Privacy Policy

This Privacy Policy describes how PondoFlow ("we", "us") collects, uses, and protects personal information when you use our payroll and workforce management platform. We process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Information we collect

• Account data: name, email address, and password (stored hashed).
• Employee records your company enters: names, positions, pay rates, government identification numbers (TIN, SSS, PhilHealth, Pag-IBIG), time entries, schedules, and payslips.
• Billing data: subscription status and invoice history.
• Contact form submissions: name, email, company, and message.

How we use it

• To operate payroll computations, schedules, and payslips.
• To bill your subscription and provide support.
• To comply with legal obligations under Philippine law.

Sharing

We do not sell personal data. Data is shared only with service providers strictly necessary to operate the platform (e.g., hosting and payment processing) under appropriate safeguards.

Security & retention

Data is encrypted in transit, passwords are hashed, and access is role-based within your company. We retain records for as long as your account is active or as required by BIR and DOLE record-keeping rules.

Your rights

Under the Data Privacy Act you may access, correct, or request deletion of your personal data, and lodge complaints with the National Privacy Commission. Contact our Data Protection Officer at support@pondoflow.com.