Legal

Privacy Policy

Last updated: March 2026 · Veyra

1. Introduction

Veyra ("we," "our," or "us") is a Davao City-based AI automation studio committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our automation services.

This policy is governed by the Data Privacy Act of 2012 (RA 10173) and the rules and regulations of the National Privacy Commission (NPC), as well as other applicable Philippine privacy laws. Where you are located outside the Philippines, additional laws may apply.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We may collect the following categories of information:

Contact and account information — name, email address, company name, and password when you register or contact us
Consent records — timestamp, IP address, and the specific consent given when you opt in to receive commercial electronic messages (CEMs)
Usage data — pages visited, features used, session duration, and interaction patterns
Device information — IP address, browser type, operating system, and device identifiers
Business data — data you upload or process through our services, subject to your data processing agreement
Communications — emails, support requests, and feedback you send us

3. How We Use Your Information

We use collected information to:

Provide, operate, and improve our automation services
Process transactions and send related transactional communications
Send commercial electronic messages — including product updates, launch announcements, and promotional content — only where you have provided express consent as required by applicable law
Send administrative and transactional communications that do not require consent (e.g., account confirmations, security alerts)
Respond to support requests and inquiries
Analyze usage trends to enhance service functionality
Maintain records of consent as required by applicable law
Comply with legal obligations under RA 10173 and other applicable law

4. Commercial Electronic Messages

We will only send you commercial electronic messages if you have provided express consent by actively opting in — for example, by checking a consent box on our contact form.

Every commercial email we send will include:

Clear identification of Veyra as the sender
Our mailing address: Davao City, Philippines
A working, prominently placed unsubscribe mechanism that is honored within 10 business days

To withdraw consent at any time and stop receiving commercial emails, you may:

Click the unsubscribe link in any email we send
Email us at privacy@veyra.ai with the subject line "Unsubscribe"

Withdrawing consent does not affect your right to receive transactional messages related to services you have requested.

5. How We Share Your Information

We do not sell your personal information. We do not share your email address with third parties for their own marketing purposes. We may share information with:

Service providers — third-party vendors who assist in operating our services (e.g., email delivery, analytics), under strict confidentiality agreements and only to the extent necessary
Legal authorities — when required by law, court order, or governmental regulation
Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice to you

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Consent records are retained for a minimum of 3 years from the date of collection, as required by applicable law, even if you subsequently withdraw consent.

You may request deletion of your personal data at any time by contacting us at privacy@veyra.ai. We will respond within 30 days. Note that consent logs may be retained for the legally required period regardless of deletion requests.

7. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights:

Right to be informed — be notified of the collection, use, and processing of your personal data
Right to access — request a copy of the personal information we hold about you
Right to correction — request correction of inaccurate or incomplete data
Right to object — object to the processing of your personal data, including for direct marketing
Right to erasure or blocking — request deletion or blocking of your personal data, subject to legal retention requirements
Right to damages — claim damages for violation of your data privacy rights
Right to data portability — receive your data in a structured, commonly used format
Right to complain — file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph if you believe your privacy rights have been violated

To exercise any of these rights, contact us at privacy@veyra.ai. We will respond within 30 days as required by RA 10173.

8. International Users — Your Jurisdiction-Specific Rights

We serve users globally. In addition to your rights under the Data Privacy Act (Section 7), you may have additional rights depending on your country of residence. We honor these rights regardless of where you are located.

🇵🇭 Philippines — Republic Act 10173 (Data Privacy Act of 2012)
If you are a resident of the Philippines, you have rights under the Data Privacy Act of 2012 (RA 10173) enforced by the National Privacy Commission (NPC). These include the right to be informed, right to access, right to object, right to erasure or blocking, right to damages, right to data portability, and right to lodge a complaint with the NPC. We comply with NPC registration requirements where applicable. Cross-border transfers of Philippine personal data are conducted under appropriate safeguards. To contact the NPC: www.privacy.gov.ph.

🇺🇸 United States — California (CCPA/CPRA) and Federal Law
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights, including: the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information, the right to correct inaccurate personal information, and the right to limit use of sensitive personal information. We do not sell or share personal information as defined under CCPA/CPRA. Our commercial email practices also comply with the federal CAN-SPAM Act. Residents of Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), and other US states with comprehensive privacy laws may exercise equivalent rights by contacting us.

🇦🇺 Australia — Privacy Act 1988 and Australian Privacy Principles
If you are an Australian resident, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct personal information we hold about you, and to complain about a breach of your privacy rights to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. We comply with APP 8 cross-border disclosure obligations when transferring your data to or from Australia. Our direct marketing practices also comply with the Australian Spam Act 2003.

🇪🇺 European Union and 🇬🇧 United Kingdom — GDPR and UK GDPR
If you are located in the EEA or UK, in addition to the rights already described, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

Right to erasure (Article 17) — request deletion of your personal data where it is no longer necessary, or where you withdraw consent
Right to restriction of processing (Article 18) — request we limit how we use your data in certain circumstances
Right to data portability (Article 20) — receive your data in a structured, machine-readable format and transmit it to another controller
Right to object (Article 21) — object to processing based on legitimate interests or for direct marketing purposes
Right not to be subject to automated decision-making (Article 22) — we do not use solely automated decision-making that produces legal or similarly significant effects on you

Our legal basis for processing under GDPR Article 6 is primarily: (a) your consent for marketing communications; (b) contractual necessity for service delivery; and (c) our legitimate interests for security and service improvement. You may lodge a complaint with your local supervisory authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Protection Officer

We have designated a Privacy Officer responsible for overseeing compliance with this policy and applicable privacy laws including RA 10173 (Philippines), GDPR, and the Australian Privacy Act. For all privacy-related inquiries, contact our Privacy Officer at privacy@veyra.ai.

10. Cookies

We use cookies and similar tracking technologies. For full details, please review our Cookie Policy.

11. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. For details on our security practices, please review our Security page.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us immediately at privacy@veyra.ai and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email (where you have provided consent to receive such communications) or by posting a prominent notice on our website. The updated date at the top of this page reflects the most recent revision. We will not retroactively reduce your rights under this policy without your explicit consent.

14. Contact Us & Complaints

For questions, concerns, or to exercise your privacy rights under the Data Privacy Act, contact our Privacy Officer at:

Veyra
Davao City, Philippines
privacy@veyra.ai

If you are not satisfied with our response, you have the right to contact the National Privacy Commission (NPC):
www.privacy.gov.ph