Privacy notice

AIgent is operated by Umbra Group Inc., of 930 Aurora Blvd., Unit 510, Cubao, Quezon City, Metro Manila, Philippines. Our data protection officer is Enyel Jan Cuadro, at enyelcuadro@umbradigitalcompany.com.

We follow the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission.

If you use AIgent for your business, we decide how your account details are used, and this notice covers them.

If you received billing or a payment follow-up from a business that uses AIgent, that business decides how your details are used, and we process them on its behalf. Questions about why they have your details go to them first; we will help them answer.

A business that uses AIgent sets its own schedule and rules: when invoices are due, what documents a customer needs, and how firmly to follow up. The system sends the billing and the follow-ups on that schedule, by email, signed as that business’s billing team.

A person reads every reply and decides what happens next. The system does not decide that an invoice is disputed, settled or written off; it records what you wrote and holds the invoice for the business to act on. An AI model helps word messages and sort replies, and it cannot change what happens to an invoice.

Follow-ups are only about invoices you owe, never threaten, and are sent on weekdays between 08:00 and 18:00 Manila time: on the due date, seven days after, and twenty-one days after, when the business takes over.

• Account details: your name, email address and password (stored only as a hash by our authentication provider), and the business you work for.
• Business records you add: invoices, delivery receipts, purchase orders, withholding certificates, bank statements, and the payments and promises recorded against them.
• Customer contacts: the name and work email of the people a business bills, and the messages exchanged with them.
• Technical records: error reports and security logs, which do not include the contents of your documents.
• Site visits: which pages of our website are opened, the site that linked there, the country, the kind of device, and how fast the page loaded. These are counted without cookies and are not linked to your name or account.

We process account details and business records to provide the service you signed up for, under our contract with you. A customer contact’s name and work email are processed to perform the contract between the business and the contact’s company: sending its invoices and following up on what is owed. We keep security logs because we have a legitimate interest in protecting the service, and count site visits because we have a legitimate interest in knowing how the site is used and whether it is fast.

We do not sell personal data, and we do not use it for advertising.

These providers process data for us, under contract, and only to run the service:

• Supabase: database, sign-in and file storage, in Singapore.
• Vercel: hosting, in Singapore, and counting site visits and page speed.
• Anthropic: reading uploaded documents and replies, and wording messages.
• Postmark: sending and receiving email.
• Xendit: subscription payments. We never see full card details.
• Sentry: error reports.
• Cloudflare: the check on the sign-in page that stops automated sign-ups.

Some of these store or process data outside the Philippines. We use providers bound to protect it to a standard comparable to Philippine law.

We keep business records for as long as the business’s account is open, and for 5 years after it closes, because tax records must be kept. Messages and reply records are kept for 5 years after they are sent or received.

You can ask to be informed about, see, correct, or delete your personal data, object to its processing, and complain to the National Privacy Commission.

To reach a person or to object to follow-ups, reply to any message you received. Your reply goes to the business that sent it, and a person there reads it. You can also write to our data protection officer at enyelcuadro@umbradigitalcompany.com, and we will pass your request to the business and tell you what happens.

Data is encrypted in transit and at rest. Each business can see only its own records, and that is enforced by the database itself, not only by the app.

If we change this notice in a way that matters, we will tell account holders by email before the change takes effect.