Privacy Policy

1. Data Controller

Automatry Ltd is the data controller for personal data collected through this website and for personal data collected from tenants of the Automatry FSM and Edge platforms.

Automatry Ltd, Company no. 11927273, registered office: Flat 12 Calico Court, Marine St, London SE16 4AZ, United Kingdom.

2. Contact

For privacy enquiries, data subject requests, or to request our Data Processing Agreement, contact enquiries@automatry.com.

3. What We Collect

Contact details — name, email address, phone number, and company name supplied through enquiry forms or platform onboarding.

Tenant account data — user accounts, role assignments, organisation details, and billing contacts for tenants of the Automatry FSM and Edge platforms.

Platform usage data — logs, telemetry, and audit records generated while using the platforms, used for operation, security, and support.

Support correspondence — messages and attachments you send to us when raising support requests.

Website technical data — IP address, browser, device, and referrer information collected by analytics and standard server logs.

WhatsApp, SMS, and email messaging data sent by tenants to their own customers through the Automatry FSM platform is processed by Automatry as a data processor on behalf of the tenant, not as a controller.

4. Lawful Bases

Contract performance — to deliver the platform services and support to tenants and their authorised users.

Legitimate interest — to operate, secure, and improve the platforms, respond to enquiries, and protect against fraud or abuse.

Consent — where you opt in to marketing communications or non-essential analytics.

Legal obligation — where processing is required by applicable law, including tax and accounting.

5. Sub-Processors

We use the following sub-processors to deliver our services:

Meta Platforms, Inc. — WhatsApp Business Platform messaging delivery — global (data routed through Meta infrastructure).

Twilio Inc. — SendGrid transactional email and future WhatsApp BSP routing — United States (operating under appropriate transfer safeguards).

Stripe, Inc. — payment processing for subscriptions and invoicing — Ireland / United States.

Google LLC — Google Cloud Platform and Firebase hosting and data storage — europe-west2 (London) and other EU regions.

6. Your Rights Under UK GDPR

You have the right to request access to your personal data; request rectification of inaccurate or incomplete data; request erasure of your personal data, where applicable; request restriction of processing; request data portability; object to processing carried out on the basis of legitimate interest; withdraw consent where processing is based on consent; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Retention

We retain personal data for the duration of your contract or active relationship with Automatry, plus seven years for accounting and legal record-keeping purposes, after which data is deleted or anonymised. Tenant-controlled data within the Automatry FSM platform is retained according to the tenant's instructions.

8. International Transfers

Personal data is stored in UK and EU regions wherever practical. Where sub-processors are based outside the UK or EU, transfers operate under appropriate safeguards, including Standard Contractual Clauses or applicable adequacy decisions.

9. Security

We apply technical and organisational measures appropriate to the risk of processing, including encryption in transit, role-based access controls, audit logging, and least-privilege access for personnel.

10. Updates to This Policy

We review this policy periodically. Material changes will be posted on this page with an updated revision date.