RJG Simplify Advertising ("RJG," "we," "us") built this client portal to make working together easier — this page explains what personal information the portal collects, why, and what we do with it. 1. What We Collect - Account info: your business name, contact email, and (optional) mobile number, used to send you payment reminders by SMS. - Login credentials: your password is handled entirely by our authentication provider (Supabase) using industry-standard hashing — we never see or store it in plain text. - Payment info: your monthly fee, payment due dates, last payment date, invoices, and Auto-Pay status (for ad-management clients), plus your course purchase date and access period (for Course clients). We never receive or store your card number — your card and QR Ph payment details go directly from your browser to PayMongo, our payment processor, and stay there. If you set up Auto-Pay, we also keep a timestamped record of your authorization (the amount you agreed to and when) — required by our card payment processor for dispute protection, and not visible in your own dashboard. - Contract signing: if you're an ad-management client and RJG sends you a service agreement, we keep the terms you were offered (fee, dates, included/excluded services), your typed name, your drawn signature, and the IP address and timestamp of when you signed — a permanent record, the same way we keep your Auto-Pay authorization, required to make the agreement enforceable. - Usage info: when you last visited the dashboard (so we can show you what's new), which checklist items you've completed, and whether you've opened a payment reminder or viewed a monthly report — so we know if something needs a follow-up nudge. - Files & notes: any screenshots, documents, or links you or RJG share through the portal (such as ad performance updates, contracts, or content calendars), and any private notes RJG's team keeps about your account for internal reference — these notes are never visible to you. - AI Assistant inputs: if you use the AI Assistant (ad-management clients only), the question you ask or the offer/audience/brand details you enter, and any creative image you upload, so it can generate that response. - Security logs: if a login or password-reset attempt fails repeatedly, or if too many course payment QR codes are requested from the same connection in a short time, we briefly track the relevant email address or IP address and a timestamp to prevent abuse — this is automatically cleared after a short lockout window and isn't used for anything else. - Course progress: if you have Course access, which lessons you've marked as watched — visible only to you, used to show your own progress. 2. How We Use It - To run your dashboard — showing your videos, reports, FAQs, and account status. - To process payments and send payment reminders, by email and (if we have your number) SMS. - To email you when a new monthly ad performance report is posted. - To see whether a payment reminder or report was actually opened, so we know when a personal follow-up is needed instead of assuming it was seen. - To generate answers and ad copy suggestions when you use the AI Assistant. - To secure staff accounts with two-factor authentication. - To gate access to your dashboard until a required service agreement is signed, and to keep a legally binding record of that signature under the Philippine E-Commerce Act (RA 8792). 3. Who We Share It With We don't sell your information, and we don't share it with anyone outside of what's needed to actually run the portal. The services we use to do that are: - Supabase — database and account/login hosting - PayMongo — payment processing (BSP-regulated); handles your card directly, we don't - Resend — sends the portal's emails - Semaphore — sends the portal's SMS reminders - Vercel — hosts the website itself - Anthropic (Claude) — powers the AI Assistant; when you use it, the relevant business details and any creative image you upload are sent to Anthropic to generate that response. Not used to train their models, per Anthropic's standard commercial API terms. - Meta (Facebook) — the Meta Pixel on our course page (rjgsimplifyadvertising.co/course), used to measure Facebook/Instagram ad performance and show you relevant ads; see Cookies below 4. How Long We Keep It We keep your account information for as long as you're an active client, and for a reasonable period afterward for our own records. If you'd like your account and data deleted sooner, message us and we'll take care of it. 5. Your Rights Under the Philippine Data Privacy Act (RA 10173), you have the right to be informed about how your data is used, to access it, to correct it, to object to certain uses, to have it erased or blocked, to data portability, and to file a complaint with the National Privacy Commission if you believe your rights were violated. To exercise any of these, just message us directly. 6. Security We use encrypted connections (HTTPS) throughout, access controls that limit who on our team can see what, two-factor authentication on staff accounts, and automatic lockouts after repeated failed login or password-reset attempts to prevent brute-force guessing. As noted above, your card details never pass through our own servers — they go straight to PayMongo. 7. Cookies The portal uses a single login-session cookie to keep you signed in. Our public site (rjgsimplifyadvertising.co) and course page (rjgsimplifyadvertising.co/course) also use the Meta Pixel, which shares limited data with Meta (like which pages you viewed, and whether you completed a purchase) so we can measure and improve our Facebook/Instagram ad campaigns and show you relevant ads. No other page in the portal uses advertising or tracking cookies. 8. Changes to This Policy We may update this policy as the portal changes. Continuing to use the portal after an update means you accept the current version. 9. Questions Message us anytime through the "Message me" link on your dashboard if you have questions about your data or want to exercise any of the rights above.