Privacy Policy

This Privacy Policy explains how CPAlly ("CPAlly", "we", "us", or "our") collects, uses, and protects information when you use our website and accounting platform (the "Service"). We are committed to handling your personal and business data responsibly and in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect the following types of information:

• Account information — your name, email address, and contact details when you register.
• Business information — business name, BIR registration details, chart of accounts, and tax-type configuration you provide during onboarding.
• Financial records — sales, expenses, receipts, customer and vendor records, and other ledger data you enter or upload.
• Usage data — information about how you interact with the Service, such as pages visited, features used, and device or browser information.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service;
• Generate financial reports and prepare BIR forms and filings on your behalf;
• Authenticate your account and keep it secure;
• Respond to your inquiries and provide customer support;
• Send you service-related notices and, where you have opted in, newsletters or product updates;
• Improve and develop new features.

How We Share Information

We do not sell your personal or business information. We may share data only with trusted service providers who help us operate the Service (for example, authentication, hosting, and email delivery providers), and only to the extent necessary for them to perform those services. We may also disclose information where required by law or a valid legal request.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Because financial and tax records may be subject to BIR retention requirements, we may retain certain records for the period required by Philippine law even after account closure.

Data Security

We implement reasonable organizational, physical, and technical measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Under the Data Privacy Act, you have the right to access, correct, and request deletion of your personal data, as well as the right to object to certain processing. To exercise these rights, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at mycpally@gmail.com.