Privacy Policy

1. Who Is Responsible For Your Information

For this website, Blueprint, and our own sales, project discovery and business communications, the personal information controller (the organization that decides how personal information is used) is:

When we build, host or support a product for a client, that client usually controls the personal information collected through its product, and we process it only on the client's instructions under a separate agreement. In those cases the client's own privacy notice, not this Policy, explains how that information is used.

2. Information We Collect

What we collect depends on how you interact with us.

We do not use analytics or advertising tools, and we don't collect your location beyond what an IP address generally reveals.

Please don't include sensitive personal information in an initial inquiry, such as passwords, government ID numbers, payment card or bank details, health information, or real employee or customer records, unless we specifically ask for it through a secure process. If your idea involves sensitive information, describe the type of information involved (for example, “patient appointment history”) without sending real records.

If you give us information about another person, such as a colleague who will join a call, please make sure you are allowed to share it and that they know you are sharing it.

3. How We Use Information

• To receive and understand inquiries: review your idea, organize it into a draft plan (a summary, draft requirements and open questions), ask useful follow-up questions, assess whether we can help, and recommend next steps.
• To provide proposals and services: prepare a scope, milestones and price, a Project Agreement, and deliver and support contracted work.
• To communicate with you: reply to messages, arrange discovery calls, send the itemized minutes and updates you asked for, and send service notices.
• To operate and improve the website: keep it working, fix errors, and improve our questions, accessibility and content using our own records.
• To protect people and systems: prevent spam, fraud, abuse and unauthorized access, for example by limiting repeated submissions and keeping an audit trail.
• To meet legal and business obligations: keep required tax and business records, handle disputes, and comply with the law.
• For marketing, only if you opt in: we don't currently send newsletters or marketing emails. If we start, we will only send them to people who have asked to receive them.

Submitting a project idea does not give us permission to publish it, build it for someone else, or use it in a case study. If we would like to feature your project in a testimonial, portfolio or case study, we will ask you separately and specifically.

4. Legal Grounds For Processing

We rely on the ground that fits each activity:

Where we rely on consent, you may withdraw it at any time. This doesn't affect processing that happened before you withdrew it, but we may then be unable to continue preparing your blueprint. Simply using the website is never treated as consent to marketing.

5. Project Ideas, Attachments And Confidentiality

A project inquiry can contain commercially valuable information. Only the people working on your inquiry, and the service providers listed in section 8, can access it, and only to review or respond to it. We do not make inquiries or attachments public.

An initial submission through the website is not, by itself, a non-disclosure agreement. If you need a signed confidentiality agreement before sharing detailed trade secrets or sensitive records, email ryanllonora@rlautomations.com first and share only a high-level description until the agreement is signed. We're happy to sign a reasonable mutual NDA.

We prepare internal notes, summaries and preliminary recommendations from what you share. Ownership and permitted use of project deliverables are governed by any Project Agreement we later sign with you. Our Terms Of Use, section 3 explain how we handle ideas, including similar ideas we may develop independently.

6. AI-Assisted Review

We use AI models to help us work faster and more thoroughly. Currently:

• Anthropic (Claude models) organizes your answers into a draft summary, draft requirements and follow-up questions, and drafts itemized meeting minutes from our own call notes.
• OpenAI (GPT models) independently reviews that draft for missed needs, unsupported assumptions and unclear questions.

7. Cookies And Similar Technologies

We use no advertising, analytics or tracking cookies. Only the following are used:

Because we only use essential technologies, we don't show a cookie banner. Our fonts are served from our own website, not from a third party. You can block cookies and clear local storage in your browser settings; this won't affect the intake form except that unfinished answers won't be saved.

8. When We Disclose Information

We disclose information only as reasonably needed for the purposes in this Policy:

• Service providers that run our service for us, listed below, under terms that require them to protect it and use it only to provide their service.
• Professional advisers such as lawyers, accountants or auditors, where needed and under confidentiality.
• Your organization, if you submit an inquiry on its behalf and sharing is appropriate to that relationship.
• Authorities, when required by law or a lawful order, or when reasonably necessary to protect rights, safety or security. Where the law allows, we will tell you first.
• A successor business, in a merger, acquisition or transfer of our business, subject to the same protections.

