Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how AutoMate PRO ("AutoMate PRO", "we", "us") collects, uses, and protects personal data when you visit automate-pro.com, use our customer service platform (AutoMate PRO Connect), or message us through WhatsApp or another supported channel. It is written to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Romanian data protection law.

1. Data controller

The data controller is Vuza Alexandru P.F.A. (CUI 54526161, VIES RO54770661), operating as AutoMate PRO, registered at B-dul Bucureștii Noi 136, Sector 1, Bucharest, Romania. You can reach us at alex@automate-pro.com for any question about this policy or your personal data.

2. What information we collect

We collect the following categories of personal data:

  • Website form data: name, email address, phone number, company name, city, website, industry, company size, declared annual revenue, and the business challenges you select, submitted through our free audit form and other contact forms.
  • WhatsApp and messaging data: when you message us or one of our clients through WhatsApp (or another channel connected to AutoMate PRO Connect), we process your phone number, WhatsApp display name and profile picture (if public), the content of the messages you send and receive, message timestamps, and delivery/read status.
  • Technical data: IP address, browser user agent, and request timestamps, used for anti-spam protection and aggregate statistics.
  • Client and contract data: for paying clients, billing details, invoices, and records of the services delivered.

3. WhatsApp Business Platform — how messaging data is handled

AutoMate PRO Connect uses the WhatsApp Business Platform, operated by Meta Platforms, Inc. ("Meta"), to send and receive messages on behalf of AutoMate PRO and the businesses that use our platform. When you message a WhatsApp Business number connected to AutoMate PRO Connect:

  • Your messages are transmitted through Meta's WhatsApp Cloud API and stored on our self-hosted infrastructure (see Section 6) so that a human operator can read, manage, and reply to your conversation.
  • A supporting AI assistant may help an operator draft replies faster, but a human always reviews and controls what is sent — messages are never sent automatically without human oversight of the account.
  • Message content is used exclusively to provide customer service and to fulfil the business purpose of the conversation (e.g. answering a question, confirming an order). It is never used for advertising, sold to third parties, or used to train general-purpose AI models.
  • Meta processes certain metadata (e.g. delivery confirmations) as an independent data processor under its own WhatsApp Business Platform terms and Meta Privacy Policy, available at whatsapp.com/legal/business-data-processing-terms.

4. Legal basis for processing

  • Responding to your request (e.g. free audit, contact form, WhatsApp message) — pre-contractual measures taken at your request (Art. 6.1.b GDPR).
  • Lead management and related commercial activity (qualification, follow-up, proposals) — legitimate interest (Art. 6.1.f GDPR), balanced against your rights.
  • Contract performance (for clients and for businesses using AutoMate PRO Connect on behalf of their own customers) — contract (Art. 6.1.b GDPR).
  • Direct marketing communications (newsletter, product updates) — explicit consent (Art. 6.1.a GDPR), revocable at any time.
  • Aggregate traffic analysis (Vercel Analytics, Google Analytics 4) — consent given through the cookie banner.

5. How we process and protect your data

Data collected through our forms is stored in our internal CRM (self-hosted Postgres, EU-based infrastructure) and isolated per client. WhatsApp conversation data is stored on our own self-hosted infrastructure (Hetzner, EU). Access is limited to the data controller and to authorized automated tools with audit logging.

We do not sell personal data to third parties. We do not automatically profile your behaviour outside our website. We do not share personal data with advertising platforms.

6. Sub-processors and hosting

We use a limited number of service providers who may process personal data on our behalf, always bound by data processing agreements or standard contractual clauses where required:

  • Meta Platforms, Inc. — WhatsApp Business Platform (message transport).
  • Hetzner Online GmbH (Germany, EU) — server hosting for our CRM and customer service platform.
  • Google LLC (Google Workspace) — business email and calendar.
  • Vercel Inc. — hosting of our public website.

7. International transfers

Some providers may process data outside the EU/EEA (e.g. Meta, Google, Vercel). In every such case, appropriate safeguards are in place under Articles 44-49 GDPR (standard contractual clauses, adequacy decisions, or equivalent certifications).

8. Data retention

Lead and website form data is retained for 24 months from the last meaningful contact, then deleted or anonymized. WhatsApp conversation data is retained for as long as reasonably needed to provide customer service and, for business-critical records, for up to 24 months, unless a longer period is required by contract or by law (e.g. tax records for active clients, kept for the duration of the contractual relationship plus the statutory period). Data relating to active clients is retained for the duration of the contractual relationship and for the period required by applicable tax law afterwards.

9. Your rights

Under Articles 15-22 GDPR, you have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing. To exercise these rights, email alex@automate-pro.com; we will respond within 30 days. See also our dedicated data deletion instructions.

You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) or, if you are located in Italy, with the Garante per la protezione dei dati personali.

10. Security

We use appropriate technical and organizational measures to protect data: site-wide HTTPS, strong authentication, the principle of least privilege for CRM and platform access, encryption at rest for credentials, audit logging of sensitive writes, and regular backups.

11. Children's privacy

Our services are intended for businesses and their adult representatives. In line with WhatsApp's own terms, our services are not directed at, and should not be used by, anyone under the age of 13 (or the higher minimum age required in your country).

12. Cookies

For details on the cookies we use and how to manage your preferences, see our Cookie Policy.

13. Changes to this policy

We may update this policy from time to time. The date of the last update is shown above. Material changes will be communicated through our website or by email.

14. Contact

For any question about this policy, email alex@automate-pro.com.