Privacy Policy

Last updated 24 August 2026

AI Bruv Solutions OPC (“AI Bruv”, “we”, “us”) builds and operates chatbots on WhatsApp and Facebook Messenger on behalf of our business clients. This policy explains what personal information we handle, why, and what you can do about it.

We are a Philippine corporation and comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Two different roles

It matters which of these applies to you, because your rights differ.

• When you message one of our clients' chatbots — the business you are messaging is the personal information controller. We act as their personal information processor, handling your messages on their instructions and only to provide the service.
• When you contact AI Bruv directly — by email, phone, or about becoming a client — we are the controller of that information.
• When you use the demo chat on this website — we are the controller. The businesses in the demo are fictional; the technology is the same one our clients use.

The demo chat on this website

If you try the demo, the messages you type are sent to our server and on to Anthropic to compose a reply, exactly as a real chatbot message would be. We keep them briefly so the conversation follows context, and we count messages per browser session and per network address to stop the demo being abused. We do not ask who you are, and you should not type anything personal or confidential into it. Demo conversations are deleted routinely, and are not used to identify you or to contact you.

The sales chat

The “Chat with us” assistant on this website is one of our own chatbots. If you use it to enquire about our services, it will ask for details a person needs in order to call you back — typically your name, your business, and a phone number or email. We store those details so we can respond to your enquiry, and for no other purpose: we do not sell them, share them for advertising, or add you to marketing lists. Ask us at any time to delete them and we will. If you would rather not use the chat, email hello@aibruv.com instead.

What we handle

• Your messages — the content of what you send to a chatbot, and the replies sent back.
• Your WhatsApp or Messenger identifier — the phone number or platform-assigned ID Meta provides so the conversation can be routed and continued.
• Your display name, where the platform provides it.
• Conversation history — recent messages in your thread, so the bot can follow context rather than making you repeat yourself.
• Technical logs — timestamps and delivery status, used to keep the service working and to diagnose faults.

We do not ask for, and our chatbots are not designed to collect, sensitive personal information such as government ID numbers, health records or financial account details. Please do not send these through a chat. If you do, we will delete them once we become aware.

Why we handle it

• To generate and deliver a reply to your message.
• To maintain the thread of a conversation so it makes sense.
• To operate, monitor and improve the reliability of the service.
• To meet legal and regulatory obligations.

Our lawful basis is the legitimate interest of the business you contacted in responding to you, the necessity of processing to respond to your enquiry, and where required, your consent.

Who else is involved

Delivering a chatbot reply necessarily involves a small number of service providers. We use only those we need:

• Meta Platforms, Inc. — operates WhatsApp and Messenger and delivers messages between you and the business.
• Anthropic PBC — provides language models that compose replies. Message content is sent to Anthropic for this purpose.
• OpenRouter, Inc. — a gateway through which we access additional language models that compose replies. Message content is sent through OpenRouter to the selected model provider for this purpose.
• Google LLC — provides the text-embedding service used to find the right information from a client's own documents.
• Our hosting provider — operates the server on which the service runs.

Some of these providers process information outside the Philippines. Where that happens we rely on their contractual commitments to protect it to a comparable standard. We do not sell personal information, and we do not share it for advertising.

How long we keep it

• Conversation history — retained only as long as needed to maintain context and provide the service, and deleted on a client's instruction.
• Technical logs — retained for a short period for diagnostics, then deleted.
• Direct enquiries to AI Bruv — kept while we are in contact and for a reasonable period after, unless you ask us to delete them.

When a client ends their agreement with us, their conversation data is deleted.

How we protect it

Messages travel over encrypted connections. Our servers are access-controlled, restricted to key-based administrative access, and kept patched. Each client's data is kept separate, so one client's chatbot cannot read another's information. Access is limited to the people who need it to run the service.

No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will notify the National Privacy Commission and affected individuals as the Data Privacy Act requires.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your information is handled;
• access the information we hold about you;
• correct anything inaccurate;
• object to processing, or withdraw consent;
• have your information erased or blocked in the circumstances the Act provides;
• data portability;
• be indemnified for damage caused by inaccurate or unlawfully obtained information;
• complain to the National Privacy Commission.

To exercise any of these, email hello@aibruv.com. If your request concerns a conversation with one of our clients' chatbots, we will pass it to that business, as they control the information — and we will tell you who they are.

Children

Our services are provided to businesses and are not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has sent information to one of our chatbots, contact us and we will delete it.

Changes

We may update this policy as the service changes or the law requires. The date at the top shows when it was last revised, and material changes will be highlighted here.

Contact us

You may also contact the National Privacy Commission of the Philippines at privacy.gov.ph.