Privacy Policy

Last updated: 24 May 2026 · Compliant with the Philippine Data Privacy Act of 2012 (RA 10173)

This Privacy Policy explains what information Uprise Media ("we") collects when you use UprisePlugins, why we collect it, who we share it with, and your rights under Philippine law. We collect the minimum needed to run the service.

1. What we collect

1.1 Account information

• Email address — used to identify your account, deliver license keys, send receipts and renewal notices, and log you into the customer portal via magic-link.

1.2 Payment information

• Card numbers, e-wallet credentials, and payment authorisation are processed entirely by PayMongo. We never see or store your card number.
• We receive and store: a PayMongo customer ID, payment amount, payment status, and the payment method type (e.g. "card", "gcash") — used for receipts, refunds, and accounting.

1.3 License enforcement data

• Machine fingerprint hashes — when you activate the plugin on a machine, it sends a SHA-256 hash of `hostname + primary MAC address + OS user`. We never see the raw values; only the hash, which lets us recognise the same machine without identifying it personally.
• Machine label, OS name, last seen timestamp — so you can identify which machine to deactivate in your portal.

1.4 Usage data

• For each transcription or FX call: license ID, machine ID, seconds of audio processed (transcription), kind of FX requested, timestamp. Used to enforce the daily usage cap and prevent abuse.
• We do not retain the audio you transcribe or the prompt content you submit beyond the time needed to return a result. See Section 3 below.

1.5 Audit and security data

• For sensitive actions (logins, subscription changes, machine deactivations, refunds), we log the IP address, user-agent, action, and timestamp. Used to investigate security incidents and disputes.

2. How we use it

We use the data above only to:

• Run the service — process transcription and FX requests, enforce licensing, send transactional emails.
• Process payments and issue refunds via PayMongo.
• Investigate security incidents, fraud, and abuse.
• Comply with our legal obligations under Philippine law (tax reporting, lawful requests from authorities).

We do not use your data for advertising, profiling for marketing, or sale to third parties.

3. Third parties we share data with

UprisePlugins relies on a small number of trusted processors. Each receives only the data they need to perform their role.

• PayMongo Philippines — payments. They handle card and e-wallet processing under their own Privacy Policy and PCI-DSS compliance.
• Email delivery provider — transactional email delivery (receipts, magic-link logins, renewal notices). Receives your email address and the message body.
• Speech-to-text provider — speech-to-text transcription. Receives the audio you submit. Audio is processed for the duration of the request and not retained for model training.
• AI language-model provider — language model for FX matching. Receives the prompts you submit. Content is not used to train models and is retained only briefly for safety processing.
• Cloud hosting provider — our servers run in the European Union.

4. Where your data is stored

Account data, subscriptions, and license records are stored on cloud servers in the European Union. Backups are encrypted at rest. Data is in transit only over TLS 1.2+.

5. How long we keep it

• Account and subscription records — while your account exists, plus 5 years after closure for tax and accounting purposes (BIR requirement).
• Magic-link tokens — hashed at rest; expired/consumed tokens older than 30 days are deleted.
• Audit logs — 12 months.
• Usage events — 90 days, then aggregated and anonymised.

You can request earlier deletion (see Section 7), subject to our legal retention requirements.

6. Security

• All data in transit is encrypted with TLS 1.2+.
• Magic-link tokens are stored as SHA-256 hashes — we never store the raw token.
• Machine fingerprints are stored as SHA-256 hashes — we never store the raw identifiers.
• Database access is restricted to our application server and tightly scoped service accounts.
• Webhook payloads from PayMongo are signature-verified before being processed.

7. Your rights under the Data Privacy Act of 2012 (RA 10173)

As a data subject in the Philippines, you have the right to:

• Be informed of what data we collect and why (covered by this policy).
• Access the data we hold about you.
• Correct data that is inaccurate.
• Erase or block data that is incomplete, outdated, false, unlawfully obtained, or no longer needed for our stated purposes.
• Object to processing for any reason other than service delivery.
• Data portability — receive a copy of your data in a structured format.
• Lodge a complaint with the National Privacy Commission if you believe we have mishandled your data.

To exercise any of these rights, email support.uprisemedia@gmail.com from the address on your account. We respond within 15 working days.

8. Cookies

The customer portal at plugins.uprisemedia.co/account sets a single secure, HTTP-only session cookie after you log in via magic link. We do not use analytics cookies, tracking pixels, or third-party ad cookies on this site.

9. Children

UprisePlugins is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has signed up, contact us and we will delete the account.

10. Changes to this policy

We may update this Privacy Policy as our practices evolve. Material changes will be announced to your account email at least 14 days before they take effect.

11. Data Protection Officer / Contact