1. Who is responsible for your information
COLOR IDEAS is responsible for the information collected for its website, customer accounts, billing, and support. Our business address is Chinatown Mall, Gatuslao St., Bacolod City, Negros Occidental, 6100, Philippines. Privacy requests can be sent to billing@colorideas.com or raised by phone at 09190030377.
For personal information a business uploads about its own staff or customers, the business is responsible for having a lawful purpose and appropriate notices or permissions. We handle that information to deliver the agreed service. Product-specific privacy notices or data-processing agreements may also apply.
2. Information we collect
- Account information you provide, such as your name, email address, and authentication or verification records.
- Business and branch information, including business name, industry, country, address, user relationships, and module interests.
- Subscription, invoice, payment-reference, cancellation, and support records as the relevant services are used.
- Technical and security information such as request logs, device/browser information, IP addresses handled by hosting or security services, and administrative activity records.
- Information you send in enquiries, support emails, or privacy and billing requests.
For card payments, PayMongo collects and processes card details through its payment interface when enabled. We do not store full card numbers or CVV. Limited card metadata and processor references may be used to identify the authorized payment method and reconcile transactions.
We collect information for a product feature only when that feature is used or you provide it. Advertising a future product does not mean we already collect all the data that product may eventually require.
3. Why we use information
We use information to create and secure accounts, administer businesses and branches, provide the requested software, record agreed subscriptions and invoices, handle authorized payments, respond to enquiries, prevent fraud and abuse, investigate disputes, and meet legal obligations.
Our legal grounds may include your consent, carrying out a contract or requested service, compliance with law, and legitimate business or security interests where allowed. We will obtain additional consent where required. We do not sell personal information or use a saved card as permission for unrelated marketing.
4. Service providers and sharing
Information may be processed by service providers necessary to operate the service, including Replit for hosting and application infrastructure, Clerk for account authentication, email providers for customer communications, and PayMongo for payment processing when enabled.
Authorized platform administrators may access information needed for account administration, security, support, and billing. Business information is otherwise restricted according to account permissions. We may disclose information where lawfully required, to protect legal rights, or with your authorization.
Some service providers may process information outside the Philippines. We take reasonable steps to use appropriate safeguards and limit processing to its stated purpose. A standalone product may publish its own privacy notice on its separate website.
5. Cookies and browser storage
Authentication and account services may use essential cookies or browser storage to maintain sessions and protect accounts. Your browser can control cookies, but blocking essential cookies may prevent sign-in from working.
If non-essential analytics or advertising tools are introduced, we will provide the required notices and consent controls before using them where consent is required. This policy does not claim that optional tracking tools are currently enabled.
6. Security and retention
We use authentication, access restrictions, secure connections, and reasonable operational safeguards appropriate to the information. No internet service is completely risk-free. Do not email passwords, OTP codes, CVV, or full card numbers to our support team.
We retain information for as long as necessary for the account or service, support, legitimate security purposes, and applicable accounting, tax, or legal requirements. Closure or deletion requests are assessed against those requirements; some records and backups may need to be retained for a lawful period.
7. Your privacy rights
Subject to applicable law, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you may request information about processing, access to your data, corrections, withdrawal of consent, objection, or deletion/blocking where applicable. Some rights are subject to legal conditions or exceptions.
Send your request to billing@colorideas.com with enough information to identify the account and request. We may reasonably verify your identity before disclosing or changing information. Withdrawing consent does not invalidate prior lawful processing and may affect a feature that depends on that consent.
You may also raise a privacy concern with the Philippine National Privacy Commission. Our request process does not restrict your right to approach the appropriate regulator.
8. Children and updates
The BusinessOS Portal is intended for adults and authorized business representatives. We do not intentionally offer business accounts to children. Contact us if you believe a child has provided personal information inappropriately.
Updates to this policy are published with a revision date. Contact billing@colorideas.com or 09190030377 for questions or a copy of the policy.