Privacy Policy

1. Who We Are

MyOrderlyph is an order management platform for small businesses in the Philippines. This policy explains how we collect, use, and protect your data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173).

2. Data We Collect

From Sellers (shop owners):

• Name, email address, and password (account creation)
• Shop name and payment details (GCash number, bank information)
• Notification email and delivery fee preferences

From Customers (order placers):

• Name, email address, and phone number
• Delivery address
• Order details and payment proof screenshots
• Reviews you choose to leave: a star rating and an optional comment. If the shop approves it, it is shown on the shop's public page with your first name only

3. How We Use Your Data

• To operate the order management platform
• To send order confirmation and status emails
• To process subscription payments
• To provide customer support

We do not sell your data to third parties.

4. Third-Party Services

We run our own servers, so fewer companies touch your data than is usual for a platform of this kind. Your account, your orders, your uploaded images and our email delivery are all handled on infrastructure we operate ourselves, not rented from a software provider.

Our servers, database, uploaded files and mail server are located in a data centre in Singapore.

PayMongo processes subscription payments from sellers, and is the name that appears on your statement when you pay us. Customers paying a seller never use PayMongo; they pay the seller directly by GCash, bank transfer or cash.

Analytics, on our own pages only:

• Google Analytics — how visitors find and use our website.
• Meta (Facebook) Pixel — measures whether our Facebook advertising works.

These do not run on a seller’s shop page. If you are a customer placing an order, browsing a shop, or tracking an order you have placed, no analytics or advertising code loads and nothing about your visit is sent to Google or Meta. We made that choice deliberately: you came to buy from a shop, not to be measured by us. Analytics run only on our own marketing pages and inside the seller dashboard.

These companies have their own privacy policies and data handling practices. We no longer use Supabase, Resend or Vercel, which earlier versions of this policy listed.

5. Data Retention

We retain your account data for as long as your account is active. Customer order data is retained to allow sellers to manage their order history. You may request deletion of your data by contacting us.

6. Your Rights

Under the Philippine Data Privacy Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data

To exercise these rights, contact us at [email protected].

7. Security

We take reasonable steps to protect your data, including encrypted storage, secure connections (HTTPS), and access controls. Payment screenshots are stored privately and only accessible to the relevant seller.

8. Contact

For privacy concerns, email us at [email protected].