Privacy Policy

We collect the following categories of data:

• Account data — your name, email address, and password hash when you create a Pipable account.
• Business profile data — your business name, business type (café, laundry, rental, etc.), and any other details you provide during workspace setup.
• Transaction data — income and expense entries you log manually, via CSV/Excel upload, or via the Sales Snap photo feature.
• Uploaded files and images — CSV, Excel, or image files you upload for AI processing. POS photos submitted via Sales Snap are processed in memory; the source image is not stored permanently after extraction. CSV/Excel files uploaded to the free /transaction-summary tool are processed in memory and deleted immediately after your session — nothing is retained.
• Team member data — names and email addresses of staff you invite to your workspace.
• Usage data — pages visited, features used, and timestamps, collected to improve the product. We do not use behavioural tracking for advertising.

We use the data we collect for the following purposes:

• To provide and operate the Pipable service, including transaction logging, AI processing, and report generation.
• To deliver your weekly AI digest every Monday with a plain-language summary of your business activity.
• To run anomaly detection on your transactions and surface alerts on your dashboard.
• To calculate your business health score and break-even metrics.
• To send transactional emails such as invitation emails for team members and account-related notifications.
• To improve the accuracy of our AI models using anonymised, aggregated patterns — never your identifiable business data.
• To respond to support requests you submit.

We do not use your data for advertising, and we do not sell your data to any third party.

We share your data only in the following limited circumstances:

• With team members you invite — staff members you add to your workspace can see the transactions relevant to their role as defined by your workspace settings.
• With AI processing providers — as described in Section 4, solely for fulfilling AI features you initiate.
• With infrastructure providers — our hosting, database, and email delivery providers process data as part of operating the service, under appropriate agreements.
• When required by law — we may disclose data if required by a valid court order, government authority, or applicable Philippine law.

We do not sell, rent, or trade your personal or business data to any third party for marketing or commercial purposes.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data:

• Right to be informed — you have the right to know how your data is collected and used, which this policy fulfils.
• Right to access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may correct inaccurate or incomplete data via your account settings or by contacting us.
• Right to erasure — you may request deletion of your personal data. Deleting your workspace removes all associated data within 30 days.
• Right to object — you may object to processing of your personal data for purposes beyond operating the service.
• Right to data portability — you may request an export of your transaction data in a common format (CSV).

To exercise any of these rights, contact us at [email protected]. We will respond within 15 business days. You also have the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.