TindaFlow Request early access

Privacy Policy

Effective [TODO: effective date]

[TODO: Draft for review by a Philippine lawyer or data privacy adviser. Check every section against how TindaFlow actually handles data, then remove this notice.]

This policy explains how [TODO: registered business name] (“TindaFlow”, “we”, “us”) handles personal data when you visit tindaflow.com, send us a request or message, or use the TindaFlow application. We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

1. Who is responsible for your data

[TODO: registered business name], [TODO: business address], is the personal information controller for data collected through this website and for TindaFlow account information.

Data Protection Officer: [TODO: DPO name], [TODO: privacy/DPO email].

2. What we collect

WhenWhat we collectWhy
You request early access Name, business name, type of business, city or province (optional), email, mobile number (optional), any notes you add, whether you want product updates To review and reply to your request and set up your account
You contact us Your name, contact details and what you tell us in the message To answer you and give support
You use the TindaFlow app Account details (name, email, login information) and the business records you enter, such as products, stock quantities and sales To provide the service you signed up for
You visit the website Technical data such as IP address, browser type and pages visited, processed by our hosting and analytics providers To deliver the website securely and count visits in aggregate

We do not ask for government ID numbers or payment card details on this website. We do not sell personal data.

3. Legal basis

  • Consent, which you give when you send the early-access form or ask for product updates. You can withdraw it at any time.
  • Contract, to provide the TindaFlow service to account holders.
  • Legitimate interests, to keep the website and service secure and to understand overall website use, without overriding your rights.
  • Legal obligation, where the law requires us to keep or disclose information.

4. Records about your own customers and staff

If you enter information about other people into the TindaFlow app, such as customer or staff names, you decide what to record and why. For that information we process data on your behalf and only to provide the service. [TODO: confirm whether the app stores customer or staff personal data at all, and adjust this section.]

5. Cookies and analytics

This website does not use advertising or tracking cookies. We count visits with [TODO: analytics tool, e.g. Cloudflare Web Analytics, which does not use cookies] and see totals only, not individual visitors. The TindaFlow app uses cookies needed to keep you logged in.

6. Who we share data with

We share personal data only with service providers that help us run TindaFlow, under agreements that require them to protect it:

  • Cloudflare, Inc., which hosts this website and processes form submissions
  • Microsoft Corporation (Azure), which hosts the TindaFlow app and its database
  • [TODO: email provider, and any other processors]

Some of these providers may store or process data outside the Philippines. Where they do, we rely on their contractual and security commitments to protect it to the standard the Data Privacy Act requires. [TODO: confirm hosting regions for the app and database.]

We may also disclose data when the law or a lawful order requires it.

7. How long we keep it

  • Early-access requests: [TODO: e.g. up to 12 months after our last contact if you do not become a user]
  • Support messages: [TODO: retention period]
  • Account information and business records: while your account is active, then [TODO: period after closure, and export option]

When we no longer need data, we delete or anonymize it.

8. How we protect it

We use encrypted connections (HTTPS), access controls, and providers with recognized security practices. Only people who need the data to run TindaFlow can access it. If a personal data breach occurs that the law requires us to report, we will notify the NPC and affected people as required.

9. Your rights

Under the Data Privacy Act you have the right to:

  • be informed about how your data is processed
  • access your personal data
  • object to processing, and withdraw consent
  • have inaccurate data corrected
  • have data erased or blocked when there are grounds to do so
  • get a copy of your data in a commonly used electronic format (data portability)
  • claim damages for inaccurate, unlawfully obtained or unauthorized use of personal data
  • file a complaint with the National Privacy Commission

To use these rights, email [TODO: privacy/DPO email]. We may need to confirm your identity first. We aim to reply within [TODO: response time, e.g. 15 working days]. You can also contact the National Privacy Commission at privacy.gov.ph.

10. Children

TindaFlow is for businesses. It is not meant for people under 18, and we do not knowingly collect their data.

11. Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If the change is significant, we will also tell account holders by email or in the app.

12. Contact

Questions about this policy: [TODO: privacy/DPO email], or write to [TODO: registered business name], [TODO: business address].