Privacy, stated plainly.

Scope and our role

Immensite provides AI-assisted customer operations for businesses. This policy applies to taormina.ai, our public demonstrations, pilot enquiries, authorized Meta app testing, and any future Immensite application that a business connects to Messenger or an operating system.

Immensite is responsible for personal data we collect directly for our website, demonstrations, sales, security, and authorized app testing. If a customer business later uses Immensite to handle its own customer conversations, that business will normally decide why and how the data is used. Immensite would process the data for that business under its instructions, and the business's own privacy notice would also apply.

Immensite is the product and business name used at taormina.ai. The legal entity behind it is Taormina OPC, a One Person Corporation registered in the Republic of the Philippines. Taormina OPC is the operator of the Immensite service and of any Meta integration, and is the controller responsible for the personal data described in this notice. Questions about this notice, about website data, or about authorized test data can be sent to the public contact above.

This policy does not replace the privacy policies of Meta, a connected business, a payment provider, or another service you choose to use.

Personal data we handle

Depending on how you interact with Immensite, we may handle:

Website demo requests are stored using Netlify Blobs so Immensite can review and respond to your enquiry. Optional preferred demo times are stored with the request. Netlify Forms supports internal request notifications to our team. The form asks for business contact details and optional workflow context; please do not include private customer or patient details.

• Contact and business information. Your name, work email, company, industry, number of locations, role, and the information you include in an enquiry, pilot request, support message, or account setup.
• Meta connection data. Facebook Page and app identifiers; Page-scoped sender and recipient identifiers; message and event identifiers; administrator-granted permissions; connection status; and access tokens or similar server credentials needed to communicate with Meta. We receive only data made available through permissions granted to the app.
• Customer-channel data. Sender and recipient identifiers, message text, supported attachments, replies and postbacks, timestamps, message identifiers, and delivery or read status supplied through a connected channel such as Messenger.
• Operational and transaction data. Information needed to answer or complete a request, such as products, orders, reservations, delivery details, consent status, operator actions, and payment status or transaction references. Immensite does not need your complete card number, online-banking password, or mobile-wallet PIN.
• Website, device, and security data. IP address, browser and device information, requested pages, time, error and security events, and similar network logs generated when the service is used.
• Voice-demo data. If a Immensite page offers the live voice demo, and you start it and permit microphone access, the demo processes your audio, a live transcript, session events, and a privacy-preserving identifier used for safety and rate limiting. The current website demo does not intentionally write your audio or transcript to a Immensite application database; OpenAI receives the session data needed to run that demo.

We receive data from you, the business whose channel you contacted, Meta or another connected provider, systems the business authorizes, and the device or network used to reach the service. Immensite does not currently use advertising cookies, the Meta Pixel, or cross-site ad trackers on taormina.ai.

How we use personal data

We use personal data only where relevant to:

• connect and operate an authorized business channel;
• receive, understand, route, and respond to customer requests;
• prepare or complete authorized work such as an order, reservation, payment-status check, follow-up, or human handover;
• maintain consent, channel-window, permission, and safety controls;
• provide the website, voice demo, customer support, and pilot setup;
• authenticate users, prevent abuse, investigate incidents, and debug failures;
• measure and improve reliability using minimized, aggregated, or de-identified information where reasonably possible; and
• comply with law, enforce agreements, and protect people or the service.

Legal bases and automated assistance

The legal basis depends on the relationship and purpose. It may include your consent; steps requested before or necessary to perform a contract; compliance with a legal obligation; and legitimate interests in providing, securing, supporting, and improving the service where those interests are not overridden by your rights. A customer business may rely on a different lawful basis for the data it asks Immensite to process.

Immensite may use AI to interpret a request, prepare a response, recommend a next step, or carry out an action the connected business has authorized. Consequential actions are designed around permissions, source checks, confirmations, and human handover. Immensite is not intended to make a decision with legal or similarly significant effects about a person based solely on automated processing without an appropriate lawful basis and safeguards.

