1. Who we are and what this policy covers

This Privacy Policy explains how Intelletto.ai (“Intelletto.ai”, “we”, “us”) collects, uses, shares and protects personal information. It applies to:

visitors to our website, intelletto.ai;
customers and users of the Intelletto.ai platform and related services;
people who contact us, attend our events or receive our communications; and
job applicants.

We design our privacy controls to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, and with other privacy laws that apply where we or our customers operate, such as the EU General Data Protection Regulation (GDPR).

Our employees’ personal information is covered by a separate internal employee privacy notice.

2. Information we collect

We collect information you give us, information created when you use our services, and limited information from third parties.

Category	Examples	Where it comes from
Identifiers and contact details	Name, email address, phone number, company name, job title	You, when you sign up, contact us or book a demo
Account and billing information	Login credentials, account settings, billing address, payment records	You; payment card details are handled by our payment processor, not stored by us
Usage and technical information	Features used, log data, IP address, browser and device type, time zone	Automatically, when you use our platform or website
Content you submit	Prompts, files, datasets and other inputs, and the outputs our services generate	You or your organisation’s users (see Section 4)
Communications	Support requests, feedback, survey responses, call or meeting notes	You
Marketing preferences	Newsletter subscriptions, event registrations, communication preferences	You
Applicant information	CV, education, work history, certifications, references and background checks	You, your referees and, with your consent, background check providers

We do not intentionally collect sensitive personal information, such as health data, biometrics or government ID numbers, through our platform. If we ever need it, for example for a specific hiring step, we will ask for your consent first and tell you why.

3. How we use information and why

We use personal information only for purposes we have declared, and we rely on a lawful basis for each.

Purpose	Lawful basis
Create and manage your account, and deliver the services you signed up for	Performance of a contract
Process payments and keep financial records	Contract; legal obligation
Provide customer support and respond to requests	Contract; legitimate interest
Keep our services secure, prevent fraud and abuse, and troubleshoot issues	Legitimate interest; legal obligation
Measure and improve our website and services, using aggregated or de-identified data where possible	Legitimate interest
Send product updates, newsletters and event invitations	Consent (you can opt out at any time)
Assess job applications	Steps before a contract; consent for background checks
Comply with laws, regulations, court orders and lawful requests	Legal obligation

Where we rely on consent, we ask for it through a consent form, a privacy notice or an acknowledgment page in our tools, before or as soon as practicable after collection. You can withdraw consent at any time; this does not affect processing that took place before you withdrew it.

4. Customer data and AI features

Our business customers control the data they put into Intelletto.ai, and we process it only to provide the services they request.

Who controls customer data. When an organisation uses Intelletto.ai, the content its users submit (“Customer Data”) belongs to that organisation. The organisation decides what goes in, who can access it and how long it stays; we act as its data processor under our customer agreement and data processing terms. If you are a user of a customer’s workspace, please contact that organisation about your data first; we will help them respond. If you applied for a job with one of our customers, our Candidate privacy notice explains what happens to your application.

Model training. We do not use Customer Data to train or improve AI models unless the customer has agreed to it in writing.

Third-party AI models. Some features may send Customer Data to third-party AI model providers to generate outputs. We only use providers bound by contract to process the data on our instructions, keep it confidential and not use it to train their own models.

AI outputs. AI-generated outputs can be inaccurate. Our services are designed so that people review outputs before relying on them, and we do not use AI to make decisions that have legal or similarly significant effects on you without human involvement.

We do not sell personal information. We share it only in these situations:

Service providers: cloud hosting, payment processing, email delivery, analytics, customer support tools and AI model providers that process data on our behalf under written contracts.
Your organisation: if you use Intelletto.ai through your employer or another organisation, it can see your account details and the content you submit in its workspace.
Professional advisers: lawyers, auditors and insurers, under duties of confidentiality.
Legal requirements: when required by law, subpoena or court order, or to protect the rights, safety and property of Intelletto.ai, our users or the public.
Business transfers: in a merger, acquisition or sale of assets, subject to this policy’s protections continuing to apply.
With your consent: in any other case, only with your permission.

