Privacy Policy

1. Who we are

This policy explains how IOTRON, trading as Iotron AI ("Iotron", "we", "us"), of Islamabad, Pakistan, collects and uses personal data when you visit iotronai.com (the "Website"), use IONA, the assistant on the Website, book a consultation or contact us. IOTRON operates the Website and is responsible for the personal data described here. Iotron also has offices in Dubai (United Arab Emirates) and Chicago (United States). You can reach us about privacy at info@iotronai.com.

2. Scope

This policy covers visitors to the Website and people who send us enquiries, chat with IONA, book consultations or apply for jobs. It does not cover personal data we process on behalf of clients while delivering projects; that processing is governed by our client agreements.

3. Personal data we collect

• Enquiry forms: your name, work email, company, country, project type and message.
• IONA chats: the messages you type and IONA's replies.
• Consultation bookings: your name, email, company, phone number (optional), what you would like to discuss, any project description you add, the meeting time and format, your time zone and, only if you tick the option, a copy of your IONA conversation.
• Collected automatically: your IP address, browser and device type and the pages you request, as recorded in our hosting provider's server logs and used for security and rate limiting.
• Sent to us directly: anything you include in an email, a job application or a message on a professional network.

Please do not share special-category data (such as health information) or confidential business information through the Website.

4. How and why we use personal data

We use personal data to answer enquiries and questions, to arrange, confirm, reschedule and hold the consultations you book, to send you the emails about your booking, to consider job applications, to keep the Website secure and working, and to comply with legal obligations. We rely on your request (taking steps you ask us to take), our legitimate interest in running and protecting our business, and legal obligations. We do not sell personal data, and we do not use it for advertising.

5. IONA

IONA is an AI assistant that answers questions about Iotron. To generate a reply, your messages and the conversation so far are sent to a third-party AI model provider, which processes them on our behalf and may keep them for a limited period under its own terms, for example to detect abuse. We do not store your chat on our servers: the conversation is kept in your browser for the current tab and is cleared when you close it. Our server logs record only technical details such as errors, never what you wrote. IONA can make mistakes, so please check anything important with our team, and do not share personal or confidential details in the chat.

6. Consultation bookings

When you confirm a booking, we store its details in our database and add the meeting, with your booking details, to our team calendar. Our calendar service provider therefore receives those details; it creates the video-call link for online meetings and may send you a calendar invitation. We also send confirmation and update emails to you and our team through our email delivery provider. The booking reference and a private link that lets you manage the booking are saved in your browser, so you can return to it from the same device; you can remove them by clearing the site's data. Anyone holding that private link can view, reschedule or cancel the booking, so please keep it to yourself.

7. Cookies and browser storage

The Website does not use analytics or advertising cookies. It uses only what is strictly necessary: browser storage for your IONA conversation and your bookings (described above), and a sign-in cookie for Iotron staff using the content management area. If we add analytics in future, we will update this policy first and ask for your consent where the law requires it.

8. Who we share personal data with

Service providers that act on our instructions: website hosting and database providers, a form-delivery service that passes enquiry forms to our inbox, a third-party AI model provider for IONA, a calendar service provider and an email delivery provider for bookings. We also share data within Iotron's offices, with professional advisers, with authorities where the law requires it, and with a successor in the event of a merger or acquisition.

9. International transfers

Iotron is based in Pakistan and also works from the UAE and the USA, and our service providers may process data in other countries. Your data may therefore be transferred outside Pakistan or outside the country where you live. Where the law requires it, we put appropriate safeguards in place, such as contractual protections, before personal data is transferred.

10. How long we keep personal data

• Enquiries: up to 24 months after our last contact with you.
• Consultation bookings: up to 24 months after the meeting date, unless the meeting leads to a project.
• IONA chats: we do not keep them (see section 5).
• Job applications: up to 12 months.
• Security and server logs: up to 90 days.

We keep data longer only where the law requires it or to deal with a dispute.

11. Security

We use technical and organisational measures appropriate to the risk, including encrypted connections, restricted staff access and limits on how often the Website's forms and services can be used. No system is completely secure; if a breach affects you, we will notify you and the relevant regulators where the law requires.

12. Applicable law and your rights

We handle personal data in line with the laws of Pakistan, including the Prevention of Electronic Crimes Act, 2016, and any personal data protection law in force in Pakistan. Whatever law applies, you can ask us to tell you what personal data we hold about you, to correct it, to delete it, or to stop using it, and you can withdraw any consent you have given. If you live elsewhere, your local law may give you further rights, for example under the EU and UK GDPR, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) or US state privacy laws such as California's, including the right to complain to your data-protection authority. To make a request, email info@iotronai.com; we may need to confirm your identity and will reply within 30 days, or sooner where the law requires.

13. Children

The Website is intended for business users and is not directed at children under 18.

14. Links, changes and contact

The Website links to other sites; their own privacy practices apply there. We may update this policy and will post the new version here with a new date. Questions or requests: info@iotronai.com, or write to IOTRON, Islamabad, Pakistan.