Privacy Policy

1. Introduction & Company Information

Welcome to TindahanGo. We are committed to protecting the privacy and security of your personal data. This Privacy Policy describes how TindahanGo (“we,” “us,” or “our”), operated by OCTECH SOFTWARE DEVELOPMENT SERVICES, a sole proprietorship registered in the Philippines, processes personal data in connection with our multi-tenant inventory and point-of-sale (POS) tracking system.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), TindahanGo acts as a **Personal Information Processor (PIP)** when hosting and processing transactional, cashier, and debtor data on behalf of our Store Owners. The Store Owner acts as the **Personal Information Controller (PIC)** for their respective branch, cashier, and customer datasets.

2. Definition of Terms

• Data Subject refers to any individual whose personal, sensitive personal, or privileged information is processed.
• Personal Information (PI) refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained.
• Sensitive Personal Information (SPI) includes details regarding an individual's race, marital status, age, religious affiliations, education, health, financial credit status, or any government-issued identification numbers.
• Processing refers to any operation performed on personal data, including collection, recording, organization, storage, retrieval, modification, erasure, or destruction.

3. Information We Collect

We collect and process various categories of information to provide the TindahanGo services. These categories are split into:

4. Purpose and Legal Basis of Processing

We process personal data based on the following legal bases:

• Contractual Necessity: To fulfill our obligation to provide the POS, inventory, and subscription billing systems under the Terms of Service.
• Consent: Where users provide consent for optional processing, including marketing email. Marketing messages are opt-in and include an opt-out; necessary transactional and security messages are handled separately.
• Legitimate Interest: For fraud detection, preventing cashier cash drawer discrepancies, maintaining robust tenant isolation database queries, and auditing void events.

5. Data Security & Encryption

We employ strict administrative, technical, and physical security measures to safeguard your information:

• Passwords and cashier security PINs are protected using one-way cryptographic hashing (bcrypt).
• The production public API uses HTTPS/TLS, and TindahanGo sends transactional email to Resend using its HTTPS API.
• Database access is restricted on a strict "need-to-know" basis, isolated dynamically at the SQL query level by tenant company identifiers.
• The Sentry integration is currently disabled in production because no SENTRY_DSN is configured; if enabled later, this policy will be updated as appropriate.

6. Data Retention & Backups

We retain your data for as long as your subscription is active, or as required by Philippine laws (e.g., BIR rules for tax record retention):

• Active Accounts: All store and transaction logs are maintained continuously to populate historical analytics.
• Cancelled Accounts: Cancellation stops future renewal. Existing paid or grace access keeps its applicable boundary, and a payment submitted before cancellation remains reviewable. If approved, that paid upgrade or renewal is honored under the existing Billing V2 rules and may change the final paid-through date, while the subscription remains cancelled for subsequent renewal. Store data shifts to read-only or restricted access after the final applicable paid, grace, or approved-paid period ends.
• Deleted Accounts: Upon a validated personal deletion request, personal profile data is deleted or anonymized. Closing a business anonymizes personal identity for its Owners, Managers, Cashiers, and staff while necessary historical transaction, accounting, audit, fraud-prevention, dispute, and statutory references remain valid.
• Files and continuity copies: Product/store images and operational uploads are deleted when no longer operationally or legally required. Payment, rental, dispute, fraud, and legal evidence may be retained for the minimum necessary period. Continuity backups may temporarily retain data; no fixed backup schedule or deletion guarantee is promised here.

7. Service Providers and Subprocessors

Production application hosting and PostgreSQL infrastructure are provided on a Contabo VPS. Resend processes email addresses and message content to deliver transactional email from TindahanGo <notifications@tindahango.com>. That sender address is send-only and has no automatic Reply-To. Sentry integration exists in the codebase but is currently disabled in production unless configured.

8. Data Subject Rights

Under the Data Privacy Act (DPA), you possess the following rights regarding your personal data:

• Right to be Informed: Knowing whether your data is being processed, and receiving details on the processing parameters.
• Right to Access: Requesting a copy of your personal data held in our systems.
• Right to Correction: Disputing and correcting inaccurate or outdated records.
• Right to Deletion: Demanding the suspension, withdrawal, blocking, or removal of your personal data from our databases.
• Right to Data Portability: Requesting your data in a structured, commonly used electronic format.
• Right to Object: Objecting to processing based on direct marketing or profiling.
• Right to Complain: Filing a formal complaint before the National Privacy Commission (NPC) if your privacy rights have been violated.

9. Contact Us

If you have any questions, concerns, or wish to exercise any of your rights under the Data Privacy Act, please use our Privacy / Data Protection Contact: