Privacy policy
Last updated October 25, 2026
Who we are
Inventory CRM runs Inventory CRM. This policy explains how we handle personal data under the Data Privacy Act of 2012 (Republic Act No. 10173). Contact our data protection officer at support@example.com.
What we collect
Account details: your name, email, mobile number, business name and password (stored only as a secure hash).
Usage details: sign-in times, IP address and device type, used for security and the activity log your administrator sees.
Business data you enter, such as products, clients and invoices. For that data your business is the personal information controller and we act as its processor.
How we use it
To provide the service, send sign-in codes, invoices and service notices, give support when you ask, and keep the service secure. We do not sell personal data.
Who we share it with
Only the providers needed to run the service: web hosting, email delivery, and payment processing (for example PayMongo). Integrations you switch on (SMS, Google Drive, accounting apps) receive the data you choose to send them.
How long we keep it
While your account is active, and up to 90 days after it is closed so you can export it. Backups roll off within 30 days after that.
Your rights
You may ask to access, correct, download or delete your personal data, and you may object to its processing. Email us and we will reply within 15 days. You may also complain to the National Privacy Commission.
Security
Data is sent over HTTPS, each business’s records are kept apart by company, passwords are hashed, and two-step sign-in is available for every user.