Legal
Privacy Policy
Effective November 5, 2026
BrilliantLabsPh (Penfix Advertising and Business Solutions) respects your privacy and follows the Data Privacy Act of 2012 (Republic Act No. 10173). This policy explains what we collect, why, and your rights.
What we collect
- When you buy or sign up: your name, email address, phone number, company name, and the payment method you choose. Payments are handled by PayMongo; we receive only a confirmation, the amount and a reference, never your full card number, e-wallet PIN or bank login.
- When you contact us: what you write to us and your contact details.
- When your company uses our software (for example the Attendance System): the records your company enters, such as employee names, punch times, a stamped photo and location of each punch, and, with each employee's consent, numbers computed from photos of their face for recognition. Face data is sensitive personal information under the law.
Why we use it
- To deliver what you bought, run your subscription and send receipts and service emails.
- To provide the software features your company uses, such as recording attendance.
- To answer your questions and resolve problems.
- To meet legal, tax and accounting requirements.
We do not sell personal data, and we do not use employee face data for anything other than the company's own attendance.
Who we share it with
Only with service providers that help us run the business, under confidentiality: our payment provider (PayMongo), our hosting and database providers, and our email provider. We disclose data to authorities only when the law requires it.
Business customers and their employees
When a company uses our software, the company decides what employee data goes in and is responsible for it; we process it on the company's behalf. Employees should first contact their employer about their records. Face data is kept only while the employee's consent stands: withdrawing it deletes the face data at once.
How long we keep it
Purchase and billing records: as long as tax law requires. Software records: for as long as the subscription runs, and up to 30 days after it ends unless the company asks us to delete them sooner. Punch photos: for the period each company sets in its settings.
How we protect it
Data is stored with access controls that keep each customer's data separate, sent over encrypted connections, and only accessible to the people who need it.
Your rights
You may ask to be informed about, access, correct or delete your personal data, object to its use, or ask for a copy, as the Data Privacy Act provides. Email penfixads@gmail.com. You may also file a complaint with the National Privacy Commission.
Questions? See our Contact page.