Privacy Policy

This Privacy Policy explains what personal data InspoTap collects, how we use it, and the rights you have over it. We process personal data in accordance with the Philippines' Data Privacy Act of 2012 (“DPA”) and its implementing rules.

We collect the following categories of information:

• Account information: your email address, username, display name, and (if you sign up with a password) a securely hashed password. If you sign in with Google, we receive your name, email, and profile picture from Google.
• Profile content: photos you upload, captions, hotspot links, and other content you choose to add to your public profile.
• Payment verification details: when you submit a manual GCash payment for a paid plan, we collect the phone number and payment reference number you provide so an administrator can verify the payment. We do not collect or store your GCash password, PIN, or full account details.
• Usage data: views, clicks, and interactions with your profile and hotspots (used to power the analytics shown to you), and general technical data like IP address, browser type, and device information.
• Cookies and session data: cookies used to keep you signed in and to operate the Service securely.

• To provide, operate, and maintain the Service — including your public profile page.
• To authenticate you and keep your account secure.
• To verify manual GCash payments and manage your subscription plan.
• To send you transactional emails (sign-in codes, account notices, payment status updates).
• To show you analytics about your own profile and hotspot performance.
• To monitor, debug, and improve the Service, including detecting and fixing errors.
• To comply with legal obligations.

We don't sell your personal data. We share it with service providers who help us operate InspoTap, each acting under their own privacy and security commitments:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Sentry — error monitoring, to help us find and fix bugs.
• Google — if you choose to sign in with Google.

Some of these providers process data on servers located outside the Philippines. Where that happens, we rely on their own security and compliance commitments to protect your data in transit and at rest.

Your public profile page — including photos and hotspots you choose to publish — is, by design, visible to anyone with the link, since that's the core function of the Service.

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain certain records (for example, payment records) for legal or accounting purposes.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), database-level access controls, and restricted internal access to personal data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

Under the Data Privacy Act, you have the right to:

• Be informed that your personal data will be, is being, or has been processed;
• Access your personal data;
• Object to the processing of your personal data;
• Correct any inaccurate or outdated personal data;
• Request the erasure or blocking of your personal data, subject to certain exceptions;
• Data portability, where technically feasible;
• Be indemnified for damages from inaccurate, unlawful processing of your data; and
• File a complaint with the National Privacy Commission.

To exercise any of these rights, contact us using the details in Section 10 below. You can also delete most of your own content and update your profile information directly from your account settings at any time.

We use cookies that are necessary to keep you signed in and to operate the Service. We don't currently use third-party advertising or tracking cookies.

InspoTap isn't directed at children under 13, and we don't knowingly collect personal data from children under 13.

If you have questions about this Privacy Policy or want to exercise your rights under the DPA, contact our Data Protection Officer at privacy@inspotap.com.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you.