We take the privacy of your business and employee data seriously. This policy explains what we collect, how we use it, and how we protect it.
Sweldo is operated by AltaSME / Nuvratech Systems, based in Marikina City, Metro Manila, Philippines. This Privacy Policy explains how we collect, use, store, and protect personal and business information when you use the Sweldo payroll tool.
This policy covers the Sweldo web application at sweldo.altasme.com and any related services. It is governed by the Republic Act 10173, known as the Data Privacy Act of 2012 of the Philippines.
| Data | Why We Collect It |
|---|---|
| Email address | Account login, email communications, payment identification |
| Password (hashed) | Authentication — never stored in plain text |
| Business name | Appears on payslips and reports |
| Owner name | Account identification, email personalization |
| Mobile number | Account recovery, payment verification (optional) |
| Data | Why We Collect It |
|---|---|
| SSS Employer ID | Pre-fills government remittance forms |
| PhilHealth Employer Number | Pre-fills government remittance forms |
| Pag-IBIG Employer ID | Pre-fills government remittance forms |
| Business TIN | BIR compliance reference |
| Business address | Appears on official documents |
| Data | Why We Collect It |
|---|---|
| Employee full name | Payslip generation, payroll records |
| Monthly salary | Payroll computation |
| Employment type | Determines applicable deduction rules |
| Date of hire | Prorated pay and 13th month computation |
| Date of birth, sex | Optional — for HR records |
| SS Number, PhilHealth PIN, Pag-IBIG MID, TIN | Pre-fills government remittance forms |
When you upgrade to a paid plan, we collect your email address, GCash sender name, payment amount, and a screenshot of the payment confirmation. We do not collect or store your GCash account number or bank details.
We may collect basic usage metadata such as pages visited, features used, and error logs. This is used solely for product improvement and is not linked to personally identifiable information shared with third parties.
Your data is stored on Supabase (hosted on AWS infrastructure), which provides encrypted storage and row-level security. Payment screenshots are stored on Cloudinary with private access controls. The application is served via Cloudflare Pages with DDoS protection.
While we implement industry-standard security practices, no system is completely immune to security incidents. We cannot guarantee absolute security of data transmitted over the internet. In the event of a data breach affecting your personal information, we will notify affected users as required by the Data Privacy Act of 2012.
You (the employer / business owner) are the data controller for your employees' personal information entered into Sweldo. We act as the data processor on your behalf.
As the data controller, you are responsible for:
We process employee data only as directed by you and only for the purpose of operating the payroll features you use.
When you submit a payment confirmation, we receive and store:
We do not receive, store, or have access to your GCash account number, PIN, or bank details. Payment screenshots are only accessible to verified Sweldo admin and are deleted upon plan expiry or account deletion.
We retain your data for as long as your account is active. Specifically:
| Data Type | Retention Period |
|---|---|
| Account and business information | Duration of account + 90 days after deletion |
| Employee records | Duration of account + 90 days after deletion |
| Payroll run history | Duration of account + 90 days after deletion |
| Payment screenshots | Until plan expires or account is deleted |
| Email logs | 90 days |
After the retention period, data is permanently deleted from our systems. If you require early deletion, contact us and we will process your request within 30 days.
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights:
To exercise any of these rights, contact us at sweldo@mail.altasme.com or via our Facebook page. We will respond within 30 days.
Sweldo is a business tool intended for adults operating legitimate businesses. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has created an account, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address and/or through an in-app notice. Continued use of the Service after the effective date of any change constitutes acceptance of the revised policy.
The current version of this policy is always available at sweldo.altasme.com/privacy.html.
For privacy-related questions, data requests, or concerns:
If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.