Privacy Policy

This Privacy Policy explains how CPAlly ("CPAlly", "we", "us", or "our") collects, uses, and protects information when you use our website and accounting platform (the "Service"). We are committed to handling your personal and business data responsibly and in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect the following types of information:

• Account information — your name, email address, and contact details when you register.
• Business information — business name, BIR registration details, chart of accounts, and tax-type configuration you provide during onboarding.
• Financial records — sales, expenses, receipts, customer and vendor records, and other ledger data you enter or upload.
• Usage data — information about how you interact with the Service, such as pages visited, features used, and device or browser information.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service;
• Generate financial reports and prepare BIR forms and filings on your behalf;
• Authenticate your account and keep it secure;
• Respond to your inquiries and provide customer support;
• Send you service-related notices and, where you have opted in, newsletters or product updates;
• Improve and develop new features.

Cookies and Analytics

On our public pages (our homepage and webinar pages) we use a first-party cookie to recognise the same browser across visits. It holds a randomly generated identifier and nothing else — no name, no email address, and no information you have typed. It lets us understand how many people saw an offer, followed it, and went on to register, so we can tell which parts of our site work. The cookie lasts one year, and clearing your browser's cookies removes it.

Alongside that identifier we record the broad type of device and browser you used, and the country and city your internet provider reports. We do not store your IP address. If you register for a webinar or create an account, we may connect these earlier visits to you, so that from that point the information is treated as personal data under this policy.

If you begin filling in a form and do not submit it, we record only that a form was started. We do not keep anything you typed.

Our public pages also load the Meta (Facebook) Pixel, which reports visits and actions back to Meta so we can measure our advertising. We additionally send Meta confirmation of certain events, such as completing registration or a purchase, from our servers; where these include your email address it is cryptographically hashed before it is sent. The Pixel is never loaded on signed-in pages, so Meta never sees your dashboard, your financial records, or any page on which your books are displayed. We also use Vercel Analytics and Speed Insights, which measure page performance and do not use cookies.

You can object to this processing or ask us to delete what we hold about your visits by contacting us using the details below.

How We Share Information

We do not sell your personal or business information. We may share data only with trusted service providers who help us operate the Service (for example, authentication, hosting, and email delivery providers), and only to the extent necessary for them to perform those services. We may also disclose information where required by law or a valid legal request.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Because financial and tax records may be subject to BIR retention requirements, we may retain certain records for the period required by Philippine law even after account closure.

Data Security

We implement reasonable organizational, physical, and technical measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Under the Data Privacy Act, you have the right to access, correct, and request deletion of your personal data, as well as the right to object to certain processing. To exercise these rights, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at mycpally@gmail.com.