Privacy Policy

To run your account we hold your sign-in email and account settings (your tax profile and the next unused SI number in your ATP booklet). To do the bookkeeping we process the marketplace export files you upload.

Pawi strips buyer names and personal information the moment you import a file, and keeps only the figures your books actually need (amounts, dates, order keys, status). Lazada's export, the heaviest, includes a national registration number; that is discarded on import and never stored. This follows the Data Privacy Act (RA 10173) and our own privacy-by-default rule.

Every seller's data is scoped to their own account by per-row database security. One account can never see another account's exports, invoices, or books.

We use your data only to provide Pawi: to reconcile your exports, lay out your invoices and books, and keep your history in one place. We do not sell your data or use it for advertising.

We use Vercel Web Analytics to count page visits. When performance monitoring is enabled, Vercel Speed Insights measures loading, responsiveness and layout stability on selected pages. Its reports include browser, device and network information, country, performance measurements and technical page-element labels. They are not recordings of what you type.

For Speed Insights, we remove URL query strings and fragments, restrict reported routes and keep shop identifiers out of page-element IDs. We do not attach account identifiers, invoice amounts or uploaded file contents to performance events. These analytics do not use advertising cookies or cross-site tracking. Signing in uses separate session cookies.

We rely on infrastructure providers to host the service (database, hosting), a payment provider to process subscriptions, and an email provider to send account emails such as sign-up confirmations and password resets. We also use security providers to detect automated sign-in attempts and to check a five-character password-hash prefix against known breaches; your password itself is never sent to either provider. They handle data only to deliver those functions, never for their own purposes.

Your data stays until you delete it or close your account. Under the Data Privacy Act you may request access to, correction of, or deletion of your personal data. To make a request, or to raise a privacy concern, email us.

Privacy questions or requests? Email support@pawi.pro.