Privacy Policy

Audrim Digital Marketing Services ("ADMS," "we," "us," or "our") is a DTI-registered business based in Cebu, Philippines. This Privacy Policy explains how we collect, use, store, and protect information you provide when you use our website (audrim.ph) and client portal, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Information we collect

Contact form submissions. When you fill out the contact form on our website, we collect your name, email address, and the message you send. This information is processed through our own email relay service (built on Supabase, a separate instance from the one powering our client portal) and delivered to our team inbox via Google Workspace. You will also receive an automatic confirmation email at the address you provided. To reduce spam, form submissions are screened using Cloudflare Turnstile, which may process your IP address and browser signals solely to verify you are not a bot. We use your submission solely to respond to your inquiry.

Account registration. When you create a client portal account, we collect your email address and a password. Passwords are hashed and stored securely through Supabase Auth. We may also collect your full name, company name and phone number if you choose to provide them — these are optional, and you can edit or clear them yourself at any time from your account settings. This information is used to manage your account and provide access to the services you subscribe to.

Support requests and project correspondence. When you raise a support ticket in the client portal, we store the subject and the full message thread, including anything you paste or attach to it, so our team can respond and so both sides keep a record of what was asked and agreed. Ticket content is written by you rather than collected by us, so please do not put passwords, card details, OTPs or other sensitive credentials into a ticket. We also store the project updates our team writes about your work, which may name your business and the people we deal with there.

Contracts and electronic signatures. Contracts, change orders and proposals we issue to you are stored in your portal account. When you sign one, we record the name you type as your signature together with the date and time you submitted it. A signed contract is deliberately locked at that point and cannot afterwards be altered by you or by us — that is what makes it worth signing. Because it is a legal record, a signed contract and its signature details fall under the legal and business-records exception described in Data retention below, and are not deleted when an account is closed.

Tool usage data. When you use Crawlr to audit a website, we store the site URL you submit and the audit results (pages checked, issues found, health score) so you can view your audit history. This data is tied to your account. When you use PadBoard to run a play session, we store the session you create — including the player names, skill ratings, match results and scores you enter — so you can resume an interrupted session and review your history. This data is also tied to your account. Player names in PadBoard are entered by you, not collected by us: if you enter the names of other people, you are responsible for having a basis to do so, and you can delete any session from within the tool at any time. Some free tools on our website, such as Privacy Check and Am I Hit, do not require an account. For those, we log what you submit (for example, a website URL, or a date and a set of checkbox selections, depending on the tool) and the tool's result, to improve the tool; this is not linked to a user account, and we do not use it to identify who used the tool. As with any web request, our infrastructure providers (see Data sharing, below) may retain standard connection-level logs such as IP address, consistent with the Server logs section below.

Payment information. We do not accept card payments and we do not use a payment processor. Invoices are paid directly to us by GCash or Maya, using the QR code shown in your client portal, so the payment itself happens entirely inside your own e-wallet or banking app. We never see or hold your card number, account credentials, PIN or OTP.

To confirm a payment you upload a screenshot of your transfer to the portal. That image is stored in our Supabase file storage in a private area scoped to your account: it is not publicly accessible, no other client can see it, and our team opens it through a temporary link that expires after one hour. Note that the screenshot itself will usually show your name, the amount, the date and a reference number, because that is what your e-wallet prints on it.

Alongside it we keep the invoice amount, payment date, status and receipt number for billing and support.

Server logs. Our web server automatically records standard access log data, including IP address, browser type, pages visited, and timestamps. This data is used for security monitoring and aggregate traffic analysis.

Website analytics. We use Google Analytics 4 to understand how this site is used — which pages are visited, roughly where visitors come from, what device and browser they use, and how they found us. It sets cookies in your browser and sends this information to Google. It is loaded only once you interact with the page, or after five seconds, so a visitor who arrives and leaves immediately is generally not counted. We use it in aggregate to improve the site. We do not use it to identify you personally, and we do not run advertising or remarketing pixels.

How we use your information

We use the information we collect to respond to inquiries, deliver services you have purchased, manage your account, send transactional communications (receipts, service updates, support replies), and improve our website and services. We do not sell, rent, or trade your personal information to third parties.

Data sharing

We share your data only with the service providers necessary to operate our business: Supabase (database, authentication and file storage for the client portal — including payment-confirmation screenshots — and for our contact-form email relay), DigitalOcean (the server hosting this website and the client portal), Google Workspace (delivery of portal notification, contact-form and other transactional email), Cloudflare (Turnstile bot verification on our contact form), Google Analytics (website usage measurement, as described above), Google Fonts (the typefaces used across the site and the portal), and jsDelivr (a content delivery network that serves one software library the client portal depends on). Those last two are fetched by your browser as the page renders, which means your IP address and browser details are visible to them as part of that request; we receive nothing back from either and neither is used to track you. Each of these providers maintains their own privacy and security practices. We do not share your data with advertisers or data brokers, and we do not use a payment processor — payments are made directly to us.

Data retention

Contact form messages are retained in our email inbox for as long as necessary to resolve your inquiry. Account data is retained for as long as your account is active. If you close your account, we will delete your personal data within 30 days except where retention is required by law or for legitimate business records (such as payment history). Payment-confirmation screenshots are kept alongside the invoice they relate to, for the same period as the rest of your payment history.

Your rights

Under the Philippine Data Privacy Act, you have the right to be informed about how your data is used, to access the personal information we hold about you, to correct inaccurate data, to object to processing, and to have your data erased where legally permissible. To exercise any of these rights, contact us at hello@audrim.ph.

Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, or loss. Account data is stored with Supabase, which uses encryption at rest and in transit. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Cookies

Our website uses Google Analytics, which sets cookies in your browser (named _ga and similar) to recognise a returning visitor and measure how the site is used. These are analytics cookies, described under Website analytics above. We do not use advertising, remarketing or cross-site tracking cookies anywhere on the site.

The client portal uses session tokens stored in your browser to keep you logged in. These are strictly necessary for the portal to function and are not used for tracking.

You can block or delete cookies in your browser settings at any time. The site works normally without analytics cookies; the portal will not be able to keep you logged in without its session tokens.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy.

Contact

For privacy-related questions or requests, contact us at hello@audrim.ph.