Privacy

Privacy policy

What we collect, why, who else sees it, and how to take it back. In plain words.

Draft, 1 October 2026

Who we are

YabsssAI Solutions, an AI consultancy in the Philippines, decides what happens to the personal data described here. For anything about your data, write to team@yabsssai.com.

What we collect

Only what you give us, plus a little technical data that comes with any visit to a website.

  • The contact form. Your name, your business name, your email address, your message, and your mobile number if you choose to add one. There is also a newsletter box, and it is unticked until you tick it. The form sends one email to our team inbox. Nothing is saved on the website itself.
  • If you email or message us. Whatever you send, and your address or number. Viber and Messenger are other companies’ apps and their own terms apply there.
  • Chara, the chat assistant. What you type to Chara, and up to the last eight messages of that conversation so she can follow it. Chara is an AI. Please do not type personal details into the chat. We do not keep the conversation. We keep one number, how many answers were given that day, and it is not tied to anyone.
  • Technical data. Like any website, loading this one shows your IP address and browser details to our host, Cloudflare. The form and the chat use your IP address for a moment to stop one person sending a flood of requests. We do not save it.
  • Visit counts. We use Cloudflare Web Analytics, which counts visits and how fast pages load. Cloudflare describes it as working without cookies and without following you from site to site.

Why we use it, and our basis under the law

The Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules say we need a lawful basis for every use. These are ours.

  • To answer you and to quote. When you write to us, you are asking us to take a step toward working together. That is the basis for replying and quoting, and we use it for nothing else.
  • To send the newsletter. Only if you tick the box. That is your consent, and you can withdraw it at any time.
  • To answer your questions in the chat. You ask, and Chara replies. Our basis is our legitimate interest in answering visitors, and your own choice to type.
  • To keep the site working and safe. Rate limits, hosting and visit counts. Our basis is our legitimate interest in running a secure site that loads well.

Who else handles it

We use a short list of companies to run the site. Each receives only what its job needs.

  • Cloudflare. Hosts the website, runs the small programs behind the form and the chat, carries the form email to our inbox, and provides the visit counts. It sees the data that passes through those jobs.
  • Anthropic. Writes Chara’s replies. It receives what you type to Chara and the recent conversation. By default, Anthropic deletes this from its systems within 30 days, and it may keep it longer if it has to check a breach of its usage rules. Anthropic’s commercial terms say it does not train its models on this content.
  • jsDelivr. Two of our portfolio demos (the watch demo and the particle hero demo) load code from the jsDelivr network. Opening one of those pages shows your IP address to jsDelivr. The rest of the site does not.
  • No one else. We do not sell your data and we do not give it to advertisers.

Sending data outside the Philippines

Cloudflare and Anthropic run their systems in other countries, so what passes through them can be processed outside the Philippines. We use them only to do the jobs above, and we remain responsible for the data we send them.

Your rights

Under the Data Privacy Act you may ask to be told what we hold about you, to see it, to correct it, to have it deleted or blocked, to object to how we use it, to receive a copy in a usable form, and to claim compensation if you were harmed by a misuse of your data. To use any of these, write to team@yabsssai.com. We will answer, and we will not ask you to explain why.

If you think we have handled your data wrongly, you can complain to the National Privacy Commission of the Philippines (privacy.gov.ph). We would like the chance to fix it first, but you do not have to wait.

If something goes wrong

If a breach puts your personal data at real risk of harm, we will tell you and the National Privacy Commission within the time the law gives us, which is 72 hours from when we learn of it.

Cookies and browser storage

We set no cookies of our own, and we use no tracking or advertising cookies. The site does keep three small notes in your browser’s own storage, and that is all they are:

  • y-intro-seen. Remembers that you have seen the opening animation, so it does not play again.
  • y-consent. Remembers whether you accepted or declined the cookie notice. The choice is only recorded. The visit counts described above use no cookies, so the notice does not switch them on or off.
  • y-chat-seen. Remembers that you have noticed the chat button, so we stop highlighting it.
  • Cloudflare. Our host can set one security cookie, called cf_clearance, when it checks that a visitor is a person and not a bot. We do not set it, and it is not used to track you.

To clear the three notes, delete this site’s data in your browser settings. The next visit will then treat you as new.

Changes to this policy

If we change how we handle your data, we will update this page and its date. The date at the top shows the latest version.