Privacy Policy

1. Information We Collect

We collect information you provide directly when you interact with our platform:

• Account Information: When you register an account, we collect your username, email address, first name, last name, and hashed password.
• Order & Checkout Contact Data: When placing an order, we collect your contact email for order confirmation, invoice generation, and product delivery.
• Transaction Metadata: We store non-sensitive transaction records including order items, total amount (in centavos), timestamp, currency (PHP), and payment status.

2. Payment Information & PayMongo Integration

All payment processing is executed via PayMongo Philippines, Inc., a PCI-DSS compliant licensed payment gateway:

• Card Payments: Your browser transmits card data directly to PayMongo via secure TLS client-side tokenization. We only receive a non-sensitive token and Payment Intent ID.
• 3D Secure 2.0: Card transactions requiring multi-factor authentication are verified directly through your issuing bank's secure portal.
• QR Ph & E-Wallets: Dynamic QR Ph codes are generated through PayMongo API rails and settled directly via the Bangko Sentral ng Pilipinas (BSP) national QR Ph network.
• Webhook Verification: Payment updates are received via cryptographically signed HMAC SHA256 webhooks to guarantee authenticity and prevent tampering.

3. How We Use Your Information

We use the information we collect for the following legitimate purposes:

• Fulfill digital product orders and grant immediate download access.
• Generate and email itemized order receipts and tax records.
• Authenticate account logins and maintain your active shopping cart.
• Prevent fraudulent transactions and protect our community from unauthorized activities.
• Provide customer support and resolve transaction inquiries.

4. Third-Party Service Providers

We do not sell, rent, or trade your personal data. We only share necessary data with trusted service providers under strict data protection terms:

• Payment Gateway: PayMongo Philippines, Inc. for payment acceptance and settlement.
• Hosting & Infrastructure: Managed cloud infrastructure and reverse proxies with strict firewall and encryption safeguards.

5. Cookies & Local Session Storage

We use essential functional cookies to deliver our services:

• Session Cookies: Keep you logged in securely and preserve your shopping cart state across browser tabs.
• CSRF Tokens: Protect your account and forms against Cross-Site Request Forgery attacks.

6. Data Security & Retention

We implement robust organizational and technical safeguards, including HTTPS TLS encryption, database parameterization, password hashing via PBKDF2/Argon2, and strict access controls. We retain account and transaction records for as long as necessary to satisfy legal, tax, and accounting requirements.

7. Your Privacy Rights

Under applicable data privacy laws (including the Philippine Data Privacy Act of 2012), you have the right to:

• Access the personal information we hold about you.
• Update or correct your personal information via your Profile Page.
• Change your password and security credentials via Account Settings.
• Request closure or deletion of your account and personal data.

8. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Team at: