Privacy Policy

1. Introduction & Company Information

Welcome to TindahanGo. We are committed to protecting the privacy and security of your personal data. This Privacy Policy describes how TindahanGo (“we,” “us,” or “our”), operated by OCTECH SOFTWARE DEVELOPMENT SERVICES, a sole proprietorship registered in the Philippines with the Department of Trade and Industry (DTI) and Bureau of Internal Revenue (BIR), which holds applicable local business permits, processes personal data in connection with our multi-tenant inventory and point-of-sale (POS) tracking system.

Store Owners decide what staff, customer and business records to enter and who may access them. We process those records on their behalf to provide TindahanGo. OCTECH also processes account, billing, support and security information to operate the service. The allocation of controller and processor responsibilities under Philippine privacy law depends on the processing involved; our Data Processing Agreement explains these responsibilities.

2. Definition of Terms

• Data Subject refers to any individual whose personal, sensitive personal, or privileged information is processed.
• Personal Information (PI) refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained.
• Sensitive Personal Information (SPI) includes information treated as sensitive under Philippine privacy law, such as age, marital status, education, health, religious affiliations and certain government-issued identifiers. Customer credit and financial records are also handled as private information, without assuming that every financial field has the same legal classification.
• Processing refers to any operation performed on personal data, including collection, recording, organization, storage, retrieval, modification, erasure, or destruction.

3. Information We Collect

We collect and process various categories of information to provide the TindahanGo services. These categories are split into:

4. Purpose and Legal Basis of Processing

We use the information above to provide accounts, POS, Food Service, Rental, inventory, reporting and customer credit features; manage subscriptions and support; protect accounts; and maintain transaction and audit evidence. Depending on the activity, processing may rely on providing the requested service, legitimate security and operational interests, consent where required, or applicable legal obligations. In particular:

• Contractual Necessity: To fulfill our obligation to provide the POS, inventory, and subscription billing systems under the Terms of Service.
• Consent and notice: Businesses must obtain appropriate permissions for customer and sensitive evidence collection. Required account, verification and security messages are service communications. The billing-lifecycle workflow can also process the Owner's name and email, company and trial/subscription details for promotional and win-back messages, subject to the company's billing marketing-email preference. These optional messages are distinct from required service communications.
• Legitimate Interest: For fraud detection, preventing cashier cash drawer discrepancies, maintaining robust tenant isolation database queries, and auditing void events.

5. Data Security & Encryption

We use reasonable security measures appropriate to the service. No system, network or storage method is completely secure:

• Passwords and cashier security PINs are protected using one-way cryptographic hashing (bcrypt).
• The production public API uses HTTPS/TLS, and TindahanGo sends transactional email to Resend using its HTTPS API.
• Backend authorization checks company, branch, role and applicable device/module permissions. Tenant isolation is implemented in application access checks and scoped database queries, not a separate database for every business.
• Session expiry/rotation, authentication rate limits and audit events support account security. Rental evidence access is authorized separately from public catalog images.

6. Data Retention & Backups

Retention depends on the record and its purpose, not just whether a subscription is paid. We do not promise a single deletion period for every record:

• Business history: Catalog, sales, payments, inventory, credit, Food Service, Rental and audit records are retained to support operations, historical reports, accounting, security and disputes. Subscription expiry or cancellation does not automatically erase them.
• Cancelled Accounts: Cancellation stops future renewal. Existing paid or grace access keeps its applicable boundary, and a payment submitted before cancellation remains reviewable. If approved, that paid upgrade or renewal is honored under the existing Billing V2 rules and may change the final paid-through date, while the subscription remains cancelled for subsequent renewal. Store data shifts to read-only or restricted access after the final applicable paid, grace, or approved-paid period ends.
• Personal account versus business closure: The supported deletion process anonymizes the affected login profile and revokes its credentials, sessions and assignments. Confirmed business closure anonymizes associated user profiles and revokes workspace access. It does not automatically erase customer/renter identities, uploaded evidence, financial snapshots or business history. Records may remain for accounting, statutory obligations, security, fraud prevention and disputes. Requests concerning retained personal information require separate assessment; contact us rather than assuming closure purges everything.
• Uploads and backups: Replaced or explicitly removed catalog images are cleaned up by supported image operations; account closure itself does not purge all uploads. Rental evidence has a configurable retention-eligibility date and a guarded explicit purge process that preserves financial/audit metadata; reaching that date is not a guarantee of automatic deletion. Backup copies can retain earlier data until replaced or removed. We do not promise daily encrypted offsite backups or deletion from every backup within 30 days. Applicable legal retention and individual removal requests are assessed with the business and relevant legal obligations.

7. Service Providers and Subprocessors

Contabo provides the production hosting infrastructure used for application files and PostgreSQL data. Resend processes recipient email addresses and message content for transactional email. Configured manual GCash subscription payments involve the payment provider and authorized administrators reviewing references and proof. Authorized users of your business can access records according to their permissions; authorized support/administration may access information needed to operate and secure the service. We may disclose information when legally required or necessary to address fraud, security incidents or disputes. Provider processing may occur outside the Philippines.

The code supports optional Sentry error/performance monitoring, which, when configured, can process diagnostic and request context. This policy does not assert that it is currently active or disabled in production without deployment verification.

8. Data Subject Rights

Subject to applicable law and lawful retention exceptions, you may request information, access, correction, deletion or anonymization, portability where applicable, or object to processing. We verify identity and authority before acting. For records entered by a business, contact that business as well; we assist as appropriate. Available rights include:

• Right to be Informed: Knowing whether your data is being processed, and receiving details on the processing parameters.
• Right to Access: Requesting a copy of your personal data held in our systems.
• Right to Correction: Disputing and correcting inaccurate or outdated records.
• Deletion or restriction requests: Request removal, anonymization or restriction, subject to the retained-record purposes explained above.
• Right to Data Portability: Requesting your data in a structured, commonly used electronic format.
• Right to Object: Objecting to processing based on direct marketing or profiling.
• Right to Complain: Filing a formal complaint before the National Privacy Commission (NPC) if your privacy rights have been violated.

To start the supported account process, use Account deletion request or the account-deletion controls in the app. Email verification alone does not delete an account; business closure requires explicit confirmation and may be blocked by active operations.

9. Contact Us

If you have any questions, concerns, or wish to exercise any of your rights under the Data Privacy Act, please use our Privacy / Data Protection Contact: