Privacy Policy

1. Who We Are

Smapey ("we", "us", "our") provides business management software for small businesses, including tools for invoicing, gym management, salon and spa booking, clinics, laundry shops, car rentals, lending, property rentals, and more. Smapey is operated from the Philippines and processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. This policy applies to our websites at smapey.com and app.smapey.com and to all Smapey products.

2. Information We Collect

We collect the following categories of information:

• Account information. Your name, email address, password (stored in hashed form), business name, and profile details you provide when you sign up or update your account.
• Business data you enter. Records you create while using Smapey, such as invoices, customer and client records, appointments and reservations, member profiles, loan records, orders, inventory, and uploaded files or documents (including essays submitted for AI grading).
• Payment information. When you subscribe to a paid plan, payment is handled by our payment processors. We do not store your full card number or e-wallet credentials; we receive only confirmation of payment, the plan purchased, and limited billing details.
• Usage data. Log data such as IP address, browser type, device information, pages visited, and actions taken in the app. We use this to keep the service secure and to improve it.

3. Your Customers' Data

When you store information about your own customers, clients, members, tenants, patients, students, or borrowers in Smapey (for example names, phone numbers, appointment history, or payment records), you are the data controller of that information and Smapey acts as your data processor. We process that data only to provide the service to you, we do not sell it or use it for advertising, and we rely on you to have the right to collect it and to respond to requests from your customers about it. If a person contacts us directly about data held in your account, we will refer them to you.

4. How We Use Your Information

• To provide, operate, and maintain the Smapey products you use.
• To process subscription payments and manage your plan.
• To send transactional messages, such as email verification, password resets, billing notices, and, where you enable it, SMS notifications to your customers (for example order-ready or appointment reminders).
• To respond to support requests.
• To monitor for fraud and abuse and to keep the platform secure.
• To understand how the product is used so we can improve it.

We do not sell your personal data, and we do not use the business data you store in Smapey for advertising.

5. AI Features

Some Smapey products include AI-powered features, such as automated essay grading in Smapey Essay. Content you submit to these features (for example essay text or photos of handwritten work) is sent to our AI service providers solely to generate the requested output, such as a grade and written feedback. We do not permit our AI providers to use your submitted content to train their models. AI output is assistive and may contain errors; final judgment always rests with you.

6. Sharing With Third Parties

We share data only with service providers that help us run Smapey, and only to the extent needed:

• Payment processors (such as Stripe, PayPal, and GCash) to handle subscription payments. Their own privacy policies govern the payment details you provide to them.
• Hosting and infrastructure providers that store and serve our application and databases.
• Communication providers used to deliver email and SMS messages.
• AI service providers as described in section 5.
• Analytics tools that help us understand aggregate usage of our websites.

We may also disclose information if required by law, court order, or a lawful request from a government authority, or to protect the rights, safety, and property of Smapey and its users.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how our websites are used. You can control cookies through your browser settings; disabling them may limit some features, such as staying logged in.

8. Data Retention and Deletion

We keep your data for as long as your account is active. If you delete your account, or ask us to delete it, we remove your personal data and stored business records within a reasonable period, except where we must keep certain records to comply with legal, accounting, or tax obligations. Backup copies are purged on a rolling schedule.

9. Security

We protect your data with industry-standard measures, including encryption in transit (HTTPS), hashed passwords, access controls, and secure infrastructure. No system is 100% secure, so please use a strong password and keep your credentials private. If we become aware of a personal data breach that affects you, we will notify you and the National Privacy Commission as required by law.

10. Your Rights

Under the Data Privacy Act (and similar laws that may apply to you), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated information.
• Request deletion of your personal data.
• Object to or withdraw consent for certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

To exercise any of these rights, contact us at the address in section 13.

11. Children

Smapey is built for business owners and professionals and is not directed at children. You must be at least 18 years old to create an account. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or in the app. Continued use of the service after changes take effect means you accept the revised policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your data rights, email us at support@smapey.com.