PRIVACY POLICY

Your data.
Handled with care.

This Privacy Policy explains how Habify Technologies OPC, operating HABIFY (“HABIFY,” “we,” “us,” or “our”), collects, uses, shares, retains, and protects personal data across our websites, applications, hosted pages and forms, and related services.

Effective Last updated
Our approach

We process personal data transparently, for legitimate and declared purposes, and only to the extent reasonably necessary. We do not sell personal data.

01

Scope and who we are

This Policy applies when you visit a HABIFY website, create or use a HABIFY account, submit a form hosted through HABIFY, receive a message sent through HABIFY, communicate with us, or otherwise interact with our services.

HABIFY is operated by Habify Technologies OPC in the Philippines. Our processing of personal data is guided by Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

02

Our privacy roles

HABIFY may handle personal data in different roles depending on the interaction:

  • As a personal information controller: we determine how personal data is used for our website, account administration, billing, support, security, product improvement, and our own business communications.
  • As a personal information processor: organizations using HABIFY may upload, collect, or manage customer, lead, contact, campaign, and form data. In these cases, the organization generally determines the purpose and means of processing, while HABIFY processes the data on its instructions.

If your data was collected through a form, campaign, landing page, or workspace operated by one of our customers, please contact that organization first. We will support valid requests in accordance with our contractual and legal obligations.

03

Personal data we collect

Depending on how you use HABIFY, we may collect the following categories:

  • Account and profile data: name, work email, phone number, company, job title, account identifiers, workspace membership, preferences, and authentication information.
  • Lead, contact, and form data: information entered into forms or imported into a workspace, including contact details, responses, source information, tags, status, and custom fields configured by a customer.
  • Marketing and communications data: campaign membership, message content, delivery status, subscriptions, opt-outs, email opens, link clicks, and communication history.
  • Usage and technical data: IP address, browser and device information, user agent, timestamps, referring pages, page views, session identifiers, URL or campaign parameters, security logs, and activity records.
  • Integration data: connection details, account identifiers, mapped fields, synchronization status, and records exchanged with services such as Salesforce, Google Sheets, email providers, webhooks, or customer-configured systems.
  • Billing and transaction data: plan, subscription, invoice, payment status, and transaction references provided by payment or billing partners.
  • Support and inquiry data: information you provide when requesting a demo, asking for help, reporting an issue, or otherwise communicating with us.

Please avoid submitting sensitive personal information unless it is necessary, lawful, and specifically requested for an approved purpose.

04

How we collect personal data

We collect data directly from you; from your organization or workspace administrators; through forms, pages, campaigns, and emails powered by HABIFY; automatically through your browser or device; and from services you or your organization choose to connect.

Customers are responsible for ensuring they have an appropriate lawful basis and provide required notices before submitting or collecting personal data through HABIFY.

05

How and why we use personal data

We may process personal data to:

  • provide, maintain, personalize, and support the HABIFY platform;
  • create accounts, authenticate users, administer workspaces, and manage subscriptions;
  • host pages and forms, manage leads and contacts, deliver campaigns, run automations, and provide analytics;
  • connect and synchronize data with customer-selected integrations;
  • respond to inquiries, demo requests, support cases, and service communications;
  • monitor reliability, prevent abuse, investigate incidents, and protect users and the platform;
  • improve features, usability, and performance using aggregated or appropriately protected information;
  • comply with legal obligations, enforce agreements, and establish or defend legal claims; and
  • send marketing communications where permitted, subject to your preferences and right to opt out.

Our lawful basis may include your consent, steps taken at your request or performance of a contract, compliance with legal obligations, protection of vital interests where applicable, and legitimate interests that do not override your fundamental rights and freedoms.

06

Cookies, analytics, and email tracking

HABIFY uses cookies and similar technologies to keep sessions active, remember preferences, support security, understand page performance, and provide requested functionality. Where required, we request consent before using non-essential technologies.

Emails sent through HABIFY may use unique links and a small tracking image to record events such as delivery, opens, and clicks. This can include the time of the event, IP address, browser or device details, and the destination link. Recipients may unsubscribe through the link provided in applicable marketing emails. Blocking images or adjusting browser and email-client settings may limit some tracking.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the service from working correctly.

07

How we share personal data

We may disclose personal data only as reasonably necessary to:

  • service providers supporting hosting, infrastructure, communications, email delivery, analytics, customer support, security, billing, and payment processing;
  • workspace owners and authorized users according to account permissions and organizational instructions;
  • customer-selected integrations such as Salesforce, Google Sheets, external databases, webhooks, messaging services, email providers, and custom APIs;
  • professional advisers and authorities when required by law or reasonably necessary to protect rights, safety, and the integrity of the service; and
  • transaction participants in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and legal safeguards.

Third-party services process information under their own terms and privacy notices. Review those notices before enabling an integration. We do not use customer-controlled contact data for unrelated advertising, and we do not sell personal data.

08

International data transfers

HABIFY and its service providers may process data in the Philippines and other countries where infrastructure or support services operate. When personal data is transferred across borders, we apply contractual, organizational, and technical safeguards appropriate to the data, destination, and applicable law.

09

How long we retain data

We retain personal data only for as long as necessary for the purposes described in this Policy, to provide the service, follow customer instructions, meet contractual and legal requirements, resolve disputes, maintain security, and enforce agreements.

Retention periods vary based on the type of data, workspace settings, account status, legal obligations, and operational requirements. When data is no longer required, we delete, anonymize, or securely isolate it. Residual copies may remain temporarily in backups or recovery systems until they cycle out under applicable retention procedures.

10

How we protect personal data

We maintain reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures may include role-based access controls, authentication safeguards, logging, encryption where appropriate, secure development practices, backups, monitoring, and incident-response procedures.

No system can guarantee absolute security. You are responsible for protecting account credentials, using appropriate access controls, and promptly notifying us of suspected unauthorized activity. If a qualifying personal data breach occurs, we will take responsive action and provide notifications as required by applicable law.

11

Your privacy rights

Subject to applicable law and relevant limitations, you may have the right to be informed, access your personal data, object to processing, correct inaccurate data, request erasure or blocking, obtain data portability, claim damages, and file a complaint.

To exercise a right, email us using the contact details below and provide enough information for us to understand and verify the request. We may ask for additional information to confirm identity and authority. If HABIFY processes your data for a customer, we may refer the request to that customer or assist them in responding.

More information about these rights and filing a complaint is available from the National Privacy Commission.

12

Children’s personal data

HABIFY’s business services are not directed to children. We do not knowingly create accounts for children without appropriate authorization. Customers using HABIFY to collect data involving minors are responsible for providing suitable notices, obtaining any required consent or authorization, limiting collection, and complying with applicable child-protection and privacy requirements.

If you believe a child’s personal data was submitted improperly, please contact us so we can work with the relevant customer and take appropriate action.

13

Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, practices, technologies, or legal obligations. We will post the revised version on this page and update the effective date. For material changes, we may provide additional notice through the service or by another appropriate channel.

14

Contact us

For questions, concerns, complaints, or requests involving personal data, contact:

Habify Technologies OPC — HABIFY
Email: hello@habify.com.ph
Website: www.habify.com.ph

Please use the subject line “Privacy Request” and describe the request, the HABIFY service or customer involved, and how we can contact you.