Privacy Policy

From Google sign-in

• Your name, email address and profile photo.
• Nothing else. We never access your inbox, contacts, files or calendar.

What you give us

• Your Reddit username.
• Your payout method and payout details (for example a GCash number or bank account).
• The links you submit, which campaign they belong to, whether each one mentions the client, and any notes you add.
• Slot requests, and any data or deletion requests you send.

What we read from public sources

• For each link you submit, the public comment data Reddit shows to anyone: author, subreddit, a short text excerpt, score and posting time. We use it to check the comment exists and is yours.

What the app records automatically

• Activity logs: when you sign in, submit, edit or withdraw a post, and actions admins take (such as approvals and payments).
• Sign-in session details, including your IP address and browser type, which help keep your account secure.

• To run the program: let you sign in, track your posts, review them and show your progress.
• To pay you: calculate what you earned and keep a record of each payment.
• To check posts: confirm a submitted comment is public and matches your Reddit username.
• To keep things safe and fair: prevent fraud, duplicate claims, fake accounts and misuse.
• To report to clients: share approved links, display names and post counts only, and only for that client’s own campaigns.
• To meet legal duties: for example keeping payment records.

We rely on our agreement with you (the Terms of Service), our legitimate interest in running a safe and fair program, and our legal obligations. We never sell your data and never use it for advertising.

Access depends on your role in the app, and the app enforces it on every request.

We share data only with services that help run the app, and only what they need:

• Cloudflare hosts the app and its database.
• Google handles sign-in.
• Reddit receives a request from our server when we check a link. When you preview a comment in the app, your browser loads it from Reddit, and Reddit’s own privacy policy applies to that.

We may also share data if the law requires it, or to protect the safety and rights of our team, our clients or others.

Your data is stored with Cloudflare (Cloudflare Workers and its D1 database). Cloudflare runs data centers in many countries, so your data may be processed outside the Philippines. It’s protected in transit with encryption, and only the app itself can reach the database.

• While you’re on the team: we keep your account, profile and submissions.
• Payout records (payments, the approved posts they cover, and the payout details used): 3 years after the payment date, or longer if the law requires it.
• Activity logs: as long as the payout records they relate to.
• Everything else: deleted or anonymized within 90 days after your access ends, unless we need it to resolve a dispute.
• Backups: database restore points roll off automatically within 30 days.

Under the Philippines Data Privacy Act (RA 10173), and in line with the principles of the EU General Data Protection Regulation (GDPR), you have the right to:

• Be informed about how your data is used (this page).
• Access your data and get a copy of it.
• Correct data that is wrong or incomplete.
• Delete or block your data. We’ll delete what we can and tell you what we must keep (for example payout records) and why.
• Object to how we use your data.
• Data portability: receive your data in a common format (such as CSV).
• Complain to the National Privacy Commission (opens in a new tab), and to claim damages where the law allows.

To use any of these rights, send a data request from your Profile page in the app, or email lpg.villarasa@gmail.com. We’ll reply within 30 days.

We only use essential cookies to keep you logged in. No tracking, analytics or advertising cookies.

• A session cookie that keeps you signed in (it expires after 30 days at most).
• Short-lived security cookies used while you sign in with Google.

The app also remembers your theme choice and that you closed the cookie notice. These stay in your browser’s local storage and are never sent to us.

We protect your data with encrypted connections, sign-in through Google, strict role-based access, activity logs and regular backups. No system is perfectly secure. If a data breach is likely to put you at risk, we’ll tell you and the National Privacy Commission within 72 hours of finding out, as the law requires.

The app is only for invited team members who are at least 18 years old.

We may update this policy. When we make a change you need to know about, we’ll update the date at the top and ask you to review and accept it in the app before you continue.

Questions or requests about your data? Email lpg.villarasa@gmail.com or message your team lead.