Privacy Policy
Last updated: March 26, 2026 · Effective: January 1, 2025
BuildPH is committed to protecting your privacy in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). This policy explains how we collect, use, and protect your personal information.
1. Information We Collect
Information You Provide
- Account information — name, email address, and password when you register
- Profile information — profile photo, bio, and payment details (GCash, Maya, or bank account for withdrawals)
- Product listings — titles, descriptions, files, and pricing you submit for sale
- Communications — messages you send to our support team
Information Collected Automatically
- Transaction data — purchase history, sales, wallet balance, and commission records
- Usage data — pages visited, features used, and session activity
- Device information — IP address, browser type, and operating system
Information from Third Parties
- Google OAuth — if you sign in with Google, we receive your name, email, and profile picture
- PayMongo — payment confirmation and transaction reference numbers only. We do not store full card numbers.
2. How We Use Your Information
- To create and manage your BuildPH account
- To process payments and facilitate transactions between buyers and sellers
- To calculate and distribute referral commissions
- To send transactional emails — purchase receipts, commission notifications, withdrawal confirmations
- To provide customer support
- To detect and prevent fraud, abuse, and unauthorized access
- To improve our platform features and user experience
- To comply with legal obligations under Philippine law
We will not use your personal information for unsolicited marketing without your explicit consent.
3. Sharing of Information
We do not sell, rent, or trade your personal information. We share data only in these circumstances:
- With sellers — when you purchase a product, the seller sees your display name for order records only — not your email or payment details
- With PayMongo — your payment information is shared with PayMongo (PCI-DSS compliant) to process transactions
- With Google — if you use Google Sign-In, authentication data is exchanged with Google per their Privacy Policy
- Legal requirements — if required by Philippine law, court order, or government authority
- Business transfers — in the event of a merger or acquisition, data may transfer as part of business assets
4. Data Security
- Passwords are hashed using bcrypt — we never store plain-text passwords
- All data transmission is encrypted using HTTPS/TLS
- Payment processing is handled by PayMongo (PCI-DSS Level 1 certified)
- Admin access is restricted to authorized personnel only
- Database access is protected behind private network firewalls
In the event of a data breach affecting your rights, we will notify you within 72 hours as required by the Data Privacy Act.
5. Your Rights Under the Data Privacy Act
Under Republic Act No. 10173, you have the right to:
- Be Informed — know what personal data we collect and how it's used
- Access — request a copy of your personal data we hold
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your account and personal data, subject to legal retention requirements
- Object — object to processing of your data for direct marketing
- Data Portability — receive your data in a structured, machine-readable format
- Lodge a Complaint — file a complaint with the National Privacy Commission at privacy.gov.ph
To exercise any of these rights, email us at privacy@buildph.net. We will respond within 15 business days.
6. Cookies & Tracking
We use only essential cookies:
- Session cookies — to keep you logged in during your visit
- CSRF tokens — to protect against cross-site request forgery attacks
- Preference cookies — to remember your settings
We do not use third-party advertising cookies, tracking pixels, or analytics that send your data to external servers.
7. Third-Party Services
- PayMongo — payment processing · Privacy Policy
- Google — OAuth login and Fonts · Privacy Policy
- Gemini AI — AI Tools feature. Prompts are sent to Google's Gemini API and subject to Google's data policies
8. Data Retention
- Active accounts — data is retained as long as your account is active
- Deleted accounts — personal data is deleted within 30 days, except transaction records which are retained for 7 years for legal and tax compliance
- Transaction records — purchase history, sales, and commission data are kept for 7 years as required by Philippine tax regulations
9. Children's Privacy
BuildPH is not directed at persons under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will deactivate their account and delete their data promptly. If you believe a minor has registered, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. For material changes, we will notify registered users by email and display a notice on the platform at least 7 days before the changes take effect. Continued use of BuildPH after the effective date constitutes acceptance of the updated policy.
11. Contact Us
- Privacy concerns: privacy@buildph.net
- General support: support@buildph.net
- National Privacy Commission: privacy.gov.ph
Questions about your privacy?
We're here to help. Reach out anytime and we'll respond within 15 business days.
📧 Contact Privacy Team