Privacy Policy

1 Information We Collect

We may collect the following types of information from you:

• Personal Information: Your name, email address, phone number, temporary payment information, and any other details you voluntarily provide when registering for services, subscribing to our newsletter, or contacting us.
• Usage Data: Information on how you access and use the Site, including your IP address, browser type, pages viewed, and the time and date of your visit.
• Cookies and Tracking Technologies: We use cookies and similar technologies to track activity on our Site. You can manage your cookie preferences through your browser settings.

We use third-party payment processors (e.g., GCash, Maya, PayPal) to process transactions securely. Speaki does not store your payment details; all transactions comply with PCI-DSS security standards.

We categorize cookies into: (1) Essential cookies — necessary for website functionality, (2) Performance cookies — for analytics, and (3) Marketing cookies — for personalized advertising.

2 How We Use Your Information

• To provide and maintain our services
• To notify you of any changes to our services or the Site
• To respond to inquiries and provide customer support
• To process transactions and manage your account
• To personalize your experience on the Site
• To send you promotional emails, newsletters, and special offers (with the option to opt-out at any time)
• To analyze and improve our Site's performance and functionality

3 Data Controller and Data Protection Officer

Data Controller: Speaki is the data controller responsible for the collection and processing of your personal data.

4 Data Retention and Storage

We retain your data as follows:

• User accounts & transaction records: 5 years from the last interaction (to comply with financial regulations)
• Marketing & analytics data: 12 months (unless opted out earlier)
• Support inquiries: 1 year after resolution

Upon expiration of the retention period, personal data is securely deleted or anonymized using industry-standard methods, such as encryption-based deletion and data masking.

5 Data Sharing and Transfers

We do not sell or rent your personal information to third parties. However, we may share your information with:

• Service Providers: Third-party companies that assist us in providing and maintaining our services, analyzing Site usage, or processing transactions. These providers are contractually obligated to use your information only for the purposes we specify.
• Legal Requirements: Public authorities or other parties when disclosure is required by law, regulation, or a valid request by law enforcement.
• Cross-Border Transfers: If personal data is transferred outside the Philippines, we ensure that such transfers are protected by appropriate safeguards.

We may store and process your data using third-party cloud service providers such as Amazon Web Services (AWS) or Google Cloud Platform (GCP), which comply with leading security standards (ISO 27001, SOC 2). For transfers outside the Philippines, we implement Standard Contractual Clauses (SCCs), Data Protection Agreements (DPAs), and encryption where applicable.

6 Data Security

We implement technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• AES-256 encryption for stored data
• TLS 1.2+ encryption for data in transit
• Multi-factor authentication (MFA) for administrative access

7 Data Breach Notification

In the event of a data breach affecting your personal information, we will promptly take steps to mitigate any potential harm within seventy-two (72) hours . We will notify affected users and the National Privacy Commission (NPC) as required by law, providing details about the breach and the measures being taken to address it.

8 Your Privacy Rights

Under the Philippine Data Privacy Act and applicable international standards, you have the following rights:

To exercise any of these rights, contact us using the details in Section 3. We may require identity verification via a government-issued ID or email confirmation. You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data is being mishandled.

9 Consent Mechanisms

We obtain your explicit consent for collecting and processing personal data through clear and affirmative actions — such as checking a box, clicking an "I Agree" button, confirmation link via email, or cookie preferences.

You may withdraw your consent at any time by following the opt-out instructions in our communications or by contacting us directly. Please note that withdrawing consent may affect your ability to use certain features of the Site.

10 Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Some third-party links may use tracking technologies (e.g., Google Analytics, Facebook Pixel). Please review their respective privacy policies before interacting with these links.

11 Children's Privacy

Our services are not intended for children under the age of 13 . We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete the data. If you believe we have collected data from a child, please contact us immediately.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will post the new policy on this page and update the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: