Privacy Policy

1. Who is responsible

For the accounts of people who sign up for or sign in to OperaQ, the personal information controller is [LEGAL NAME] ("we", "us"), [REGISTERED BUSINESS ADDRESS], [SEC / DTI REGISTRATION NO.].

For the information a company keeps about its own customers and staff in OperaQ (for example bookings, IDs and licences), that company is the personal information controller and we process it for them under the Data Processing Agreement. Questions about that information go to the company first.

Privacy contact (Data Protection Officer): hello@operaq.app. [NPC REGISTRATION NO., IF REQUIRED].

2. What we collect

• Account details: your name, email address, password (stored only as a one-way hash), and your phone number if you give it.
• Company details you enter at sign-up and in settings: company name, address, TIN, phone, business hours, logo.
• If you sign in with Google: the name and email address Google confirms to us. We never see your Google password.
• Security records: when and from which device and network (IP address, browser) you sign in, and a record of important actions in your workspace.
• Messages you send us, for example support emails.

3. Why we use it

• To create and run your account and your company's workspace (our contract with you).
• To keep OperaQ secure: sign-in sessions and detecting misuse (our legitimate interest, and our legal duty to protect personal information).
• To send the emails the service needs: verification, invitations, password resets and notices about your account.
• To meet legal obligations, for example tax and accounting records.

We do not sell personal information and we do not use it for advertising.

4. Who we share it with

Only with the suppliers that help us run OperaQ, under contracts that require them to protect it: our hosting provider ([HOSTING PROVIDER AND COUNTRY]), our email delivery provider ([EMAIL DELIVERY PROVIDER]), and Google if you choose Google sign-in. We share information with authorities only when the law requires it.

5. How long we keep it

We keep account information while your account is open. After a workspace is closed we delete it within [NUMBER] days, except what the law requires us to keep longer (for example tax records). Daily backups are kept for 14 days and then deleted.

6. How we protect it

Encrypted connections, passwords stored only as hashes, sign-ins that end when the password changes, each company seeing only its own data, and staff seeing only what their role allows. If a breach puts personal information at risk, we tell the National Privacy Commission and the people affected as the law requires.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access your information, to have it corrected, to object, to have it erased or blocked, to data portability, and to be compensated for damage caused by its misuse.

To use a right, email hello@operaq.app. We answer within a reasonable time and may ask you to confirm who you are. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).

8. Cookies

OperaQ uses only the cookie and browser storage it needs to work. See the Cookies page.

9. Changes

When this policy changes we publish the new version here with a new version number and effective date.