and withdraw a consent you gave;
- correct data that is wrong;
- have your data erased or blocked when it is no longer needed, or was unlawfully obtained;
- receive your data in a common electronic format where it was processed by automated means;
- claim compensation if you were harmed by inaccurate or unlawfully used data.
To use any of them, email privacy@iautomatedev.com from the address or number the data is held under, and say what you want. If you are not satisfied with how we handle a request, you can complain to the Philippine National Privacy Commission.
Changes to this policy
When we change this policy we change the date at the top of the page. If a change affects the demo consent wording, the wording carries a new version number, so what you agreed to is always on record.
Contact
Privacy questions and requests: privacy@iautomatedev.com.
Everything else: hello@iautomatedev.com. The rules for using the site are in the terms of use.