Privacy notice

Your account holds your name, email address, position and contact number.

Your password is never stored. What is stored is a bcrypt hash of it, which cannot be reversed back into the password — not by an administrator, not by whoever maintains this system, not by anyone with a copy of the database.

If you upload a profile photo it is resized in your browser and stored in Cloudflare R2. Nobody outside the system can fetch it: the address requires a valid session. Removing your photo deletes the file.

A session is created holding your browser’s user agent, the IP address of the request, and when it expires. The time of your most recent sign-in is recorded on your account.

The session cookie holds a random token. Only an HMAC of that token is kept in the database — so even someone holding a stolen copy of the database cannot turn it back into a working cookie.

Changing your password or your email address signs out every other device. Your current one stays signed in so you are not interrupted.

Company name, contact person, contact number, email, address, and the projects, receipts and payments recorded against them.

This is personal information belonging to other people. Under the Philippine Data Privacy Act it should be collected for a stated purpose, kept only as long as that purpose needs, and not shared beyond it. Practically: record what you need to do the work, and do not pass it on.

Archiving a client hides them from the working lists but keeps their history. Permanent deletion is restricted to administrators and only after archiving — two steps, so nobody erases a client’s record by misclicking once.

In Cloudflare’s D1 database, in the Asia-Pacific region. Photos are in Cloudflare R2. Nothing is sent to any other company, and there is no analytics or advertising code anywhere in this system.

You can see and correct your own details under My profile at any time. For anything else — a copy of what is held about you, or a correction to a record you cannot reach — ask an administrator at GIWU Systems.