1 Who we are

FaithCode (“we”, “us”, “our”) operates the FaithCode website and FaithCode POS platform — an inventory, point-of-sale, and business management system for merchants in the Philippines.

• Business address: Sentinel Residences Building, Quezon City, Metro Manila
• Support email: faithcodehelp@gmail.com
• In-app support: Support Ticket System / Help Center after login

2 Scope of this policy

This Privacy Policy covers personal and business-related information processed when you:

• Visit faithcode marketing pages (Home, About, Services, Contact, BIR Accreditation, Donations, and related pages)
• Register a business, create staff users, or sign in to FaithCode POS (web or mobile)
• Use POS, inventory, sales, reports, e-wallet/E-Services, HR, bookings, WooCommerce sync, and other modules
• Enable BIR compliance features (TIN, Sales Invoice data, X/Z-readings, audit records)
• Submit support tickets, contact forms, or communicate with FaithCode support
• Participate in promotions, Free Register offers, or donation/grocery assistance campaigns we operate

If you are a merchant using FaithCode to store your own customer or employee data, you remain responsible for that data as a business owner. FaithCode processes it as needed to provide the platform service you requested.

3 Information we collect

Depending on how you use FaithCode, we may collect and process the following categories:

3.1 Account & identity information

• Name, email address, username, phone number (if provided)
• Password hashes / authentication credentials (we do not store plain-text passwords)
• Role and permission assignments (owner, manager, cashier, and other staff roles)
• Optional two-factor authentication (2FA) setup data

3.2 Business & workspace information

• Business / shop name, address, contact details, branding, and settings
• Subscription plan, billing status, add-ons, and related commercial records
• Warehouse/branch setup, devices, terminals, and configuration preferences

3.3 Operational POS & inventory data you enter

• Products, barcodes, prices, stock levels, transfers, damages, and adjustments
• Sales, purchases, returns, quotations, invoices, vouchers, and shipments
• Customer profiles, loyalty points, supplier records, and related notes
• Expenses, accounts, commissions, bookings, service/repair jobs, projects, and HR records (when modules are enabled)

3.4 Payment, e-wallet & service transaction data

• POS payment method details needed to complete a sale (for example cash/tender references)
• E-Services / e-wallet Cash-In and Cash-Out records (provider, amount, fees, references) when enabled
• Billing and subscription payment references processed through our payment partners

FaithCode is not a bank. Card or payment-provider processing may be handled by third-party processors under their own terms and privacy notices.

3.5 BIR / tax compliance information (when activated)

• TIN, registered business name, Sales Invoice (SI) series/prefix, terminal identifiers
• Official receipt / SI content generated by the system for completed sales
• X-Reading and Z-Reading reports, grand totals, void/audit adjustments
• PTU / MIN values only when you encode real permit details issued by BIR

3.6 Device, security & technical data

• Login sessions, IP address, browser/app type, device identifiers, and approximate security signals
• Device binding / login device control records
• Offline POS sync metadata needed to reconcile local and cloud transactions
• Crash/diagnostic logs and usage signals that help us keep the platform reliable

3.7 Mobile app permissions (when you grant them)

• Camera — barcode/QR scanning and attachment capture
• Biometric unlock — processed on-device for app unlock where enabled
• Storage/files — for receipts, backups, or ticket attachments you choose to upload
• Location — only if enabled for a security or business feature that requires it

3.8 Support & communication data

• Support tickets (subject, category, description, status, replies)
• Optional screenshots, videos, or files you attach for troubleshooting
• Contact form inquiries from the website (including captcha verification metadata)
• Email/SMS notifications you request or that are required for account security and service notices

3.9 Marketing website & cookies

• Pages visited, referral source, and basic analytics needed to improve the site
• Session/security cookies required for login, CSRF protection, locale, and form security
• Interest interactions such as plan interest clicks on the homepage (aggregated/visitor-hashed where applicable)

4 How we use information

We use collected information to:

• Provide, operate, maintain, and improve FaithCode POS and related services
• Create and secure merchant accounts, staff logins, roles, and device access controls
• Process sales, inventory, reports, sync, and optional modules you enable
• Support BIR-ready receipts, SI numbering, X/Z-readings, and audit trails when compliance is active
• Process subscriptions, add-ons, Free Register onboarding, and billing communications
• Respond to support tickets and contact form messages
• Send transactional notices (security alerts, password resets, important service updates)
• Prevent fraud, abuse, spam, unauthorized access, and service attacks (including captcha and rate limits)
• Comply with legal obligations and enforce our Terms & Conditions
• Improve product experience using aggregated or de-identified insights where practical

We do not sell your personal information.

