Legal

Privacy Policy

Last updated: March 10, 2026

Compliant with RA 10173 — Data Privacy Act of 2012

1. Introduction

BraveWorx Inc. ("BraveWorx," "we," "us," or "our") is committed to protecting the privacy and personal data of our users. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the BraveWorx platform, website, and mobile applications (collectively, the "Platform").

This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all applicable issuances by the National Privacy Commission (NPC) of the Philippines.

By using BraveWorx, you consent to the collection and processing of your personal data as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, phone number, password, and profile photo
  • Business Information (Tenants): Business name, DTI/SEC registration, address, business permits, service descriptions, pricing, and staff details
  • Payment Information: PayMongo API keys, bank account details (account name, number, bank name) for payout processing. We do not store credit card numbers.
  • Booking Information: Service selections, scheduling preferences, special instructions, and communication with service providers
  • Identity Verification: Government-issued ID copies submitted for Tenant verification

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers
  • Usage Data: Pages visited, features used, booking history, search queries, click patterns, and session duration
  • Location Data: Approximate location based on IP address; precise location only with your explicit consent for finding nearby service providers
  • Log Data: IP address, access times, referring URLs, and error logs

2.3 Information from Third Parties

  • PayMongo: Transaction status, payment confirmation, and payout information
  • Social Login: If you sign in via Google or Facebook, we receive your name, email, and profile photo as permitted by your social account settings

3. How We Use Your Information

We process your personal data based on the following lawful bases under RA 10173:

  • Contract Performance: To operate your account, process bookings, facilitate payments, and provide our platform services
  • Legitimate Interest: To improve our platform, conduct analytics, prevent fraud, and ensure platform security
  • Legal Obligation: To comply with Philippine tax, labor, and regulatory requirements
  • Consent: To send marketing communications, use cookies for analytics, and process location data

Specific Uses Include:

  • Creating and managing your user account
  • Matching customers with relevant service providers based on location and preferences
  • Processing and facilitating booking transactions and payments
  • Generating payroll, payslips, and HR reports for Tenant staff management
  • Sending transactional notifications (booking confirmations, reminders, receipts)
  • Providing customer support and responding to inquiries
  • Analyzing usage patterns to improve platform features and user experience
  • Detecting and preventing fraudulent activity and abuse
  • Complying with legal obligations and regulatory requests

4. Information Sharing & Disclosure

We do not sell your personal data. We share information only in the following circumstances:

4.1 With Service Providers and Customers

When a booking is made, we share relevant information between the Customer and Provider:

  • Customers see: Provider business name, address, staff names, service details, and reviews
  • Providers see: Customer name, phone number, booking details, and special instructions

4.2 With Payment Processors

PayMongo processes all financial transactions. Payment data is transmitted securely and handled under PayMongo's PCI-DSS compliant infrastructure.

4.3 With Service Partners

We may share data with trusted third-party services that help us operate the Platform (e.g., hosting providers, email services, analytics tools). All partners are bound by data processing agreements and are required to comply with RA 10173.

4.4 For Legal Compliance

We may disclose your information when required by law, court order, or government authority, or when necessary to protect the rights, safety, or property of BraveWorx, our users, or the public.

5. Data Security

We implement industry-standard security measures to protect your personal data:

  • Encryption: All data transmitted between your device and our servers uses TLS 1.3 encryption
  • Access Controls: Role-based access controls ensure only authorized personnel can access user data
  • Infrastructure: Our servers are hosted on secure cloud infrastructure with regular security audits
  • Payment Security: Financial transactions are processed through PayMongo's PCI-DSS Level 1 compliant system
  • Password Protection: All passwords are hashed using bcrypt and are never stored in plaintext
  • Multi-Tenant Isolation: Each Tenant's data is logically isolated to prevent cross-tenant data access

While we take extensive measures to protect your data, no system is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

6. Data Retention

  • Active Accounts: We retain your data for as long as your account is active and as needed to provide our services
  • Closed Accounts: Upon account closure, we retain essential records for up to 5 years to comply with Philippine tax and business regulations (BIR requirements)
  • Transaction Records: Financial transaction records are retained for 10 years as required by Philippine law
  • Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and platform improvement purposes

You may request deletion of your account and personal data at any time, subject to our legal retention obligations.

7. Your Rights Under RA 10173

Under the Philippine Data Privacy Act of 2012, you have the following rights:

  • Right to Be Informed: You have the right to know how your personal data is being collected and processed
  • Right to Access: You may request a copy of your personal data held by BraveWorx
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements
  • Right to Object: You may object to the processing of your personal data for direct marketing or profiling purposes
  • Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format
  • Right to File a Complaint: You may lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated

To exercise any of these rights, contact our Data Protection Officer at the address below. We will respond to valid requests within 30 days.

8. Cookies & Tracking Technologies

  • Essential Cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Platform. You may opt out of analytics cookies through your browser settings.
  • Performance Cookies: Used to monitor and improve platform speed and reliability

We do not use advertising or third-party tracking cookies. We do not participate in cross-site advertising networks.

9. Children's Privacy

BraveWorx is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take steps to delete such information promptly.

10. International Data Transfers

Your data is primarily stored and processed within the Philippines. In cases where data may be transferred to servers outside the Philippines (e.g., cloud hosting infrastructure), we ensure that appropriate safeguards are in place in compliance with NPC guidelines on cross-border data transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. We will notify you of material changes through:

  • An email notification to your registered email address
  • A prominent notice on the Platform
  • At least 15 days' advance notice before changes take effect

12. Contact Our Data Protection Officer

For privacy inquiries, data access requests, or complaints, please contact:

  • Data Protection Officer: BraveWorx Inc.
  • Email: privacy@braveworx.io
  • Phone: +63 (2) 8888-WORK (9675)
  • Address: BraveWorx Inc., Makati City, Metro Manila, Philippines

You may also file a complaint with the National Privacy Commission at www.privacy.gov.ph.

Privacy Concerns?

Our Data Protection Officer is available to address any privacy-related questions or requests.

Contact Data Protection Officer