Privacy Policy

Who we are

Dasig is operated by Dasig Inc., a domestic stock corporation registered in the Republic of the Philippines (SEC Company Registration No. 2026090268641-18), with its registered office at Tawagan, Sirao, Cebu City, 6000, Cebu, Philippines.

Dasig Inc. is the personal information controller for the data described here, and is responsible for it under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What this policy covers

This policy applies to the Dasig website at dasig.org, the Dasig platform at app.dasig.org, and the Dasig mobile app for Android and iOS. Where something applies only to the mobile app, it is marked as such.

Information we collect

Information you give us

Your name and email address, and a phone number if you choose to provide one
Account credentials, or the identifier from a sign-in provider if you sign in with one
Profile details you choose to add, such as a display name, photo and organisation
Content you publish, including campaigns, updates, comments and images
Records of gifts you make or receive, and of volunteering you take part in
Anything you send us directly, such as a support message or a verification document

Information collected automatically

Your IP address, device type, operating system and browser
How you use the platform — pages viewed, actions taken, and approximate dates and times
Cookies and similar technologies (see Cookies below)

Location

We request your device location only on the incident map and the incident report form, and only to place a report accurately. Your browser or device will ask first, and you can decline — the rest of the platform works without it. We do not track your location in the background.

In the mobile app

Camera and photo library. The app asks for access only when you choose to add a photo — a cover image, a receipt, or a picture for an update. We receive only the images you actually select or capture. We do not browse your library.
Notification token. If you allow notifications, we store the device token the operating system issues so we can send you updates about fundraisers you follow. It identifies a device, not you, and it is removed when you disable notifications or delete your account.
Kept in your device's secure storage. The app stores your sign-in session, and a copy of the details of a gift you have just made, in your device's encrypted storage. The gift copy is there so the app can show you a receipt straight away — which matters most if you gave without an account, because the app cannot look the gift up for you. These are copies and credentials held on your device, not information that exists only there.

How and why we use it

To create and run your account, and to provide the platform — on the basis of our contract with you
To process gifts, issue receipts and maintain the record of a fundraiser
To send messages you would expect, such as a receipt, or an update from a fundraiser you follow
To send marketing or newsletters, only where you have consented, and you can withdraw that at any time
To verify organisers, investigate misuse and keep the platform trustworthy — on the basis of our legitimate interests
To keep the platform working, secure and improving
To meet legal, tax and regulatory obligations

Payments

Online gifts are processed by Xendit, a licensed payment service provider. You enter your card or e-wallet details with Xendit, not with us. We never receive or store your full payment credentials. We keep only a record of the transaction — the amount, the method used, its status and the reference — which is what a receipt and a fundraiser's record are made of.

Funds are collected into a payment account belonging to the organiser or organisation raising them. Dasig Inc. publishes software and earns a service fee; it does not hold or transmit funds on anyone else's behalf.

Gifts are recorded, and can be anonymous

When you give through Dasig, the gift is recorded on our systems and shown on the fundraiser's page. That is deliberate: a fundraiser people can check is the whole point of the platform, and it is what lets an organiser account for what they received.

Your name is shown by default. You can choose to give anonymously, and the gift is then listed without your name. Anonymity applies to the public list — the organiser still receives the record of the gift so they can reconcile it, and we still hold it for receipts, accounting and the legal retention described below.

When information is shared

We do not sell your personal information, and we do not share it for advertising. It is shared only in these situations:

With the organiser you support. When you give to a fundraiser, the organiser receives your gift details so they can acknowledge it and account for it. You may choose to give anonymously, which withholds your name from the public list — the organiser still needs a record of the gift itself.
Publicly, on the fundraiser's page. Content you publish is visible to anyone. Your name appears on the fundraiser's public list of gifts by default — if you would rather it did not, tick give anonymously when you give, and the gift is listed without your name. The amount and the fact of the gift remain visible either way, because that public record is what makes a fundraiser checkable.
With providers who operate the platform for us. We use a small number of service providers under contract, acting on our instructions and not for their own purposes, in these categories: cloud hosting and file storage, our payment processor, email delivery, and error and usage analytics.
Where the law requires it, or to establish or defend a legal claim, or to prevent fraud, abuse or harm.
If the business is transferred, in which case this policy continues to apply to the information transferred with it.

Transfers outside the Philippines

Some of our service providers process data on servers outside the Philippines. Where that happens we remain accountable for your information, and we require those providers by contract to protect it to a standard consistent with Philippine law.

How long we keep it

We keep personal information only as long as needed for the purpose it was collected for. In practice:

Account information is kept while your account is open, and deleted after you close it
Records of gifts and payouts: five years under anti-money-laundering rules, and up to ten years where they form part of a receiving organisation's tax books. This applies even after an account closes — it is a legal obligation we cannot waive, and it is why deleting an account does not erase a transaction record.
Identity documents sent for verification: erased if we never verified you; otherwise kept for five years from the date we did, then erased.
Published content stays visible while the fundraiser it belongs to is published
Inactive contact records are anonymised automatically after three years with no giving activity. You do not have to ask.
Security and compliance audit logs are kept, and cannot be altered — they are the evidence that your data was handled correctly.

One thing outlives deletion, so that we can leave you alone. After an account is deleted we keep a scrambled fingerprint of the email address — a one-way code we cannot turn back into the address. We keep it indefinitely for a single purpose: if that address ever reaches us again through an import or a sync, we recognise it and stay silent. Without it, erasing your account would also erase the only record that you did not want to be contacted.

Deleting your account

Email [email protected] with the subject "Delete my account", or request it from your account screen in the mobile app. We verify who you are, act on it, and reply to confirm what was done — the same business day where there is no payment history to work through, and within seven days where there is.

You have seven days after deletion to change your mind. The snapshot that makes that possible is destroyed after thirty days, and after that the deletion cannot be reversed by anyone, including us.

Full detail on what is erased and what is kept, including which records the law requires us to retain and for how long.

Your rights

Under the Data Privacy Act you have the right to:

Be informed about how your information is processed
Access the information we hold about you
Correct anything inaccurate or incomplete
Object to processing, and withdraw consent where we relied on it
Have information erased or blocked where the law allows
Receive a copy of your data in a portable format
Be indemnified for damage caused by unlawful processing
Lodge a complaint with the National Privacy Commission

To exercise any of these, email us at the address below. We may need to verify who you are before we act, so that someone else cannot make a request about you.

How we protect it

We use appropriate organisational, physical and technical measures to protect your information, including encryption in transit and at rest, access controls that limit who can see personal data, and separation between accounts so that one user cannot read another's private information.

No system is perfectly secure. If a breach occurs that is likely to put you at serious risk, we will notify you and the National Privacy Commission as the law requires.

Services you connect yourself

If you choose to connect an outside service to your account — for example Canva, to use a design in a certificate — we store only the authorisation needed to make that connection work. Your use of that service is governed by its own privacy policy. You can disconnect it at any time in your account settings, which deletes the stored authorisation.

Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the platform is used. Some are essential — the platform cannot work without them. You can control the rest through your browser settings. We do not use cookies for advertising.

Children

Dasig is not directed to children. You must be at least 13 to hold an account, and if you are under 18 you should have a parent or guardian's permission to use it. If we learn that we hold information about a child without the necessary consent, we will delete it. If you believe that has happened, contact us.

Changes to this policy

We may update this policy. When we do, we will change the date at the top, and we will tell you by email or in the app if the change materially affects you.

Contact us

For any privacy question, or to exercise a right above:

Dasig Inc.
Email: [email protected]
Registered office: Tawagan, Sirao, Cebu City, 6000, Cebu, Philippines