Privacy notice

Last updated 2026-10-15.

Draft: the operator's name and contact email still need to be filled in.

SystemVA Books is run by [Business name of the operator]. This notice explains, in plain words, what we collect, why, and what you can do about it, as the Data Privacy Act of 2012 (RA 10173) requires.

What we collect

• Your account: email address and password (stored scrambled, we can't read it).
• Your tax details: business name, TIN, RDO code, registration date, invoice series and ATP number, your answers to the setup questions, and your tax option each year.
• Your records: clients' names and details you type in, invoices, payments, sales and POS daily totals you import.
• On your device only: your book layout, ticks and light/dark choice are saved in your browser, not on our servers.

Why we use it

Only to run the app for you: keep your books, work out your tax worksheets and remind you of deadlines. We don't sell your data, show you ads, or share it with anyone for marketing.

Who else handles it

• Lovable Cloud (Supabase): stores your account and records.
• Cloudflare: hosts the app and delivers pages to you.
• Frankfurter (ECB rates): receives only a currency and a date when we look up an exchange rate, never your name or amounts.
• Google Fonts: loads the app's fonts, so it sees your IP address.
• Brevo: will send deadline reminder emails once those are switched on.

Some of these companies store data outside the Philippines.

How long we keep it

Until you delete it or delete your account. The BIR expects you to keep your books for years, so download your data before you delete anything.

Your rights

• See and download it: Settings → Download all my data.
• Correct it: edit any record or setting at any time.
• Delete it: Settings → Delete my account removes your login and all your records right away.
• Ask or complain: email [privacy contact email]. If we don't sort it out, you can complain to the National Privacy Commission (privacy.gov.ph).

Security

Your records are only visible to your own account: the database checks this on every request. Connections are encrypted. No system is perfect; if your data is ever exposed, we will tell you and the National Privacy Commission as the law requires.

Changes

If this notice changes in a way that matters, we'll tell you in the app or by email.