Effective Date: April 2026
PH-Law ("the Platform") is committed to protecting the privacy of its users. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data. By using PH-Law, you agree to the collection and use of information as described in this Policy.
Account Information
When you register, we collect your email address, full name (optional), and a securely hashed password. If you sign in via Google OAuth, we receive your name and email address from Google.
Payment Records
When you purchase a legal form template (one of 30 available types), we collect your GCash reference number, the form type requested, and the transaction amount. We do not collect or store credit card or full GCash account credentials.
Usage Data
Standard server logs are automatically generated and include IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and aggregate analytics.
Search Queries
Search queries are processed by third-party AI services (Voyage AI) to generate semantic search embeddings. Queries are not permanently stored by PH-Law and are not linked to individual users.
Newsletter Subscription
If you subscribe to the PH-Law weekly newsletter, we collect your email address. This is used solely to send you weekly legal updates. You may unsubscribe at any time using the link included in every newsletter email. Subscriber data is stored in Supabase and is never shared with third parties for marketing purposes.
Account Management
Your email and name are used to authenticate your account and identify your payment history.
Payment Processing
GCash reference numbers are used solely to verify manual payments and deliver purchased legal form documents to your account.
Transactional Emails
We use your email address to send payment confirmations, document delivery notifications, and account-related messages. We do not send unsolicited marketing emails.
Security
Server log data (including IP addresses) is used to detect and prevent unauthorized access and abuse of the Platform.
Supabase
User accounts, payment records, and session data are stored in Supabase (PostgreSQL), hosted on AWS infrastructure. Supabase processes data on our behalf under a data processing agreement.
Voyage AI
Search queries are sent to Voyage AI to generate vector embeddings for semantic search. Voyage AI does not retain query data beyond the scope of processing.
Anthropic
Questions submitted to the AI Legal Q&A feature are sent to Anthropic's API (Claude model) for response generation. Anthropic processes this data under its own privacy policy.
Resend
Transactional emails (payment confirmations, document delivery) are sent via Resend. Recipient email addresses are shared with Resend solely for delivery purposes.
Google AdSense
PH-Law uses Google AdSense to display advertisements. Google AdSense uses cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to PH-Law and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google's Ads Settings at https://adssettings.google.com. For more information, see Google's Privacy Policy at https://policies.google.com/privacy.
No Sale of Data
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.
Account information is retained for as long as your account is active. Payment records are retained for a minimum of five (5) years to comply with applicable financial recordkeeping requirements. You may request deletion of your account and associated personal data by contacting us at 1982gaya@gmail.com. Note that payment records required for legal compliance may be retained even after account deletion.
PH-Law uses the following types of cookies: (1) Session cookies — HTTP-only cookies to maintain your authenticated login session; (2) Advertising cookies — Google AdSense sets cookies to serve relevant advertisements. You can manage or disable advertising cookies via Google's Ads Settings or your browser's cookie settings. Disabling advertising cookies will not affect your ability to use the core features of PH-Law.
Under the Republic of the Philippines Data Privacy Act of 2012 (RA 10173), you have the right to be informed of how your data is processed; access a copy of your personal data held by us; correct inaccurate or outdated personal data; object to or restrict certain processing; and request erasure of your personal data, subject to legal retention requirements. To exercise any of these rights, contact us at 1982gaya@gmail.com.
We implement industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, HTTP-only session cookies, and Row-Level Security (RLS) policies in our database. Access to payment records is restricted to authenticated account holders and authorized administrators.
PH-Law is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us at 1982gaya@gmail.com.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised effective date. Continued use of the Platform after any update constitutes your acceptance of the revised policy.
This Privacy Policy is governed by the Republic of the Philippines Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations. For users in other jurisdictions (including the European Economic Area), please note that data may be processed outside your jurisdiction.
For any privacy-related concerns, requests, or complaints, please contact us at: 1982gaya@gmail.com. We aim to respond to all privacy inquiries within five (5) business days.
Also see our Terms of Use. This Privacy Policy is updated periodically to reflect changes in the Platform's features and applicable law.