Privacy Policy

This Privacy Policy describes how Tenda Pro, operated by RJ Cabansay (“we,” “us,” or “our”), collects, uses, stores, and protects the personal information you provide when using our restaurant and café management platform. We are committed to protecting your privacy and processing your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations.

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide access to the Service.
• To process your subscription, handle billing, and send payment confirmations.
• To operate and display your business data within the dashboard.
• To generate reports, analytics, and forecasting based on your data.
• To send transactional emails such as password resets, billing notices, and account alerts.
• To diagnose bugs, monitor uptime, and improve the reliability of the platform.
• To communicate product updates, new features, or important service announcements.
• To comply with legal obligations under Philippine law.

We do not sell your business data to advertisers or share it with third parties for marketing purposes. Your data is processed only to provide the Service to your account.

3. Data Hosting and Storage

Tenda Pro is built on Supabase, a managed database and authentication platform. Your data is stored in Supabase-managed PostgreSQL databases hosted on cloud infrastructure. Supabase uses industry-standard encryption for data at rest (AES-256) and in transit (TLS 1.2+).

Data may be stored on servers located outside the Philippines. By using Tenda Pro, you consent to the transfer and storage of your personal data in these locations. We ensure that any third-party infrastructure provider we use maintains security standards appropriate to the sensitivity of the data processed.

4. Third-Party Services

We use a limited number of trusted third-party services to operate Tenda Pro. Each service receives only the data it needs to perform its function:

We do not permit these service providers to use your data for any purpose other than providing their service to us on your behalf.

5. Cookies and Local Storage

Tenda Pro uses cookies and browser local storage for the following purposes:

• Authentication session tokens (to keep you logged in securely).
• Your selected dashboard theme, stored as a cookie for up to one year.
• UI preferences and state that improve your experience between sessions.

We do not use third-party advertising cookies or tracking pixels. You can clear cookies at any time through your browser settings, though doing so will sign you out and reset your preferences.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. We may disclose your information only in the following circumstances:

• Service providers: As described in Section 4, we share limited data with our trusted infrastructure and payment partners.
• Legal compliance: If required by a court order, government authority, or applicable Philippine law, we may disclose information to the extent legally compelled. We will notify you before disclosure where permitted by law.
• Business transfer: In the event of a merger, acquisition, or sale of the business, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• With your consent: We may share information with third parties for any other purpose with your explicit prior consent.

7. Data Security

We implement technical and organizational measures to protect your personal information, including:

• All data transmitted between your browser and our servers is encrypted using TLS.
• Passwords are stored using bcrypt hashing with a unique salt per account.
• Authentication is handled by Supabase Auth, which follows industry security practices.
• Access to production databases is restricted to authorized personnel only.

Despite these measures, no system is completely immune to security risks. We encourage you to use a strong, unique password for your account and to enable any additional security features we make available.

8. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights:

• Right to be informed: You have the right to know what personal data we collect, why we collect it, and how it is processed.
• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Most account information can be updated directly in the dashboard under Settings.
• Right to erasure (right to be forgotten): You may request deletion of your account and associated personal data. We will complete deletion within 30 days of a verified request.
• Right to data portability: You may request an export of your business data in CSV format. This is also available directly in the dashboard.
• Right to object: You may object to certain types of processing, including the use of your data for non-essential communications.
• Right to lodge a complaint: If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

To exercise any of these rights, contact us at rjamscxx@gmail.com. We will respond within 15 business days of receiving your verified request.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Active account data is retained for the duration of your account.
• Upon account deletion or cancellation, we retain your data for 30 days to allow for data export and error recovery, after which it is permanently deleted.
• Payment records and transaction logs may be retained for up to 7 years to comply with applicable tax and accounting regulations in the Philippines.
• Anonymized, aggregated usage data that cannot identify you individually may be retained indefinitely for product analytics.

10. Children's Privacy

Tenda Pro is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. We encourage you to review this policy whenever you access the Service to stay informed about how we protect your information.

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at:

We are committed to resolving privacy concerns and will respond to all inquiries within 15 business days.