Draft for legal review
1. Who we are
CameraRentSaaS ("we", "us") provides online booking and rental management software to camera and photography equipment rental businesses ("Shops") in the Philippines. This policy explains how we handle personal information in connection with our website and service.
2. Two kinds of information we handle
a. Shop account holders
When a business owner or team member creates an account, we process their name, email address, password (stored only as a secure hash by our authentication provider), shop details, and billing records for Pro subscriptions. For these records, CameraRentSaaS decides how the information is used.
b. Rental customers of Shops
When someone requests a rental through a Shop's booking page, or a Shop records a customer, we store the details provided (such as name, mobile number, email address, rental dates, notes and payment records) on behalf of that Shop. The Shop decides how this information is used for its rental business. We process it only to provide the service to the Shop, and Shops can see only their own customers.
3. What we collect
- Account information: name, email, password hash, role in the shop.
- Shop information: shop name, address, contact details, logo, rental policies, equipment and prices.
- Rental records: customer contact details, bookings, payments and deposits recorded by the Shop.
- Subscription billing: payment status, amounts, dates and references from our payment provider. We do not store full card numbers.
- Technical data: security logs, a one-way hash of IP addresses used for spam and abuse limits, and essential cookies needed to keep you signed in.
We do not ask Shops to upload government ID images through the service.
4. How we use information
- To provide accounts, booking pages, inventory, bookings, payment records and reports.
- To send service emails such as account verification, password resets, booking notifications and billing notices.
- To process Pro subscription payments and prevent fraud.
- To keep the service secure, including rate limiting, audit logs and troubleshooting.
- To meet legal obligations.
We do not sell personal information and we do not use Shop customer data for our own marketing.
5. Service providers
We use trusted providers to run the service, which may process data outside the Philippines:
- Supabase (database, authentication and file storage).
- Our web hosting provider.
- PayMongo (subscription payments).
- Our email delivery provider.
6. Security
Each Shop's data is separated at the database level using access rules, data is sent over encrypted connections, and access by our team is limited to what is needed to operate and support the service. No system is perfectly secure, and we will notify affected users and authorities of personal data breaches as required by law.
7. Retention
We keep account and Shop data while the account is active. Shops can export their data at any time. When a Shop asks us to close its account, we delete or anonymise its data within a reasonable period, except records we must keep for legal, tax or dispute purposes.
8. Your rights
Subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, you may have rights to be informed, to access, to correct, to object, to erasure or blocking, to data portability, and to file a complaint with the National Privacy Commission. Rental customers should first contact the Shop they rented from, since the Shop controls their rental records. We will help Shops respond to such requests.
9. Cookies
We use only essential cookies needed for sign-in and security. We do not use advertising cookies.
10. Contact
For privacy questions or requests, email support@camerarentsaas.com. Our Data Protection Officer contact details will be published here before launch.