Privacy Policy

Pentascale Systems ("we", "us", "our") operates the Efforte platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations.

By creating an account and using Efforte, you consent to the data practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

• Full name, email address, and password upon registration.
• Profile photo, bio, skills, and barangay/city location for your public profile.
• Phone number (for identity verification and 2FA).
• Government-issued ID and biometric liveness data (for identity verification, Phase 2+, processed via a third-party verification provider).
• Messages, attachments, and files shared through the in-platform chat system.
• Reviews, ratings, and comments you submit on other users.
• Service request details including description, budget, and category.
• Support requests and communications you send to Efforte.

1.2 Information Collected Automatically

• IP address, browser type, operating system, and device information upon accessing the platform.
• Pages visited, features used, time spent, and interaction patterns (analytics data).
• Session cookies for login state management.
• Analytics cookies to understand platform usage (aggregated and anonymized where possible).

1.3 Payment Information (Phase 2+)

• Subscription payment references and transaction IDs, processed via our payment partner.
• We do not store full payment card numbers, e-wallet PINs, or payment credentials — these are handled and encrypted by the payment provider.
• Billing history and subscription status are stored within Efforte to manage your account.

2. How We Use Your Information

• To create, manage, and secure your Efforte account.
• To build and display your public profile to other users.
• To facilitate connections between Requestors and Providers.
• To process subscription payments and track commission records (Phase 2+).
• To send transactional emails (order updates, confirmations, billing reminders, account alerts).
• To send platform notifications and status updates about your active orders.
• To improve platform features, fix bugs, and analyze usage patterns for product development.
• To detect, investigate, and prevent fraud, abuse, spam, and policy violations.
• To comply with legal obligations under Philippine law, including responding to lawful government requests.
• To send you service announcements and important policy changes (not marketing).

We do not use your data for targeted advertising. We do not sell your personal data to any third party.

3. Information Sharing

We do not sell your personal data. We share information only in the following limited and controlled circumstances:

• With other platform users: your public profile (name, photo, bio, skills, ratings, level) is visible to all registered Efforte users. Your messages are only visible to the recipient(s) of those messages.
• With payment processors: our licensed payment partner receives only the minimum transaction data necessary to process payments. These providers have their own privacy policies.
• With our ID verification provider: uploaded ID documents and biometric liveness data are processed by a third-party verification service; we retain only the verification result where possible, not the raw documents, to minimize our own data-holding liability.
• With infrastructure and service providers: hosting, analytics, and transactional email providers who assist in operating the platform — all subject to data processing agreements and confidentiality obligations.
• With Philippine government authorities: when required by law, lawful court order, National Privacy Commission (NPC) directive, or other government regulation.
• In a business transfer: if Pentascale Systems is acquired, merged, or substantially reorganized, your data may be transferred to the successor entity, subject to the same privacy protections.

4. Data Retention

• Account data is retained for as long as your account remains active.
• Upon account deletion, personal data is removed or anonymized within 30 days, except data required for legal, regulatory, tax, or accounting compliance.
• In-platform messages and order records may be retained for up to 1 year after order completion for dispute resolution, audit, and legal compliance purposes.
• Anonymized and aggregated analytics data may be retained indefinitely for platform improvement.

5. Your Rights Under the Data Privacy Act (RA 10173)

As a data subject under the Data Privacy Act of 2012, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements.
• Right to Object: Object to the processing of your data for specific purposes.
• Right to Data Portability: Request your personal data in a structured, machine-readable format.
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Right to File a Complaint: Lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.

To exercise any of these rights, contact: support@efforte.net. We will respond within 15 business days.

6. Cookies

• Essential cookies: Required to maintain your login session and platform security. Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the platform in aggregate. Can be disabled in your browser settings.

No advertising or third-party tracking cookies are used on the Efforte platform.

7. Data Security

• Passwords are stored using bcrypt hashing with a unique salt per user — we cannot read your password.
• All data is transmitted over HTTPS with SSL/TLS encryption.
• Access to personal data is restricted to authorized Pentascale personnel on a need-to-know basis.
• We perform regular security reviews, vulnerability assessments, and data backups.
• In the event of a personal data breach, we will notify affected users and report to the NPC within 72 hours of becoming aware of the breach, as required by RA 10173.

8. Children's Privacy

Efforte is not intended for users under 18 years of age. We do not knowingly collect data from individuals under 18. If discovered, such accounts will be promptly deleted.

9. Third-Party Links

The Efforte platform may contain links to third-party websites. These sites have their own privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices or legal requirements. For significant changes, we will notify you via email and in-platform notification at least 7 days before the change takes effect.

11. Contact & Data Protection

Data Controller: Pentascale Systems
Data Protection Officer: Pentascale Systems (owner-operated)
Email: support@efforte.net · Website: pentascale.net
Address: Lapu-Lapu City, Cebu, Philippines

This Privacy Policy is governed by and construed in accordance with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.