AskPinoy

Privacy Policy

In one line: What AskPinoy collects, why, where it's kept, who can see it, and how to get it corrected or deleted.

Last updated

Privacy officer: the founder of AskPinoy, Ramuel Batuigas · ramuel@askpinoy.com · 33 Cathy Jean Cres., Etobicoke, ON M9V 4T2, Canada. Write to us about anything on this page. We answer within 30 days, usually much faster.

The short version

1. What we collect, and why

Just browsing. No account needed. Our hosting provider keeps short-lived server logs, including your IP address, to run and protect the site. Our own visit counting uses a hash that discards your IP (section 8).

Signing in. Your email address, so we can send you a sign-in link and tell you about your own listings, reviews and requests. We never store a password.

Each time you ask for a sign-in link, we check the domain of your email address (the part after the @, like gmail.com) against a list of known throwaway domains built into our own software, so the people you meet here are real members of the community, not spam accounts made from disposable addresses. The check happens entirely on our servers: nothing is sent to any other company, nothing is looked up online, and we keep no record of it.

Signing in with Google. If you choose Google instead of an email link, Google gives us your email address, an account ID and the name on your Google account, and Google learns that you signed in to AskPinoy. We copy that name into your display name, which appears publicly next to your reviews. The review form shows you the name before you post, and you can change it there, or by emailing us, at any time. We don't copy your profile photo.

Your display name. The name that appears publicly next to your reviews. If you signed in with Google, it starts as the name on your Google account, so it can be your real name. If you signed in by email link, we ask you to choose one the first time something of yours would appear publicly, which is the review form. Either way, you decide what it says: change it on the review form before you post, or email us, any time.

Posting a review. Your rating, your review text, your first-hand attestation and the time. Public, with your display name. If you tick the box on the form, "via Google" appears next to your review too, to show that you signed in with Google; it's off unless you tick it. The form has a bot check (section 7).

Adding a business. The business's details (name, phone, address or area, postal code, category, languages, website, description, whether it's home-based), your answer to "Filipino-owned or Filipino-serving?" (a hint for our confirmation call: no label shows until the owner confirms it), whether you own or manage the business, plus your email address, which we use only to tell you what happened to your suggestion. If the city isn't live yet and you tick the box, we also record your consent to one launch email. The business's owner never sees who suggested the listing.

Claiming a listing. Your name, your role at the business, the best number to reach you after our confirmation call (the call itself goes to the number on the listing), your attestations, and optionally one business document: a licence, a utility bill or a registration. Please don't send photo ID or a SIN. If you do, we delete it. Documents are deleted 90 days after we decide the claim.

Managing your listing. What you put on your page (public); your owner contact details (private, so we can reach you); your licence details (the number becomes public only after we've checked it on the register); and your answers to the eligibility and scope questions.

Corrections, removal requests and reports. What you write, and your account or email if you give one, so we can tell you the outcome. The business owner never sees who sent a correction or a report.

Messaging a business (where a listing has a message form). Your name, an email or phone, and your message, which we send to that business so they can reply. We keep your details for 90 days, then clear them. We keep a hashed IP for 30 days to stop abuse.

Consent records. When you agree to receive an email from us, or unsubscribe, we keep a record: a hashed version of your email, what you agreed to, the exact wording you saw, when, a hashed IP and your browser type. This is how we prove we had your permission, and that you withdrew it.

On the phone or in person. When we call a business to confirm a listing, we note who we spoke to, what they confirmed, and any permissions they gave: the community label, showing the phone and address, using photos, one launch email. These notes are internal.

2. Where listing information comes from, and unclaimed listings

Many listings on AskPinoy are unclaimed: the business hasn't signed up yet. Here's how they get there:

Before an unclaimed listing publishes, we phone the business to confirm the details and ask whether we may show its phone number and address. A listing shows the business's phone and address only when the business publishes them itself (a storefront, its own website or page) or told us we could. Home-based businesses never show an exact address, only the area they serve.

We never copy reviews, photos, descriptions or anything else from Google Maps, Yelp, Yellow Pages or any other directory. We don't use scraping tools, downloads or bulk exports. Photos on a listing come from the owner, from our visit day, or from the business's own website or Facebook page with the owner's recorded permission.

If the listing is you, a sole proprietor whose name is the business name or whose phone is a personal number, you can:

The claim link is on every listing. For a correction or a removal, email ramuel@askpinoy.com and we act within 5 business days. We never show a personal email address on a listing.

3. Who sees what

Public: everything on a listing page, and — once you've posted a review that's live — your display name beside your rating and review text. Until then, your display name isn't shown anywhere. If you signed in with Google, your display name starts as the name on your Google account, so your real name can appear on a review unless you change it. The review form shows the name before you post, and you can change it there, or by emailing us, at any time. If you signed in by email link, we ask you to choose a name the first time it would appear publicly. If you tick the box on the review form, "via Google" appears next to your review as well.

