1. Introduction
AlabAI Technologies ("we", "us", "our") is committed to protecting your personal data in accordance with the Republic Act No. 10173 or the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations.
2. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, business name, locale, and timezone when you register
- Business Context: Brand voice, offers, audience notes, uploaded files, website crawl summaries, GitHub summaries, social channel snapshots, generated drafts, website projects, and media assets
- Usage Data: Browser type, IP address, pages visited, and feature usage for analytics and improvement
- Payment Information: Billing details processed through our payment partners (PayMongo). We do not store full payment card details
3. How We Use Your Information
Your information is used to:
- Provide and maintain the Service
- Create, review, schedule, publish, and analyze social content and website drafts
- Send important service notifications
- Improve our platform through anonymized analytics
- Provide customer support
- Comply with legal obligations
4. Data Storage and Security
Your data is stored on secure cloud infrastructure provided by Supabase (powered by AWS). We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Row-Level Security (RLS) for multi-tenant data isolation
- Regular security audits and monitoring
- Access controls and audit logging
5. Data Sharing
We do not sell your personal data. We may share data with:
- Service Providers: Cloud hosting, authentication, email delivery, AI model providers, storage, analytics, and connected-channel APIs
- Legal Requirements: When required by Philippine law or court order
- Business Transfers: In connection with a merger or acquisition, with prior notice
6. Your Rights Under the DPA
As a data subject under the Philippine Data Privacy Act, you have the right to:
- Be Informed: Know what data we collect and how we use it
- Access: Request a copy of your personal data
- Object: Refuse or withdraw consent for data processing
- Erasure: Request deletion of your personal data
- Rectification: Correct inaccurate personal data
- Data Portability: Receive your data in a structured, machine-readable format
- File a Complaint: Lodge a complaint with the National Privacy Commission (NPC)
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Business data may be retained in anonymized form for analytics. Audit logs are retained for 1 year as required for compliance.
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are anonymized and used solely for service improvement.
9. Children's Privacy
AlabAI is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we discover such data has been collected, it will be deleted promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and in-app notification at least 15 days before taking effect.
11. Data Protection Officer
For privacy inquiries, data requests, or complaints, contact our Data Protection Officer:
Email: privacy@alabai.ph
Address: Metro Manila, Philippines
12. National Privacy Commission
If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission at complaints@privacy.gov.ph.