Privacy Policy

1. Introduction

2. Information We Collect

• Account & Profile — name, email, company, role, contact details; authentication/authorization data.
• Payment & Billing — transaction intents, channel tokens or references (from gateways like Xendit), partial masked card info, payouts/settlement references, invoices and receipts. We do not store full card PANs.
• GoHighLevel Integrations — location IDs, installation metadata, automation config, contact data synced through your connected GHL sub-account.
• Product Usage — logs, events, workflow executions, error reports, device/browser info, IP address, cookies or similar technologies.
• Support — tickets, chat messages, attachments, session diagnostics.

Note: The specific data we receive depends on the features you enable and the external services you connect.

3. How We Use Your Information

• Provide, maintain, and improve DFY CRM + Payments and related modules.
• Process transactions, prevent fraud, and support chargeback/dispute handling.
• Enable automations with GoHighLevel (workflows, contact syncing, webhooks).
• Offer customer support, incident response, and service notifications.
• Analytics for performance, reliability, and product roadmap decisions.
• Compliance with legal, tax, and regulatory obligations in the Philippines.
• Marketing & service communications (you can manage preferences anytime).

4. Information Sharing and Disclosure

• Service Providers — payment processing (e.g., Xendit), cloud hosting, analytics, email/SMS, customer support tools.
• Integrations — GoHighLevel and other platforms you connect, according to your configuration and permissions.
• Legal — to comply with law, lawful requests, or to protect DFY PH, users, and the public.
• Business Transfers — in connection with a merger, acquisition, or asset sale with notice where required.

We do not sell your personal information to third parties.

5. Data Security

• Encryption in transit (TLS) and at rest for sensitive data where applicable.
• Role-based access controls, audit logging, least-privilege principles.
• Regular security reviews, vendor due diligence, and backup strategies.
• Incident response procedures and user notifications when legally required.

6. Your Data Protection Rights

Subject to Philippine law, you may request: access, correction, deletion (where applicable), data portability, objection or withdrawal of consent, and information on how your data is processed. To exercise these rights, email [email protected]. We will respond within reasonable timeframes consistent with RA 10173.

7. Data Retention

We retain information as needed to provide the Services, for legitimate business purposes, and to meet legal, tax, and regulatory requirements. When no longer needed, we securely delete or anonymize data in accordance with our retention schedules.

8. International Data Transfers

Our infrastructure and providers may process data outside the Philippines. We implement appropriate safeguards (contracts, technical/organizational measures) to help protect your information across borders.

9. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child provided personal data, contact us to request deletion.

10. Changes to This Privacy Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We’ll notify you of material updates through the app or email and indicate the “Last updated” date at the top of this page.

11. Contact Information