Privacy Policy

MAO Workforce ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at maoworkforce.com and portal.maoworkforce.com (collectively, the "Platform").

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when you:

• Register for an account (name, email address, password)
• Set up your business profile (business name, address, payroll cycle)
• Add employee records (name, contact details, SSS ID, PhilHealth ID, Pag-IBIG ID, TIN)
• Process payroll (salary information, attendance records, leave data)
• Contact support or submit a support ticket
• Request a callback

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, device identifiers)
• Usage data (features used, actions taken, session duration)
• Cookies and similar tracking technologies

1.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name and email address from Google in accordance with their privacy policy. We do not receive your Google password.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Process payroll and compute statutory contributions (SSS, PhilHealth, Pag-IBIG, BIR withholding tax)
• Manage employee records and attendance data on your behalf
• Authenticate users and maintain account security
• Respond to support tickets, inquiries, and callback requests
• Send service-related emails (account confirmation, password reset, system notifications)
• Improve our services through usage analytics
• Comply with applicable Philippine laws and regulations

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist in operating our Platform:

• Supabase — database hosting and authentication (Asia-Pacific region)
• Vercel — platform hosting and deployment
• Resend — transactional email delivery
• Anthropic — AI-powered chat assistant (Maomao)

These providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing services to us.

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests from public authorities (e.g., the National Privacy Commission, courts, or government agencies in the Philippines).

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you of such a change.

4. Data Retention

• Account data is retained for the duration of your subscription
• Payroll and employee records are retained for a minimum of 10 years in compliance with Philippine labor and tax regulations
• Support tickets are retained for 3 years
• Log data is retained for 90 days

Upon account deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

5. Data Security

• All data is encrypted in transit using TLS/HTTPS
• Data at rest is encrypted using AES-256 encryption
• Access to production data is restricted to authorized personnel only
• We conduct regular security reviews and vulnerability assessments
• Authentication is handled through Supabase with secure session management

6. Your Rights Under the Philippine Data Privacy Act

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights:

• Right to be informed — know how your personal data is collected and processed
• Right to access — request a copy of your personal data we hold
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data (subject to legal retention requirements)
• Right to object — object to processing of your data in certain circumstances
• Right to data portability — receive your data in a structured, commonly used format
• Right to damages — seek compensation for any damages suffered

To exercise any of these rights, contact us at hello@maoworkforce.com. We will respond within 15 business days.

7. Cookies

We use cookies and similar technologies to maintain your login session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings. Disabling cookies may affect certain features of the Platform.

8. Children's Privacy

The Platform is intended for use by businesses and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it immediately.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending an email to the address associated with your account and posting a prominent notice on the Platform. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: