Legal

Privacy Policy

Effective date: 1 May 2026

Last updated: 1 May 2026

1. Who We Are (Data Controller)

AITomate ("we", "us", "our") operates the website aitomate.cloud and provides done-for-you AI automation services to businesses. We are the data controller responsible for personal data collected through this website.

Contact:
AITomate
Vijayapura, Karnataka, India
Email: privacy@aitomate.cloud

2. Personal Data We Collect

We collect only the data you provide directly to us when you submit our "Book a Free Audit" enquiry form:

Full Name — to address you personally in our response.
Company Name — to understand your business context.
Phone Number — to contact you to arrange the free audit call.

We do not collect email addresses, payment details, or any special-category data (e.g. health, biometric, political) through this form.

Automatically collected data

When you visit our website, standard web server and CDN logs may record your IP address, browser type, operating system, referring URL, and pages visited. This data is processed by our infrastructure provider (Cloudflare, Inc.) and is used solely for security, performance monitoring, and abuse prevention. It is not used for profiling or advertising.

Cookies

This website does not use tracking or advertising cookies. Cloudflare may set technically necessary cookies (e.g. __cf_bm) for bot-protection purposes. These are strictly necessary and do not require your consent under ePrivacy rules. Google Fonts is loaded from Google's CDN — no cookie is set, but your browser will make a request to Google's servers.

3. How and Why We Use Your Data

Purpose	Data Used	Legal Basis (GDPR Art. 6)
Respond to your audit enquiry	Name, Company, Phone	Art. 6(1)(b) — pre-contractual steps at your request
Follow-up communication regarding our services	Name, Company, Phone	Art. 6(1)(f) — legitimate interest in following up on a genuine enquiry
Security & fraud prevention (server logs)	IP address, browser data	Art. 6(1)(f) — legitimate interest in protecting our systems
Legal compliance	All data as required	Art. 6(1)(c) — compliance with legal obligations

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Third Parties We Share Data With

We share your enquiry data only with the sub-processors listed below, under appropriate data processing agreements:

Processor	Purpose	Location
Cloudflare, Inc.	CDN, DDoS protection, form submission proxy (Workers)	USA (SCCs / EU–US DPF)
Airtable, Inc.	CRM — stores enquiry records (Name, Company, Phone)	USA (SCCs / EU–US DPF)
Google LLC	Google Fonts CDN (font file delivery only)	USA (SCCs / EU–US DPF)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. International Data Transfers

The sub-processors above are based in the United States. Transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU–US Data Privacy Framework (DPF). You may request a copy of the applicable safeguards by contacting us.

6. How Long We Keep Your Data

Enquiry records (Name, Company, Phone) — retained for up to 24 months from the date of submission, or until you request deletion, whichever comes first. Retention allows us to avoid duplicate outreach and to honour any opt-out requests.
Server / CDN logs — typically retained for up to 30 days by Cloudflare for security purposes.

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with equivalent data-protection law, you have the following rights:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — ask us to delete your data where there is no overriding legal basis for retention.
Right to restriction of processing — ask us to pause processing while a dispute is resolved.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests (Art. 6(1)(f)). We will stop unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint — you have the right to complain to your local data protection supervisory authority. In the EU, a list of authorities is available at edpb.europa.eu. In the UK, contact the ICO.

To exercise any of these rights, email us at privacy@aitomate.cloud. We will respond within 30 days. We may ask you to verify your identity before processing the request.

8. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, disclose, or sell; the right to delete your personal information; and the right to non-discrimination for exercising these rights. We do not sell personal information. To submit a request, email privacy@aitomate.cloud.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. Form submissions are transmitted over HTTPS. Access to Airtable records is restricted to authorised personnel only and protected by API key authentication.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Children's Privacy

Our website and services are directed at businesses and their representatives. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via a notice on our website. Your continued use of the website after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact:

AITomate
Vijayapura, Karnataka, India
Email: privacy@aitomate.cloud
Website: aitomate.cloud