Privacy policy

This explains what Onsuki holds, why, and what you can ask to be done with it.

1. What is collected

For business staff: your email address, your role, and the sign-in codes or Google sign-in that let you in. For customers: the name, contact details and date of birth the business records, the bookings made, the orders raised, and the receipt images uploaded against them. Many of the people in these records are children whose details a parent or guardian gave. Onsuki does not collect health or medical information, and there is nowhere in the software to record it.

Running the software also produces ordinary technical records: server logs, and error reports when something breaks. Error reports carry the page address with its query values stripped out, never the contents of a booking.

2. What it is used for

Running the bookings and the payments, and sending sign-in codes by email. Booking confirmation emails exist in the software and are currently switched off. Nothing here is sold or used for advertising.

3. Who can see it

The staff of the business the record belongs to. Separation between businesses is enforced by the database rather than by application code, so one business cannot read another's records even if the software has a bug. Onsuki's own operator can reach the data where it is needed to run the service, fix a fault or answer a support request, and does not otherwise look at it.

4. Who else it passes through

Onsuki runs on services that hold data on its behalf, and they may use it only to provide the service to us: Cloudflare for hosting and file storage, Neon for the database, Resend for the emails the product sends, Sentry for error reports, and PayMongo for businesses that take card and wallet payments. Nothing is sold, and nothing is shared for advertising. This list is kept current; a business is told before it changes.

5. How long it is kept

Booking and payment records are kept while the business is using Onsuki, and after that for as long as tax law requires them to exist. Sign-in codes are short-lived. Error reports and server logs are kept only as long as they are useful for finding a fault. When a business leaves and asks for deletion, records are removed except those that must be retained.

6. Your rights

Under the Data Privacy Act of 2012 you may ask what is held about you, ask for it to be corrected, object to how it is used, and ask for a copy in a portable form. The Act also gives a right to erasure in the circumstances it sets out; where it applies and no record has to be kept for tax or another legal obligation, we act on it by hand rather than through a button in the product. If a business holds the record, ask the business first, because it is their record and they decide; Onsuki will help them act on it. Requests are answered at no cost and within a reasonable time.

7. How to reach us, and where to complain

Write to hello@onsuki.com about anything on this page. If you are not satisfied with the answer, you may raise it with the National Privacy Commission at privacy.gov.ph.