The business owner sees: their own listing, their reviews with the reviewer's display name (and the "via Google" tag, if the reviewer chose to show it), and messages sent to them.

The owner never sees: who suggested their listing, who reported it or a review, or our internal notes. If you suggest a business, we use your email only to tell you what happened to your suggestion.

AskPinoy staff see: everything above plus internal notes, for moderation and verification.

"Staff" today means the founder. Every admin action is logged.

4. Where your data lives, and who helps us run the site

Our database and file storage run in Canada (the Canada Central region). All listing, account, review and claim data lives there.

The services below process some data on our behalf. We chose each for one job and share only what that job needs.

ServiceCountryWhat it does with your data
SupabaseCanadaOur database, file storage and sign-in system
VercelUnited StatesHosts the website and serves pages; keeps short-lived server logs
Google (sign-in)United States"Sign in with Google", if you use it: Google gives us your name, email address and account ID, and learns that you signed in to AskPinoy
Google (maps)United StatesThe map image and embedded map on business pages, which your browser loads directly from Google
ResendUnited StatesSends our emails: sign-in links, claim decisions, notices
SentryUnited StatesReceives error reports when something breaks; emails, phone numbers, cookies and form contents are stripped first; kept 30 days
CloudflareUnited StatesThe Turnstile bot check on our forms
GitHubUnited StatesHolds an encrypted weekly backup copy for 8 weeks
OpenStreetMap Foundation (Nominatim) and OpenFreeMapOutside CanadaOnly in the owner and admin dashboard, to place a map pin: the business address (never a home address) is looked up, and map tiles are loaded

When we add a service (for example a payments provider when paid plans launch), we update this table before it goes live.

Outside Canada? You can add a business anywhere in the world, and anyone can sign in. Here is what that means for you.

5. How long we keep things

WhatHow long
Your account and profileUntil you delete your account
Reviews and repliesUntil you delete them or your account. Default: deleted with the account. You can choose to keep them without your name
Rejected or removed reviews12 months, in case of appeal, then deleted
Claim documents90 days after the claim is decided
Email of the person who suggested a listingCleared 12 months after the listing is published or declined
Messages to a businessSender details cleared after 90 days; hashed IP after 30 days
Consent records (you said yes)Deleted with your account
Unsubscribe records (you said stop)3 years, keyed by a hashed email, as proof we honoured it
Visit and search counts13 months. They can't identify you
Error reports (Sentry)30 days
Listings in cities we haven't launched inAfter 24 months with no owner activity we email once to ask if the business is still open; no reply in 30 days and we delete it
BackupsDaily database backups kept about a week; encrypted weekly copies kept 8 weeks. Something you delete leaves the backups as they expire, within about 8 weeks

6. Your rights, and how to use them

7. Cookies and bot checks

8. How we count visits, and how to opt out

We count visits ourselves. No Google Analytics, no Meta pixel, nothing that follows you around the web.

Here is exactly how it works. When you view a listing, tap "call" or run a search, our server combines your IP address and browser type with a secret that changes every day, and stores only the scrambled result. Your IP address is never stored. The daily secret is thrown away, so even we can't reverse it, and tomorrow's count can't be linked to today's. Nothing is ever linked to your account, even when you're signed in. Search words that look like a phone number or an email are dropped before saving. Counts are deleted after 13 months.

Business owners see totals ("42 views this month, 7 call taps"), never who.

Opting out. There is no tracking cookie to switch off, because there isn't one. If you'd rather not be counted at all, block askpinoy.com/api/events with a content blocker in your browser. We don't work around blockers, and the site works fine without it.

9. Email and other messages

10. How we protect your data

The site runs over HTTPS. The database enforces row-by-row access rules, so an owner can read only their own private data and a member only their own. Private fields (exact addresses, owner contact details, documents, internal notes) are kept apart from public listing data. Admin access is limited to the founder, and every admin action is logged.

If something goes wrong. If we learn of a breach that could cause you real harm, we will contain it, tell you what happened and what you can do, notify the Office of the Privacy Commissioner of Canada where the law requires, and keep a record of it.

11. Children

AskPinoy is for adults. You must be 18 or older to create an account. If you think a child has given us personal information, email us and we'll delete it.

12. Changes

We post changes here with a new date. For a change that matters, such as a new processor or a new kind of data, we email account holders first.

13. Contact

Ramuel Batuigas, privacy officer · ramuel@askpinoy.com · 33 Cathy Jean Cres., Etobicoke, ON M9V 4T2, Canada

AskPinoy is a business name registered in Ontario by the same person, who runs it as a sole proprietor. Who we are, in full, is section 1 of the Terms of Service.