1. Introduction
Baligyo is a cloud-based point-of-sale, inventory, and business management platform for retail and other businesses in the Philippines. Baligyo operates the Baligyo website and the Baligyo platform. This Privacy Policy describes how information is collected, used, disclosed, retained, and protected when you visit the website, create an account, or use the platform.
This policy applies to the Baligyo website at baligyo.com and to the Baligyo platform, including the application available to signed-in businesses and their authorized users.
2. Scope and roles
Baligyo is used by businesses, their employees, and other people those businesses authorize. Different activities involve different responsibilities.
Baligyo handles some information for its own operations. That includes account administration, operation of the website, subscriptions, security, and support.
Businesses also enter and manage records through the platform, such as their products, sales, customers, and employees. A customer business may decide why and how it collects and uses information about its own customers and staff. Baligyo provides the software and the related processing needed to run that software.
Whether Baligyo or the customer business determines the purposes of a particular activity depends on that activity and on the agreements that apply. This policy does not assign a single legal role to every kind of processing.
3. Information we collect
The categories below match what the Baligyo website and platform support today.
Account information
When an account is created or maintained, Baligyo processes the person's name, email address, account identifiers, authentication and account-status information, and the roles and permissions assigned to that user.
Business information
Business records can include the business or store name, business address, contact details, store and branch information, and configuration the business saves in the platform, including invoice settings.
Operational information
Authorized users enter and the platform stores operational records the business chooses to keep, including products and inventory, sales and other transactions, purchases and suppliers, customer records, employee records, returns, warranties, invoices, receipts, and reports.
Subscription information
Subscription records include the selected plan and subscription status. Where a payment is recorded, the platform can store the payment method, amount, currency, payment date, billing period, reference number, status, notes, and an uploaded receipt. The self-service payment method currently enabled for businesses is bank transfer. The application does not store payment card numbers. Credit card and PayPal are not enabled as submission methods in the current product.
Technical information
Using the website and platform involves technical data needed to operate them. This includes IP address and browser or device information where the hosting environment or application logs record them, authentication cookies, a non-secret session hint cookie, and application or security logs the service actually writes, including activity records available inside the product.
Contact and support information
The public contact form collects the name, email address, phone number, store name, and message a visitor submits. Registration and that contact form also use Google reCAPTCHA to check that the submission is not automated.
4. How we use information
Baligyo uses the information above to:
- create and maintain user accounts;
- authenticate users and keep sessions signed in;
- enforce tenant, store, and role permissions;
- provide point-of-sale, inventory, purchasing, and related business tools;
- process and display the records a business keeps in the platform;
- manage subscriptions and recorded payments;
- respond to contact and support requests;
- keep the service reliable;
- detect and prevent unauthorized access;
- troubleshoot technical issues; and
- meet applicable legal obligations.
Those are the purposes described in this policy.
5. Legal bases for processing
Processing is carried out on the lawful grounds that apply to the activity under Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Depending on the activity, those grounds may include consent where it is required, performance of a contract, compliance with a legal obligation, legitimate interests where those interests are permitted and properly assessed, and any other lawful ground that applies.
Consent is not the basis for every processing activity described in this policy.
8. Data hosting and international transfers
Baligyo uses cloud infrastructure, including AWS services, and Cloudflare for relevant infrastructure functions. Information may be processed or stored by those providers, and by other providers that are actually configured, under the agreements that apply to them.
Information may be processed or stored on that infrastructure, including outside the Philippines, depending on how the service is configured. This policy does not promise that all information remains in the Philippines, and it does not describe a specific international-transfer safeguard.
9. Data security
Baligyo uses reasonable technical and organizational safeguards appropriate to the service. The public website and API are served over HTTPS. Access to the platform requires authentication. Authorization is limited by tenant, store, and role, so one business does not receive another business's records through normal use of the product. Infrastructure providers also apply their own security controls.
These measures reduce risk. They are not a guarantee that the service cannot be compromised.
10. Data retention
Information is retained only as needed to provide the service, to meet applicable obligations, and for legitimate recordkeeping. How long information is kept depends on the type of information and the requirements that apply to it.
11. Your rights
Under the Data Privacy Act of 2012, and where the conditions in that law and its rules are met, you may have the right to be informed, the right to access, the right to object, the right to correction or rectification, the right to erasure or blocking, the right to data portability, the right to damages, and the right to file a complaint. These rights have conditions and exceptions. A request can be refused or limited where the law allows it.
If the information was entered by a customer business and that business decides how it is used, send the request to that business. Baligyo can help where the request concerns information Baligyo handles for its own operations, such as an account used to sign in.
You may also contact the National Privacy Commission: privacy.gov.ph. Further official material is available on the Data Privacy Act, data subject rights, and the right to be informed.
12. Account closure and deletion
You may email [email protected] to request account closure or deletion of eligible personal information. Requests are reviewed. Some information may need to be retained for applicable legal, security, accounting, or transaction-record purposes. A request that involves records controlled by a customer business may require that business's involvement.
13. Children's privacy
Baligyo is built for business use. It is not a service directed at children, and it does not offer a separate age-verification process. A business that enters information about a minor, for example as a customer record, is responsible for having a lawful basis to do so.
14. Third-party websites and services
The website may link to other sites, including a Facebook conversation and the site of the person named in the footer. Those sites and services, including Google reCAPTCHA, are governed by their own privacy policies. Baligyo is not responsible for how those providers handle information once you leave the Baligyo website or submit information directly to them.
15. Changes to this policy
This policy may be updated when the service, Baligyo's practices, or legal requirements change. The last-updated date is changed when the policy is revised in substance. It does not change on every visit or every software build.
Material changes will be communicated when required.
16. Contact us
Privacy questions, and requests about information Baligyo handles for its own operations, can be sent to:
- Business/service name: Baligyo
- Email: [email protected]
- Phone: +63 975 961 5540
- Address: Purok 7B, Poblacion, Banaybanay, Davao Oriental, Philippines