When data is shared

We may disclose the minimum relevant data to:

• The connected business and its authorized staff so they can see, approve, take over, or complete customer work.
• Channel and system providers such as Meta when needed to receive or send a message, and connected commerce, scheduling, or payment systems when needed to complete an authorized request.
• Service providers that supply hosting, infrastructure, security, communications, and AI processing. If a connected business activates Immensite's hosted AI agent, Anthropic may receive relevant conversation content, business instructions, and tool results needed to prepare a response or action. If the public voice demo is offered and used, OpenAI receives the live audio, transcript, and session data needed to run it.
• Professional advisers, authorities, or another entity in a lawful corporate transaction where disclosure is required or reasonably necessary and subject to appropriate safeguards.

Some providers may process data outside the Philippines. Before a production Meta connection is activated, Immensite and the connected business must document the relevant providers, processing locations, lawful basis, contractual allocation, and safeguards required by applicable law. Current website and authorized app-testing providers process data under their own terms and privacy notices. We do not give another business independent rights to use Meta platform data for its own unrelated purposes.

How long we keep data

Immensite does not currently operate a production Meta customer-data store. Website hosting, security, and email providers may keep limited operational or enquiry records under their own controlled schedules. Immensite uses those records only for the purpose for which they were received, service security, or a documented legal requirement.

Authorized Meta app testing may create test messages, identifiers, and technical logs. Requests concerning that test data are handled manually using the instructions below. Immensite has not yet approved or implemented an automatic production retention or disposal schedule. Before any production pilot processes customer-channel data, Immensite and the connected business must document data-class retention periods, lawful-hold exceptions, subject lookup and verification, deletion execution, and processor deletion responsibilities.

If offered, the live website voice demo keeps only brief in-memory session-control data on Immensite's application side; it does not intentionally save demo audio or transcripts to a Immensite application database. OpenAI and hosting providers may maintain operational records under their own terms and privacy notices. Immensite does not make a more specific provider-retention promise here.

Your choices and rights

Subject to applicable law, including the Philippine Data Privacy Act of 2012, you may ask to be informed about processing; access your data; correct inaccurate data; object to or restrict processing; withdraw consent; request erasure or blocking; receive portable data where applicable; and seek damages or lodge a complaint.

Email hello@taormina.ai. We may ask for limited information to verify the request and protect the person whose data is involved. If a connected business controls the relevant record, we will identify or assist that business so the request reaches the correct decision-maker. You may also complain to the Philippine National Privacy Commission.

Facebook and Meta data deletion

Disconnecting Immensite in your Facebook or Meta Business Integrations settings stops future access through that authorization. To request deletion of data already received by Immensite:

1. Email hello@taormina.ai with the subject Meta data deletion request.
2. Include your name, the connected business or Page name, and any Page, business, or app-scoped identifier you have. Do not send a password, access token, wallet PIN, or full payment credential.
3. For applicable authorized test data in Immensite's possession or control, we will verify the request, locate the data, manually delete or de-identify it, and instruct any processor holding a Immensite-controlled copy to do the same. A specific documented legal-retention obligation may limit deletion, in which case we will explain the limitation.
4. If a connected business controls a separate record, we will promptly coordinate with that business while still deleting every applicable copy in Immensite's or its processors' possession or control. Routing a request does not replace that obligation.
5. We will acknowledge the request, act promptly, and confirm the outcome or explain any lawful limitation or additional verification needed.

This section is Immensite's public user-data deletion instruction page for Meta app settings. It is available without signing in. It is not an automated Meta data-deletion callback or confirmation-status endpoint.

Security, children, and policy changes

We use measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These include access controls, scoped credentials, encryption in transit, separation between tenants and environments, authenticated provider events, audit records, and data-minimization controls in Immensite's application design. These statements do not claim that a production Meta service is active or independently certified. No service can guarantee absolute security.

Immensite's website and business service are not directed to children. Do not use the public voice demo if you are under 18. A connected business must apply any additional notice, consent, and age rules relevant to its customers and services.

We may update this policy when our service or legal obligations change. We will publish the revised policy here, change the effective date, and provide additional notice when a change materially affects how we use personal data.

Contact Immensite

For a privacy question, rights request, or deletion request, contact:

Taormina OPC operates Immensite, based in the Philippines. Contact hello@taormina.ai for privacy questions. Additional production-service contact details, including a postal address and designated privacy representative, will be published before activation.