Campaigner PH
Back to home

Privacy Policy

Last updated: June 1, 2026

This Privacy Policy describes how Campaigner PH ("we", "us", "our") collects, uses, stores, and protects information when you use our election campaign management platform ("Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your name, email, and profile picture from Google.

1.2 Campaign Data (User-Provided Content)

You and your campaign staff enter data into the Platform, which may include:

  • Voter information (names, contact details, addresses, precinct numbers, support levels)
  • Beneficiary information (names, contact details, program affiliations, demographic tags)
  • Volunteer and staff information
  • Activity and event records
  • Campaign expense records
  • Geographic and area data

You, as the campaign operator, are the data controller for all personal information entered about voters, beneficiaries, volunteers, and other individuals. We act as a data processor on your behalf. You are solely responsible for ensuring that you have obtained proper consent and legal basis for collecting and storing this personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173).

1.3 Usage Information

We automatically collect certain technical information when you use the Service, including IP addresses, browser type, device information, pages visited, and timestamps. This data is used for security, performance optimization, and troubleshooting.

1.4 Cookies and Similar Technologies

We use cookies and similar technologies for authentication (session cookies), security (CAPTCHA via Cloudflare Turnstile), and user preferences (theme settings). We do not use tracking or advertising cookies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate users and manage sessions
  • Process and store campaign data as directed by campaign administrators
  • Send transactional emails (verification, password reset)
  • Monitor for security threats and prevent abuse
  • Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Retention

Your data is stored on cloud infrastructure. We retain your account and campaign data for as long as your account is active. When you delete your account or campaign, we will delete associated data in accordance with our retention schedule, though some data may be retained in backups for a limited period.

Audit logs are retained for the life of the campaign to maintain the integrity of the accountability trail.

4. Data Security

We implement commercially reasonable technical and organizational security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Hashed password storage
  • Role-based access controls within campaigns
  • Session management and authentication safeguards
  • CAPTCHA protection against automated attacks

However, no method of electronic storage or transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that there is always a risk of unauthorized access, and you use the Service at your own risk.

5. Data Breach Notification

In the event of a confirmed data breach that affects your personal information, we will make commercially reasonable efforts to notify affected users within a reasonable timeframe, as required by applicable law. Such notification may be made via email to your registered address or through an in-app notice.

You acknowledge that despite our security measures, breaches may occur due to sophisticated cyberattacks, zero-day vulnerabilities, or other factors beyond our reasonable control. To the maximum extent permitted by law, we shall not be held liable for damages resulting from a data breach except where such breach is directly caused by our gross negligence or willful misconduct. Our liability in such cases is limited as set forth in our Terms of Service.

6. Your Responsibilities as a Data Controller

As a user who enters personal data of voters, beneficiaries, and other individuals into the Platform, you are the data controller under the Data Privacy Act of 2012. You are responsible for:

  • Obtaining informed consent from individuals before entering their personal data into the Platform
  • Ensuring you have a lawful basis for processing personal data
  • Responding to data subject access requests and other rights requests from individuals whose data you have entered
  • Registering with the National Privacy Commission (NPC) as a personal information controller, if required
  • Implementing appropriate organizational measures to protect the personal data you manage, including limiting staff access to need-to-know basis
  • Complying with all data breach notification obligations to the NPC and affected data subjects for data under your control

7. Third-Party Services

We use the following third-party services in connection with the Platform:

  • Google OAuth — for optional social login (subject to Google's Privacy Policy)
  • Cloudflare — for CDN, security, and Turnstile CAPTCHA (subject to Cloudflare's Privacy Policy)
  • Cloud hosting provider — for infrastructure and database hosting

These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

8. Data Sharing and Disclosure

We do not sell or rent your data. We may share information only in the following circumstances:

  • Within your campaign: Data you enter is accessible to other members of your campaign based on their role and area assignments.
  • Service providers: We use trusted third-party services for hosting, email delivery, and security, who process data on our behalf under confidentiality obligations.
  • Legal requirements: We may disclose information if required by law, legal process, government request, or to protect our rights, property, or safety.

9. Your Rights

Under the Data Privacy Act of 2012, you have the right to:

  • Access the personal information we hold about your account
  • Request correction of inaccurate personal information
  • Request deletion of your account and associated personal data
  • Object to processing of your personal data in certain circumstances
  • Lodge a complaint with the National Privacy Commission

To exercise these rights regarding your account, use the Settings page in the Platform or contact us directly.

For rights requests regarding data entered about you by a campaign (voter data, beneficiary data, etc.), please contact the campaign operator directly, as they are the data controller for that information.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

11. International Data Transfers

Your data may be processed and stored on servers located outside the Philippines. By using the Service, you consent to the transfer of your data to servers in other jurisdictions. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through the Platform or at the contact information provided in your account settings.