Privacy Policy

SplashSphere ("we," "us," or "our") is a product of LezanobTech, a company registered in the Philippines. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the SplashSphere platform, including our web applications, APIs, and related services. We are committed to complying with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

By accessing or using SplashSphere, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

Information We Collect

We collect information that you provide directly to us when you create an account, set up your business profile, or use our services. This includes:

• Account Information: Name, email address, phone number, and password (managed securely via our authentication provider).
• Business Information: Business name, branch addresses, business registration details, and contact information.
• Employee Data: Names, contact details, employment type, commission rates, daily rates, and attendance records as entered by the account owner.
• Customer and Vehicle Data: Customer names, contact details, vehicle plate numbers, makes, models, and service history as entered by your staff.
• Transaction Data: Service records, payment amounts, payment methods, timestamps, and receipt information.
• Usage Data: Browser type, IP address, device information, pages visited, and feature usage patterns collected automatically when you interact with our platform.

How We Use Your Information

We process your personal information for the following purposes, each with a lawful basis under the DPA:

• Service Delivery: To operate, maintain, and improve the SplashSphere platform, including transaction processing, payroll calculations, queue management, and reporting.
• Account Management: To create and manage your account, authenticate your identity, and provide customer support.
• Billing: To process subscription payments, generate invoices, and manage your billing history.
• Communication: To send transactional emails (e.g., receipts, payroll summaries), service announcements, and, with your consent, promotional materials.
• Analytics: To understand how our platform is used and to develop new features, improve performance, and enhance the user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Data Storage & Security

Your data is stored on secure servers with industry-standard encryption at rest and in transit. We implement technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls and multi-tenant data isolation ensuring your business data is never accessible to other tenants.
• Regular automated backups with secure off-site storage.
• Periodic security assessments and vulnerability testing.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Third-Party Services

We use the following third-party service providers to operate SplashSphere. Each provider has its own privacy policy governing the use of your information:

• Clerk — Authentication and user management. Clerk processes your email address, name, and login credentials to provide secure sign-in functionality.
• Payment Processors — We integrate with third-party payment gateways to process subscription payments. We do not store your full credit card number or payment credentials on our servers. Payment information is handled directly by the processor in compliance with PCI DSS standards.
• Cloud Infrastructure Providers — Our servers and databases are hosted on reputable cloud platforms with data centers that maintain industry certifications.

We only share the minimum amount of data necessary for each third-party service to function. We do not sell your personal information to any third party.

Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights:

• Right to Be Informed: You have the right to be informed of the collection and processing of your personal data, including the purposes, scope, and method of processing.
• Right to Access: You may request access to your personal data held by SplashSphere, including information about how it has been processed.
• Right to Object: You may object to the processing of your personal data, including processing for direct marketing, automated processing, or profiling.
• Right to Erasure or Blocking: You may request the removal or blocking of your personal data from our systems, subject to legal and contractual retention requirements.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: You may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact us at hello@splashsphere.ph. We will respond to your request within thirty (30) days.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you close your account or request deletion of your data, we will delete or anonymize your personal information within ninety (90) days, except where retention is required by law (e.g., tax records, financial transaction logs) or legitimate business purposes such as resolving disputes.

Transaction data and payroll records may be retained for up to seven (7) years in compliance with Philippine tax and labor regulations. Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytics and service improvement.

Cookies

SplashSphere uses cookies and similar technologies to maintain your session, remember your preferences (such as language settings), and analyze platform usage. The types of cookies we use include:

• Essential Cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled.
• Preference Cookies: Store your language selection and display preferences (e.g., the NEXT_LOCALE cookie for English/Filipino).
• Analytics Cookies: Help us understand how the platform is used so we can improve it. You may opt out of analytics cookies through your browser settings.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data privacy rights, please contact us:

• Data Controller: LezanobTech
• Email: hello@splashsphere.ph
• Data Protection Officer: You may reach our DPO at dpo@splashsphere.ph

You may also file a complaint with the National Privacy Commission at www.privacy.gov.ph.