Privacy Policy

To run your account we hold your sign-in email and account settings (your tax profile and the next unused SI number in your ATP booklet). To do the bookkeeping we process the marketplace export files you upload.

Besides your sign-in email, this is what Pawi keeps about your account:

• Normalized sales rows from your imports: order numbers, dates, statuses, amounts, SKUs, product names and quantities, plus the names of the files you imported.
• Invoice records: the invoice previews Pawi lays out for you and the numbers you confirm.
• Books marks: which rows you have marked as written or copied into your books.
• Your setup answers and settings: shop name, tax profile, SI numbering and what you confirm in Pawi.
• Billing records, if you subscribe.
• Feedback you send, and the features you join a waitlist for.
• Five product events, each saved once per account with its date: you signed up, you finished setup, your first import completed, you took your first useful action (your first Mark written or Books copy), and you came back with an import in a later quarter. Import events also carry the quarter and the marketplace name. Nothing else is attached.

Pawi does not keep your uploaded files. The product events are saved in Pawi's own database, not sent to an analytics company.

Pawi strips buyer names and personal information the moment you import a file, and keeps only the figures your books actually need (amounts, dates, order keys, status). Lazada's export, the heaviest, includes a national registration number; that is discarded on import and never stored. This follows the Data Privacy Act (RA 10173) and our own privacy-by-default rule.

Every seller's data is scoped to their own account by per-row database security. One account can never see another account's exports, invoices, or books.

We use your data only to provide Pawi: to reconcile your exports, lay out your invoices and books, and keep your history in one place. We do not sell your data or use it for advertising.

We use Vercel Web Analytics to count page visits. When performance monitoring is enabled, Vercel Speed Insights measures loading, responsiveness and layout stability on selected pages. Its reports include browser, device and network information, country, performance measurements and technical page-element labels. They are not recordings of what you type.

For Speed Insights, we remove URL query strings and fragments, restrict reported routes and keep shop identifiers out of page-element IDs. We do not attach account identifiers, invoice amounts or uploaded file contents to performance events. These analytics do not use advertising cookies or cross-site tracking. Signing in uses separate session cookies.

We rely on infrastructure providers to host the service (database, hosting), a payment provider to process subscriptions, and an email provider to send account emails such as sign-up confirmations and password resets. We also use security providers to detect automated sign-in attempts and to check a five-character password-hash prefix against known breaches; your password itself is never sent to either provider. They handle data only to deliver those functions, never for their own purposes.

Product-news emails are sent only to sellers who ticked the optional box at sign-up or turned it on in Settings. Service emails are sent to every account.

When error reporting is enabled, Sentry receives a report when something breaks. A report carries the page address (with sign-in codes, tokens and email values removed), the error text and where in the code it failed, and your browser type. Pawi removes request bodies and cookies before sending, so the contents of your files and your sign-in are never part of a report.

Your data stays until you ask us to delete your account. Account deletion is by request: email support@pawi.pro. There is no self-service deletion in Settings.

Under the Data Privacy Act you may request access to, correction of, or deletion of your personal data. To make a request, or to raise a privacy concern, email us.

Pawi is operated by Edrian Tala, a sole proprietor based in the Philippines. For privacy matters, he is the personal information controller under the Data Privacy Act of 2012 (RA 10173). Reach him at support@pawi.pro.

Privacy questions or requests? Email support@pawi.pro.