Our service providers may process information outside the Philippines. When we transfer personal information across borders, we use contractual safeguards so that it receives a level of protection comparable to that required under Philippine law and other applicable laws.

6. Cookies and website data

When you visit intelletto.ai, we automatically collect “Device Information”: your browser type, IP address, time zone, the pages you view, the sites or search terms that referred you, and how you interact with the site. When you fill in a contact or demo form, we also collect the “Contact Information” you enter, such as your name, email address, company and phone number.

We collect Device Information using:

Cookies: small data files placed on your device. Essential cookies make the site work; analytics and marketing cookies help us understand and improve our site and are used only with your consent where the law requires it.
Log files: records of actions on the site, such as IP address, browser type, internet service provider, referring and exit pages, and timestamps.
Web beacons and pixels: small electronic files that record how you interact with our site and emails.

You can manage cookies through our cookie banner and your browser settings. Blocking essential cookies may stop parts of the site from working. Our Cookie policy has the details.

7. Privacy principles, retention and disposal

We process personal information fairly and lawfully, following the principles of transparency, legitimate purpose and proportionality.

Transparency: we tell you the nature, purpose and extent of our processing, the risks and safeguards involved, and your rights.
Legitimate purpose: we process personal information only for purposes declared before, or as soon as practicable after, collection, and never contrary to law, morals or public policy.
Proportionality: we collect and use only what is adequate, relevant and necessary for the declared purpose and within the scope of any consent you gave.

Privacy impact assessments. Our Data Protection Officer (DPO) leads periodic Privacy Impact Assessments and risk analyses. We also run them before launching new processes, systems, AI features or strategies that use personal information.

Retention. We keep personal information only as long as needed for the purpose it was collected for, following a defined retention schedule set by legal, contractual and business requirements. Customer Data is kept for the life of the customer’s account and deleted or returned when the agreement ends, as set out in our customer terms.

Disposal. When the retention period ends, we securely delete, destroy or anonymise the information so it can no longer identify you.

8. How we protect your information

We use organisational, physical and technical safeguards appropriate to the sensitivity of the information we hold, including:

encryption of data in transit and at rest;
role-based access controls, so staff access personal information only when their job requires it;
confidentiality obligations and privacy and security training for everyone who handles personal information;
logging, monitoring and regular security testing of our systems; and
security and privacy reviews of the service providers we use.

No system is completely secure. If a personal data breach occurs that is likely to put you at risk, we will notify you and the National Privacy Commission, and any other regulator required by law, within the required timeframes.

9. Your rights

You have the following rights over your personal information, subject to the limits set by law:

Right	What it means
To be informed	To know whether and how your personal information is collected and processed, before or at the time of collection
To access	To find out what personal information we hold about you, why, and to receive a copy in an easy-to-access format
To object	To object to processing based on consent or legitimate interest, including direct marketing, and to withhold consent to changes in how we use your information
To rectify	To have inaccurate or incomplete information corrected, and to have third parties who received it informed on request
To erasure or blocking	To have your information suspended, withdrawn, blocked or deleted if it is incomplete, outdated, false, unlawfully obtained, used for unauthorised purposes, kept longer than necessary, or no longer covered by your consent
To data portability	To obtain your information in a structured, commonly used electronic format and move it to another service
To damages	To be compensated for damage suffered because of inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your personal information
To file a complaint	To complain to the National Privacy Commission (privacy.gov.ph) or your local data protection authority

To exercise any of these rights, email our DPO at privacy@intelletto.ai. We may need to verify your identity first. We will respond within the period required by law and will not charge a fee unless a request is clearly unfounded or excessive.

If you use Intelletto.ai through your organisation, requests about Customer Data may be referred to that organisation, which controls the data.

10. Children, changes and contact

Children. Our services are intended for businesses and are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy. We may update this policy as our services or the law change. We will post the updated version on our website with a new effective date and, for material changes, notify you by email or in the product before they take effect.

Contact us. For questions or requests about this policy or your personal information, contact:

Contact	Details
Data Protection Officer	[Name]
Email	privacy@intelletto.ai
Address	[Registered address]

Privacy policy