Privacy Policy

Effective Date: June 14, 2026 · Last Updated: June 14, 2026

1. Who We Are

TaxBuddy PH is a tax computation and record-keeping web application for Filipino online sellers. We are the personal information controller of the data you provide to us, as defined under Republic Act No. 10173, the Data Privacy Act of 2012.

Data Protection Officer: Jay Orog
Contact: Contact Support

2. What Data We Collect

We collect the following when you use TaxBuddy PH:

Account data: full name, email address, preferred language, BIR registration status (VAT or Non-VAT), and primary selling platform.

Transaction data: sales records, expense records, categories, amounts, dates, and platform sources you enter manually or upload via CSV.

Subscription data: plan type, subscription status, billing dates, and payment method type (we do not store full card numbers; payment processing is handled by PayMongo).

Usage data: AI chat questions and answers, language preference, theme preference, and AI question count (stored in your browser's localStorage, not on our servers).

Technical data: IP address, browser type, and device information collected automatically by Vercel (our hosting provider).

3. How We Use Your Data

We use your data to:

  • Provide tax computation, BIR journal generation, and record-keeping features
  • Send transactional emails (subscription confirmation, deadline reminders, weekly BIR update digest)
  • Process your subscription payments through PayMongo
  • Improve the accuracy and features of the App
  • Comply with our legal obligations under Philippine law

We do not sell your data to third parties. We do not use your data for advertising purposes.

4. Who We Share Your Data With

We share data only with the following service providers, strictly to operate the App:

Supabase (supabase.com): database and authentication provider. Your account, sales, and expense data is stored on Supabase servers.

PayMongo (paymongo.com): payment processor licensed by the Bangko Sentral ng Pilipinas (BSP). They process your subscription payments. We share only what is necessary to create and manage your subscription.

Resend (resend.com): email delivery provider. We share your email address to send you transactional emails.

OpenAI (openai.com): AI provider powering the AI chat feature and the weekly BIR monitor digest. Your AI chat questions are sent to OpenAI for processing. Do not include sensitive personal information (TIN, bank details) in AI chat questions.

Vercel (vercel.com): hosting and infrastructure provider. They process request logs and technical data as part of serving the App.

All service providers are contractually bound to process your data only for the purposes we specify.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by Philippine law (for example, transaction records relevant to tax audits may be retained for up to 10 years in accordance with BIR regulations).

6. Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Erasure: request deletion of your data, subject to legal retention requirements
  • Objection: object to processing of your data for certain purposes
  • Portability: request your data in a portable format
  • File a complaint: with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated

To exercise any of these rights, email Contact Support with your registered email address and your specific request. We will respond within 15 business days.

7. Data Security

We implement reasonable security measures to protect your data, including:

  • Row-Level Security (RLS) on all Supabase database tables
  • HTTPS encryption for all data in transit
  • Access controls limiting who can view production data

In the event of a data breach that affects your rights, we will notify you and the National Privacy Commission within 72 hours of discovery, as required by RA 10173.

8. Cookies and Local Storage

TaxBuddy PH uses browser localStorage (not cookies) to store:

  • Your language preference (EN or Taglish)
  • Your theme preference (dark or light)
  • Your daily AI chat question count and date (resets at midnight Philippine time)

This data stays on your device and is not transmitted to our servers. We use no advertising cookies and no third-party tracking pixels.

9. Children

TaxBuddy PH is intended for use by adults operating registered or registrable businesses. We do not knowingly collect data from anyone under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or Philippine law. We will notify you of material changes via email. Continued use of the App after changes are posted constitutes acceptance.

11. Contact and Complaints

Data Protection Officer: Jay Orog
Email: Contact Support
Website: taxbuddyph.com

For complaints, you may also contact the National Privacy Commission:
Website: privacy.gov.ph