Privacy Policy

This Privacy Policy explains how Rework Technologies Inc. ("Rework," "we," "us," or "our") collects, uses, stores, and protects personal information when you use our conversational AI platform, including our website, dashboard, AI agent, APIs, and related services (collectively, the "Platform"). This policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By using the Platform, you consent to the collection and processing of your personal information as described in this policy.

1. Definitions

For the purposes of this Privacy Policy:

"Personal Information" refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably ascertained, as defined under RA 10173.
"Sensitive Personal Information" includes information about an individual's race, marital status, age, government-issued IDs, health, education, and other categories specified under RA 10173.
"Customer" or "Business" refers to any individual or business entity that registers for and uses the Platform.
"End User" refers to any person who sends a message to a connected Facebook Page or Instagram account that is managed through the Platform.
"Connected Account" refers to any Meta Platforms Inc. account, Facebook Page, or Instagram Professional account authorized by a Customer for use with the Platform.

2. What Information We Collect

We collect the following categories of information:

From Customers and team members

Account details such as name, email, phone number, business name, and role.
Billing information processed by our payment partners. We do not store full card numbers on our servers.
Information you upload to train the AI Agent, including product catalogs, pricing, policies, frequently asked questions, and example replies.
Activity logs from your use of the dashboard.

From Connected Accounts and End Users

Messages, attachments, and reactions exchanged on a Connected Account, accessed through Meta's official APIs in real time.
Public profile information that Meta exposes to your Page or Instagram account, such as username, display name, and profile picture.
Lead information that the AI Agent or your team captures during a conversation, including name, contact details, and the products or services discussed.

We do not collect government IDs, financial account credentials, or biometric information about End Users through the Platform.

3. How We Use Your Information

We use the information described above to:

Operate the Platform, including reading incoming messages and generating replies through the AI Agent.
Authenticate users and secure accounts.
Process payments and manage subscriptions.
Provide analytics, reporting, and business intelligence features inside the dashboard.
Improve the Platform, including evaluating the quality of AI replies, debugging issues, and developing new features.
Send transactional communications, such as billing notices, security alerts, and product updates.
Comply with legal obligations and respond to lawful requests from regulators or courts.

We will not use the content of conversations to train third-party foundation models in a manner that exposes your data to other customers.

4. Lawful Basis for Processing

We rely on the following lawful bases under RA 10173:

Contract, when processing is necessary to provide the Platform you signed up for.
Consent, where you have explicitly agreed to certain processing, such as marketing emails.
Legitimate interests, such as securing the Platform and improving the AI Agent, balanced against the rights of data subjects.
Legal obligation, where processing is required by law.

We share information only as needed to operate the Platform:

Meta Platforms Inc., which hosts your Connected Accounts and delivers messages through Messenger and Instagram APIs.
AI model providers that power the AI Agent, under contractual safeguards that restrict use of your data to providing the service.
Cloud infrastructure and analytics providers that host the Platform and help us monitor reliability and performance.
Payment processors that handle subscription billing.
Authorities or third parties where required by law, to enforce our Terms, or to protect the rights, property, or safety of Rework, our customers, or others.

We do not sell personal information.

6. International Transfers

Some of our service providers may process data outside the Philippines. Where this occurs, we put in place safeguards consistent with RA 10173, including contractual commitments to provide an adequate level of protection.

7. Data Retention

We retain Customer account information for as long as the account is active and for a reasonable period afterward to comply with our legal and accounting obligations. Conversation and lead data are retained for as long as the related Connected Account is active. You can request earlier deletion of specific records by contacting us, subject to legal and operational constraints.

8. Security

We protect your information with safeguards that include encryption in transit and at rest, role-based access controls for our team, regular reviews of our infrastructure, and least-privilege access for service providers. No system is perfectly secure, but we work continuously to reduce risk and respond promptly to any incident.

9. Cookies and Tracking

We use cookies and similar technologies on our website to keep you signed in, remember preferences, and measure how the website is used. You can disable cookies in your browser, but parts of the Platform may not work correctly.

10. Your Rights

As a data subject under RA 10173, you have the right to:

Be informed about how your data is processed.
Access the personal information we hold about you.
Correct inaccurate information.
Object to or request restriction of certain processing.
Request the deletion or blocking of your personal information, subject to legal limits.
File a complaint with the National Privacy Commission.

To exercise any of these rights, please email [email protected]. We will respond within a reasonable period, and in any case within the timeframes required by law.

11. Children

The Platform is intended for use by businesses and their authorized team members. It is not directed at children, and we do not knowingly collect personal information from children under thirteen (13) years of age. If you believe we have inadvertently collected such information, please contact us so we can delete it.

12. Third-Party Services

When you connect a Facebook Page or Instagram account, your data is also handled by Meta under Meta's own terms and privacy policy. We encourage you to review Meta's policies in addition to ours.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the dashboard or by email, and we will update the "Last updated" date at the top of this page.

14. Contact and Data Protection Officer

You can reach our team at [email protected] for any privacy-related question, request, or concern. Our Data Protection Officer can be contacted at the same address.