5 Legal basis for processing

Where the Data Privacy Act of 2012 (RA 10173) and related rules apply, we process personal data based on:

• Consent — when you accept our Terms, enable optional features, or submit information voluntarily
• Contract / service delivery — to provide the FaithCode account and POS services you requested
• Legitimate interests — securing accounts, preventing fraud/abuse, improving reliability, and supporting merchants
• Legal obligation — when processing is required to comply with applicable laws or lawful requests

We aim to process only what is reasonably necessary for these purposes.

6 Sharing & service processors

We may share information only as needed with:

• Infrastructure providers — hosting, storage, email, SMS, and security vendors that help run FaithCode
• Payment / billing partners — to process subscriptions or related payments
• Integration partners you connect — for example WooCommerce or other channels you enable
• Support & operations staff — authorized FaithCode personnel handling tickets and technical issues
• Authorities — when required by law, regulation, court order, or lawful government request
• Business transfer — if FaithCode is involved in a merger, acquisition, or asset transfer, with appropriate safeguards

Service providers are expected to process data only for contracted purposes and under confidentiality/security obligations. Your staff users inside your own FaithCode workspace can access data according to the roles you assign.

7 BIR, DTI & compliance-related data

When BIR Compliance features are activated for your business, FaithCode processes tax-related configuration and transaction outputs so you can issue SI-backed receipts and generate X/Z-readings.

• You must provide accurate TIN and business registration details.
• Encode PTU / MIN only when BIR has issued real permit values for your setup.
• FaithCode does not invent accreditation or permit numbers for your store.
• Compliance records (SI series, readings, voids, audit logs) are retained to support audit readiness and platform integrity.

Activating BIR features in software helps your store operate with compliant tools; it does not replace your own BIR/DTI/business registration obligations as a merchant.

8 How we protect your information

We implement technical and organizational safeguards appropriate to a cloud POS platform, which may include:

• Encrypted data transmission (HTTPS/TLS)
• Hashed credentials and optional 2FA
• Role-based access control for staff users
• Device/session controls and login security monitoring
• Support-ticket attachment handling with access controls
• Contact-form captcha, CSRF protection, and request rate limiting
• Regular product/security updates and operational access restrictions

No method of transmission or storage is 100% risk-free. Please protect your passwords, limit owner access, and enable 2FA where available.

9 Data retention & trial accounts

• We retain account and business data for as long as your workspace is active and as needed to provide the service.
• Paid plan customers receive priority for data retention, backups, and support related to data access.
• If a free trial ends and you do not upgrade, FaithCode does not guarantee data retrieval, restore, or export of that trial business data.
• Trial data may be removed or become unavailable after the trial period according to platform policy.
• Support tickets, security logs, and billing records may be retained longer when needed for operations, dispute handling, or legal compliance.
• When data is no longer needed, we delete or de-identify it according to our retention practices, subject to legal holds.

10 Your rights as a data subject

Subject to applicable Philippine privacy law and reasonable verification, you may request to:

• Be informed about how your personal data is processed
• Access personal data we hold about you
• Request correction of inaccurate or outdated personal data
• Object to certain processing, or request restriction, where allowed
• Request deletion or blocking of personal data where legally permitted
• Withdraw consent for optional processing (without affecting processing already based on other lawful grounds)
• Lodge a complaint with the National Privacy Commission when appropriate

To exercise these rights, contact faithcodehelp@gmail.com or submit a support ticket after login. We may ask you to verify your identity before acting on a request.

Merchants who store customer/employee personal data inside FaithCode should honor data-subject requests for information they control, and may contact FaithCode support if platform assistance is needed.

11 Cookies, sessions & similar technologies

FaithCode uses cookies and similar technologies to:

• Keep you signed in securely and protect forms with CSRF tokens
• Remember locale/language preferences
• Maintain session security for web and related portals
• Support basic analytics and site reliability

You can control cookies through your browser settings. Disabling required cookies may break login, checkout, or form submission features.

12 Children’s privacy

FaithCode is a business platform intended for merchants and authorized staff. It is not directed to children under 13 (or the equivalent minimum age under applicable law). We do not knowingly collect personal information from children for account registration. If you believe a child has provided personal data to us, contact faithcodehelp@gmail.com so we can take appropriate action.

13 Storage & international processing

FaithCode is operated for Philippine businesses. Your information may be processed and stored on servers or by service providers in the Philippines or other countries where our infrastructure partners operate. When data is processed outside the Philippines, we take steps consistent with applicable law and reasonable security/contractual safeguards.

14 Changes to this Privacy Policy

We may update this Privacy Policy as FaithCode evolves, as laws change, or as our practices improve. When we make material updates, we will revise the effective date on this page and may provide additional notice through the website, app, or email when appropriate. Continued use of FaithCode after an update means you acknowledge the revised Privacy Policy.

15 Contact us about privacy

For privacy questions, data-subject requests, or security concerns:

• Email: faithcodehelp@gmail.com
• Address: Sentinel Residences Building, Quezon City, Metro Manila
• Support tickets: Submit a Ticket after merchant login
• Contact page: Contact Us