Privacy Policy
Effective July 21, 2026
This Privacy Policy explains how eInvoicePH (“we”) collects and uses personal data. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
1. Data we collect
- Account data: your email, business name, and login credentials (passwords are stored hashed by our authentication provider).
- Subscription data: the plan you choose, your GCash/Maya payment reference, and the payment screenshot you upload for verification.
- App data: the taxpayer profile, invoice series, customers, products, and invoices you enter to use the invoicing tool.
- Support data: messages you send us and the email tied to them.
2. How we use it
We use personal data to create and secure your account, verify and activate your subscription, provide the invoicing tool, issue receipts for your payments, respond to support requests, and comply with legal obligations. We do not sell your personal data.
3. Legal bases
We process data to perform our contract with you (providing the Service), to comply with legal obligations, and for our legitimate interests in operating and securing the Service, consistent with the Data Privacy Act.
4. Sharing and processors
We use trusted service providers to run the Service — including our hosting and database provider (Supabase) and our deployment platform (Netlify). They process data on our behalf under their own security commitments. We may disclose data where required by law or lawful request from authorities such as the BIR or the National Privacy Commission.
5. Storage and security
Your data is isolated per account using database row-level security so one account cannot read another’s records. Payment screenshots are kept in private storage accessible only to you and our reviewers. We apply reasonable organizational, physical, and technical safeguards, though no system can be guaranteed perfectly secure.
6. Retention
We keep your data for as long as your account is active and as needed to meet legal, tax, and accounting requirements. You may request deletion, subject to records we are required to retain by law.
7. Your rights
Under the Data Privacy Act you have the right to be informed, to access, to object, to correct inaccurate data, to erasure or blocking, to data portability, and to lodge a complaint with the National Privacy Commission. To exercise these rights, contact us through the contact page.
8. Changes
We may update this Policy from time to time. Material changes will be posted here with a new effective date.
This document is a starting template and not legal advice. Appoint a Data Protection Officer and have this reviewed by a Philippine privacy professional before relying on it.