1) Overview
AutomateX (“AutomateX,” “we,” “us,” “our”) respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard Personal Information when you:
- visit our websites (including AutomateX.co and related pages),
- create an account or use the AutomateX platform,
- contact us, attend events, or otherwise interact with us, collectively (the “Platform” and “Services”).
Important: Controller vs Processor
AutomateX serves two roles depending on the context:
AutomateX as a Data Controller
When you visit our website, sign up for a trial, create an account, or communicate directly with AutomateX, we act as the “controller” of your Personal Information.
AutomateX as a Data Processor / Service Provider (Customer Data)
Many users use AutomateX to manage their own end-customer data (their contacts/leads/customers). In that case, AutomateX processes that data on behalf of the customer (the customer is the controller).
If you are a contact of one of our customers (for example, you received a message from a business using AutomateX), your privacy rights and notices generally come from that customer, not AutomateX.
By using the Platform, you agree to this Privacy Policy. If you do not agree, do not use the Platform.
2) Information We Collect
We collect “Personal Information” (information that identifies you or can reasonably be linked to you).
A) Information you provide to us
Examples include:
- Name, email address, phone number, company, job title
- Account registration details and authentication information
- Billing and payment details (processed via payment providers)
- Support requests, chat messages, emails, and call recordings (where permitted)
- Content you submit to the Platform (templates, workflows, messages, files, etc.)
- Scheduling details if you book meetings or demos
If you provide Personal Information about someone else, you confirm you have the right to do so.
B) Information collected automatically
When you use the Platform, we may collect:
- IP address, device identifiers, browser type, OS, language, region
- Usage data (pages viewed, clicks, time spent, feature usage, logs)
- Referral URLs and marketing attribution data
- Cookies and similar technologies (see Cookies section)
C) Information from third parties
We may receive information from:
- Advertising/marketing partners (campaign attribution, basic identifiers)
- Social networks (if you interact with our pages or ads)
- Event partners (attendee lists, business cards, opt-ins)
- Integration partners you connect to the Platform (per your settings)
3) How We Use Personal Information
We use Personal Information for the following purposes:
A) Provide and operate the Platform
- Create accounts, authenticate users, and maintain subscriptions
- Deliver features like CRM, pipelines, workflows, messaging, scheduling, reporting
- Provide onboarding and implementation services (if purchased)
B) Improve performance, reliability, and user experience
- Analyze usage, debug issues, and optimize features
- Maintain system integrity and prevent downtime
- Develop new features and product improvements
C) Customer support
- Respond to questions, troubleshoot, and provide guidance
- Communicate about incidents, updates, and service changes
D) Communications and marketing
- Send product updates, security notices, service messages
- Send marketing and educational content (where allowed by law)
- You can opt out of marketing communications anytime
E) Security, fraud prevention, and compliance
- Protect the Platform from misuse, fraud, and security threats
- Enforce our Terms, prevent abuse, and investigate suspicious activity
- Comply with legal obligations and lawful requests
F) AI features and AI agents
Some Platform features may include AI-assisted capabilities (including AI agents, AI workflows, and AI-generated outputs). We use data to:
- provide AI features you request,
- help automate actions within your configured workflows,
- improve relevance of outputs within your workspace.
We do not use Customer Data to train public/general-purpose AI models unless explicitly stated in a separate agreement or setting. Where we use AI subprocessors, they are instructed to process data only to provide the Service.
4) Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to:
- remember preferences and keep sessions secure
- measure traffic and improve website performance
- understand feature usage and improve the Platform
- support marketing attribution and campaign reporting
You can control cookies via your browser settings. Some features may not work properly if cookies are disabled.
5) Legal Bases for Processing
Where required by law (e.g., EEA/UK), AutomateX processes Personal Information under one or more of the following bases:
- Contract: to provide the Services you requested
- Legitimate interests: to secure, improve, and market the Platform responsibly
- Consent: where required (for certain marketing or cookies)
- Legal obligation: compliance with applicable laws and regulations
You can control cookies via your browser settings. Some features may not work properly if cookies are disabled.
6) How We Share Personal Information
We may share Personal Information in the following situations:
A) Service providers (subprocessors)
We share data with trusted vendors that help us operate the Services, such as:
- hosting and infrastructure providers
- analytics and monitoring providers
- customer support tooling
- payment processors (e.g., Stripe)
- messaging/telephony providers (e.g., Twilio and similar providers)
- email delivery providers and SMTP services
- AI subprocessors where AI features are enabled
These providers are authorized to process data only as needed to provide services to AutomateX and are contractually required to protect it.
B) Integrations you enable
If you connect third-party services (WhatsApp API providers, ecommerce platforms, Zapier/Make, Meta, Google, etc.), data may be shared with those services based on what you authorize. Their privacy policies apply to their processing.
C) Legal and safety reasons
We may share information if required to:
- comply with law, regulation, subpoena, or court order
- protect rights, safety, and security of AutomateX, users, or the public
- prevent fraud, abuse, or technical attacks
D) Business transfers
If AutomateX is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
E) With your direction or consent
We may share data where you instruct us or provide consent.
7) Communications and Messaging Compliance
AutomateX supports messaging features (SMS, WhatsApp, email, calling). Compliance depends on configuration and local laws.
Customers using AutomateX are responsible for:
- obtaining proper consent for marketing or automated messaging
- complying with applicable messaging and privacy laws
- managing opt-outs and suppression lists
AutomateX provides tools to support these requirements, but customers control messaging content and recipients.
8) Data Retention
We retain Personal Information as long as needed to:
- provide the Services
- meet legal, accounting, and compliance requirements
- resolve disputes and enforce agreements
- maintain security and prevent fraud
Retention length depends on the type of data and purpose. Where possible, we may anonymize data for analytics and improvement.
Customers can request deletion of their account data (subject to legal and contractual obligations). If you are an end-customer of a business using AutomateX, request deletion directly from that business (the controller).
9) Security
We use reasonable administrative, technical, and organizational measures designed to protect Personal Information from unauthorized access, alteration, disclosure, or destruction.
No system is 100% secure. You are responsible for:
- keeping your login credentials confidential
- using strong passwords and secure device practices
- notifying us immediately if you suspect unauthorized access
10) Children’s Privacy
AutomateX is not intended for children under 16. We do not knowingly collect Personal Information from children under 16. If you believe a child has provided us data, contact us to request deletion.
11) Links to Other Websites
Our Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing information.
12) International Data Transfers
AutomateX may process and store information in countries other than your own. Where required, we use appropriate safeguards (such as contractual protections) for cross-border data transfers.
13) Your Rights and Choices
Depending on your location, you may have rights to:
- access, correct, or delete your Personal Information
- object to certain processing or request restriction
- request portability of your data
- withdraw consent (where processing is based on consent)
- opt out of marketing communications
- lodge a complaint with a data protection authority
To exercise rights, contact us using the information below. We may need to verify your identity.
Marketing opt-out: You can unsubscribe via email links or by contacting us.
Note: Service messages (billing, security, platform notices) may still be sent.
14) Data Processing for Customer Accounts
If you are a customer using AutomateX to process your contacts’ data, you are responsible for providing appropriate notices and obtaining required consents. AutomateX processes such Customer Data under your instructions (as processor/service provider).
15) Updates to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law. Continued use of the Platform after updates means you accept the revised policy.
16) How to Contact Us
For questions about this Privacy Policy or privacy requests:
CRM
Foundation
Momentum
Scale
Apex