Privacy Policy

• Account: your email and sign-in details.
• Shop profile: shop name, tagline, logo, owner name, contact email, and phone number.
• Business records: products, prices, stock, and sales you create.
• Payment images: the GCash and bank QR codes you upload to show at checkout.
• Technical data: limited device and log information needed to run and secure the Service.

We do notcollect your customers’ card numbers or bank credentials — the Service records payments and shows your own QR codes; it doesn’t process card payments.

We use your data to:

• run, maintain, and secure the Service;
• manage your account and subscription;
• answer support requests and send service notices;
• meet legal obligations.

We don’t sell your data or use it for third-party advertising.

We use Google Firebase (Cloud Firestore and Firebase Authentication) to store and process data on our behalf; these providers may process it on servers outside the Philippines under appropriate safeguards. To work offline, the Service also caches your shop data in your browser (IndexedDB) on the device you use — clearing your browser data or signing out removes that local copy.

Under RA 10173 you can ask to access, correct, or delete your personal data, or object to how it’s used. To do any of these, email hello@mail.brism.organd we’ll respond within a reasonable time. You may also raise concerns with the National Privacy Commission (privacy.gov.ph).

We keep your data while your account is active and for a reasonable period afterwards to meet legal and accounting needs, then delete or anonymise it. You can request deletion at any time.

We may update this policy from time to time; the “last updated” date above reflects the current version. For any privacy question, contact BRiSM at hello@mail.brism.org, or learn more at brism.org.