What We Collect
Sagot collects account details, workspace settings, uploaded knowledge sources, chat transcripts, visitor messages, lead details, and operational logs needed to provide and secure the service.
How We Use Information
We use information to operate AI chat, route human handoffs, capture leads, deliver notifications, provide support, prevent abuse, troubleshoot incidents, and improve reliability for customer workspaces.
AI Processing
Visitor messages and selected business context may be sent to AI model providers so Sagot can generate replies. We do not sell customer data, and we do not use customer conversations to train a general-purpose model.
Sharing
We share information with service providers only as needed to host, process, monitor, secure, and communicate through Sagot. Examples include infrastructure, database, email, analytics, and payment providers.
Cross-Border Processing
Some service providers may process data outside the Philippines, including Singapore and the United States. We use contractual, access-control, and security measures to protect data during those transfers. Our final processor agreement and cross-border transfer position are being reviewed before paid launch.
Retention and Deletion
Workspace owners can export or delete business data from the product where available, or request help by email. Some records may be kept longer where needed for security, billing, legal, or audit purposes.
Privacy Rights
Depending on your relationship with Sagot and the customer business, you may have rights to be informed, access your data, object to processing, correct inaccurate data, request erasure or blocking, request data portability, seek damages, and file a complaint with the National Privacy Commission.
Security and Breach Response
We use workspace isolation, access controls, audit logs, rate limits, encrypted integration tokens, and restricted service-role access to reduce privacy and security risk. If a notifiable personal data breach occurs, we will assess scope, notify responsible parties, and support required notices to the National Privacy Commission and affected data subjects within the applicable timeline.
Your Responsibilities
If you place Sagot on your website, you are responsible for telling visitors how you use chat, lead capture, and AI processing, and for collecting any consent required for your business.
Contact
Privacy questions and data requests can be sent to support@ymtechservices.com. A formal Data Protection Officer appointment is part of the pre-launch compliance work.
This notice is an MVP compliance draft and may be updated after Philippine privacy counsel review.