Legal · Privacy

Privacy Policy

Current policy effective: 15 April 2026 · Resend contact-directory update and owner-directed activation: 27 August 2026

This Privacy Policy describes how Automatika Consulting (“Automatika”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal information when you visit or use our services. It applies to the marketing website at automatika.ph, the client portal at app.automatika.ph, Discovery at discovery.automatika.ph/quote, and the documentation site at docs.automatika.ph, the X24H Outbound™ and X24H Extreme™ Chrome extensions, and their supporting Automatika ActionSuite services at actionsuite.automatika.ph.

We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and reflect rights modelled after the EU General Data Protection Regulation (GDPR) for visitors from those jurisdictions.

ActionSuite Resend update: By owner decision on 27 August 2026, we activated the minimum ActionSuite Resend Contact directory for reconciliation, suppression integrity, and prevention of duplicate or unwanted delivery. This directory is consent-neutral: its existence and a FREE or PRO tier do not subscribe an account to marketing. Optional marketing still requires a current explicit opt-in.

1. Who we are

2. What personal data we collect

We collect only the data described below. We do not buy, sell, or trade personal data.

2.1 From visitors to automatika.ph (marketing site)

2.2 From Discovery (discovery.automatika.ph/quote)

2.3 From the client portal (app.automatika.ph)

The client portal is accessible only by signing in with Google (Google OAuth). When you sign in and use the portal, we collect:

2.4 From the X24H Outbound™ and X24H Extreme™ Chrome extensions

X24H Outbound and X24H Extreme are independent helper utilities that let Pancake CRM users configure, schedule, run, verify, and audit follow-up messaging campaigns. Depending on the product and feature used, the extensions process:

Campaign setup, presets, schedules, templates, page tokens, media metadata, settings, and detailed campaign audit ledgers are stored in Chrome storage or extension-origin IndexedDB on the user's device. Google account and session data, Pancake Access Tokens, and aggregate campaign reports are transmitted over HTTPS to actionsuite.automatika.ph. Pancake Access Tokens are encrypted server-side with AES-256-GCM, are not returned raw after saving, and are never included in telemetry or aggregate campaign reports. Detailed campaign ledgers remain local unless the user explicitly exports them as JSON or CSV.

2.5 From ActionSuite email delivery and the contact directory

By owner decision on 27 August 2026, ActionSuite uses Resend for essential account and service email and a minimum contact directory. The directory may contain an account email address, name when available, an internal or pseudonymous account reference, current FREE or PRO account tier, marketing-preference or topic state, and delivery, bounce, complaint, or suppression status. We do not send Pancake tokens, payment-card details, customer conversations, or detailed campaign ledgers to this directory.

A FREE or PRO label describes product access only. It is not marketing consent, and placing an account in the provider directory does not make that account eligible for a marketing audience. Marketing email requires a separate, current explicit opt-in recorded for that purpose. Provider opt-outs, complaints, bounces, and suppression records take priority over local audience labels.

We rely on the account or service relationship to deliver essential operational email and on our legitimate interests in maintaining a minimal directory, preventing duplicate or unwanted delivery, and honoring suppression records. We limit the fields and access for those purposes and do not use this basis to enroll an account in marketing. You may object or request deletion of eligible directory data through the contact process in §8.

3. How we use your personal data

We use the data described in §2 only for the following purposes:

We do not sell personal data or use automated decision-making that produces legal or similarly significant effects. Marketing-site Meta Pixel events may be used for campaign attribution, conversion measurement, audience insights, and advertising measurement under Meta's terms and your Meta account controls. The extensions' separate Dataset events are limited to the six product-usage event types and allowlisted parameters described in §2.4.

4. Services and third parties we use

We operate ActionSuite and use providers for hosting, authentication, payments, media delivery, service delivery, and measurement as described below. We do not sell personal data. Each third-party provider processes data under its own privacy terms.

Some of these providers process data outside the Philippines (including in the United States and European Union). When they do, we rely on the providers' own lawful-transfer mechanisms (such as Standard Contractual Clauses) to protect your data in transit.

Google API Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. Cookies and similar technologies

6. How long we keep your data

We retain personal data only as long as necessary for the purposes described in §3, or as required by law.

7. Security

No internet service is perfectly secure. If you believe your account has been compromised or you have detected a vulnerability, email with subject “Security issue”.

8. Your rights

Under the Philippine Data Privacy Act (RA 10173) and comparable frameworks, you have the following rights over your personal data:

To exercise any of these rights, email . We verify the identity of the requester before acting on a request. We respond within 30 days of receiving a verifiable request.

9. Children's privacy

Our services are intended for use by business representatives aged 18 and older. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, email and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. When the change is significant, we will notify active clients by email at least 14 days before the change takes effect. The owner-directed ActionSuite directory activation on 27 August 2026 superseded its previously planned waiting period and is recorded contemporaneously in this policy.

11. Contact