Privacy Notice

Scope and controller

Exakairos Technologies, based in Sta. Rosa, Laguna, Philippines, is the personal information controller for personal data collected through this website. This notice is prepared in line with Republic Act No. 10173, the Data Privacy Act of 2012, its implementing rules, and guidance from the National Privacy Commission.

This notice covers the public website at exakairos.com. Product pilots, integrations, employment processes, contracts, and vendor onboarding may require additional privacy terms, security reviews, or data processing agreements.

Personal data we collect

When you submit the contact form, you may provide:

• name;
• email address;
• inquiry type;
• message content and any personal data you include in that message.

The site and its service providers may also process basic technical data, such as IP address, browser information, timestamps, device data, referrer data, and security or delivery logs.

Please do not submit sensitive personal information, confidential customer data, production credentials, health information, financial account details, or government IDs through the public contact form.

Why we use personal data

We use website inquiry data to:

• respond to messages, demo requests, partnership inquiries, career inquiries, and other first-contact communications;
• assess whether a proposed pilot, partnership, or engagement is relevant and feasible;
• maintain communication records and business correspondence;
• protect the website from spam, abuse, security incidents, and unauthorized activity;
• comply with legal obligations and preserve lawful rights and interests.

We do not sell personal data submitted through the website. We do not use website inquiry data for automated decision-making that produces legal or similarly significant effects.

Lawful basis

Under Philippine data privacy rules, our processing may be based on one or more lawful criteria, depending on the context:

• Consent, when you voluntarily submit the contact form or email us;
• Contract or pre-contract steps, when your inquiry concerns a possible pilot, service, partnership, or employment process;
• Legitimate interests, such as responding to business inquiries, securing the website, preventing abuse, and managing records;
• Legal obligation, when retention or disclosure is required by applicable law or lawful process.

Recipients and service providers

We limit access to personal data to people and service providers who need it for the purposes described in this notice. Website form submissions are processed by Formspree, our form handling provider. Formspree may transmit, store, screen, and route form submissions on our behalf.

The website also loads third-party resources from Google Fonts and jsDelivr for fonts and scripts. If you click outbound links such as LinkedIn or X/Twitter, those services process your activity under their own privacy notices.

Some providers may process data outside the Philippines. When personal data is transferred or processed internationally, we remain responsible for taking reasonable steps to protect it consistent with the Data Privacy Act.

Retention and security

We keep inquiry records only for as long as reasonably needed to respond, evaluate possible engagements, maintain business records, resolve disputes, protect the site, and comply with legal requirements. If an inquiry does not move forward, we aim to delete or archive it when it is no longer necessary for those purposes.

We use reasonable organizational, technical, and administrative safeguards appropriate to the nature of the data. No website or email transmission is completely secure, so sensitive or confidential materials should be shared only through an agreed secure channel.

Your data privacy rights

As a data subject under the Philippine Data Privacy Act, you may have the right to be informed, access your personal data, object to certain processing, request correction, request erasure or blocking, data portability where applicable, file a complaint with the National Privacy Commission, and claim damages when allowed by law.

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request, and some requests may be limited by law, contractual obligations, security needs, or legitimate business records.

Privacy contact and updates

We may update this notice when our website, form provider, data practices, or legal requirements change. The effective date above shows when this version took effect.