We do not sell, rent or trade personal information, and we don't share it with anyone for their own marketing or for cross-site advertising.

9. International Processing

Some of our providers store or process information outside the Philippines: in Singapore (hosting, database and file storage), Japan (email delivery), and the United States (AI providers, and the head offices of several providers). Our business email runs on Google Workspace, which may process data in several countries.

We remain responsible for your information when it is processed abroad. We choose providers whose security and privacy commitments are at least comparable to those required by Philippine law, and we rely on their contractual data-protection terms. Contact us if you'd like more information about these safeguards.

10. How Long We Keep Information

We keep information only as long as reasonably necessary for the purpose it was collected for, including legal, accounting, security and dispute-resolution needs.

You can ask us to delete your inquiry sooner (see section 12). When information is no longer needed, we delete or anonymize it, or keep it securely only where the law requires us to.

11. Security

The safeguards we use include:

• Encrypted connections (HTTPS) for the whole website.
• Private file storage; files open only through short-lived links.
• Role-based staff accounts with signed, expiring sessions, and an audit log of every change.
• A database that is closed to direct public access.
• Removal of contact details before anything is sent to AI providers.
• Limits on repeated submissions to stop spam and abuse.

Your project page link is private. Anyone who has it can open your page, so please don't forward it beyond the people you work with. If you think someone else has it, tell us and we'll disable it.

No website or storage method is completely secure. If we become aware of a personal data breach, we will investigate, take steps to limit harm, and notify affected people and the National Privacy Commission when the law requires it, within the required time (currently 72 hours from knowledge of the breach).

12. Your Rights

Under the Data Privacy Act, you have the right to:

• be informed whether and how your personal information is processed;
• access your personal information and get a copy of it;
• object to processing, including direct marketing, and withdraw consent;
• have inaccurate or incomplete information corrected;
• have your information blocked, removed or destroyed when it is no longer needed or was processed unlawfully;
• receive your information in a commonly used electronic format (data portability);
• be compensated for damages caused by unlawful processing; and
• file a complaint with the National Privacy Commission (privacy.gov.ph).

If another country's privacy law applies to you (for example the EU or UK GDPR), you may have additional rights, and we will honor those that apply to your request.

To make a request, email ryanllonora@rlautomations.com, describe what you're asking for, and give enough detail for us to find your records (for example, the email address you used). We may ask you to confirm your identity before we disclose or change anything. If the law or other people's rights limit what we can do, we'll explain why where we can.

13. Marketing Communications

We don't currently send marketing emails, and submitting an inquiry doesn't sign you up for any. Emails about your inquiry or project (for example our follow-up questions, booking confirmations, minutes and proposals) are service messages, not marketing. If we ever offer a newsletter, it will be opt-in, and every message will include a way to unsubscribe.

14. Children

Our website and services are for businesses and adults. We don't knowingly collect personal information from anyone under 18. If you believe a child has submitted information to us, email us and we'll delete it.

15. Links And Third-Party Services

The website may link to other sites, and a discovery call may use a third-party video service. Their privacy practices may differ from ours, so please review their notices before giving them information directly. This Policy doesn't cover a third party's own use of information.

16. Changes To This Policy

We may update this Policy when our services, providers, practices or legal requirements change. We will post the new version here with a new “Last Updated” date. If a change materially affects how we use information we already hold, we will tell clients with active projects by email and ask for consent where the law requires it.

17. Contact And Complaints

For questions, requests or concerns about this Policy or how we handle personal information, contact:

We will review your concern and respond as the law requires. You may also contact the National Privacy Commission (privacy.gov.ph), the Philippine regulator for privacy matters.

Related: Terms Of Use · Refund & Cancellation Policy