Privacy Policy

This Privacy Policy explains how FormPH ("we", "us"), operated by Leveraging Digital Marketing Services, collects, uses, and protects your personal information when you use birformph.com (the "Service"). We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. Information we collect

• Account information — your name and email, managed through our authentication provider (Clerk).
• Uploaded files — the Excel spreadsheets you upload to generate documents.
• Company profile & signatures — the withholding-agent details you save (TIN, registered name, address, ZIP, RDO) and any signature images you add. These are stored to your account so they follow your login across devices.
• Billing information — handled by our payment processor (PayMongo). We do not store your full card details.
• Usage data — your plan, document counts, and basic logs needed to run the Service.

2. How we handle uploaded files

Uploaded spreadsheets are processed in memory to parse your data and produce your certificates, then discarded. Generated PDFs and DAT files are streamed to you and not retained on our servers. Parsed records may be held briefly to complete your request.

Your company profile and saved signatures are stored (in our database) and tied to your account so you don't re-enter them. You can edit or remove them at any time in your company profile settings; removing a signature or detail deletes it from your account.

3. How we use your information

We use your information to provide and maintain the Service, process payments, enforce plan limits, communicate with you about your account, and comply with legal obligations.

4. Third-party processors

We share the minimum data necessary with trusted providers that help us run the Service:

• Clerk — authentication and account management
• Supabase — database for account and usage records
• PayMongo — payment processing
• Vercel & Railway — application hosting

5. Data retention

We retain account and billing records for as long as your account is active and as required by law. Uploaded file contents are not retained beyond what is needed to fulfil your request. Your saved company profile and signatures are kept until you remove them or close your account.

6. Your rights

Under the Data Privacy Act, you have the right to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to lodge a complaint with the National Privacy Commission (NPC). To exercise these rights, contact us at the details below.

7. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies required for sign-in and security. We do not use them to track you across other websites.

9. Contact & Data Protection Officer

For privacy questions or to exercise your rights, contact our Data Protection Officer at leveragingdigitalph@gmail.com. We will respond within a reasonable period as required by law.