Panatag Business Suite ("Panatag," "we," "us") is a payroll and HR platform built for
Philippine small businesses. This policy explains what personal and payroll data we
collect, why, how it's protected, and the rights you have over it under the
Data Privacy Act of 2012 (Republic Act No. 10173) and its
implementing rules.
Panatag is used by two kinds of people: the business that
subscribes (the "Organization," acting as the data controller for its own employees'
records) and the employees of that Organization who clock in, view
payslips, and file leave through our employee self-service (ESS) tools. This policy
covers both.
1. Information we collect
- Account & company data — your name, email, and password (hashed,
never stored in plain text); company legal name, registered address, and SEC/DTI/BIR
registration details.
- Employee records — name, contact details, employment terms,
compensation, and government identifiers (SSS, PhilHealth, Pag-IBIG, TIN). Government
ID numbers are encrypted at the field level (AES-256-GCM) and every
time one is viewed in plaintext, that reveal is logged against the viewer's account.
- Time & attendance data — clock in/out timestamps from the mobile
app (optionally geo-tagged), a shared kiosk device, CSV import, or chat (Messenger,
Viber, Telegram). A selfie photo at clock-in is optional and
only captured if the Organization turns it on.
- Payroll & compensation data — computed payslips, statutory
contributions and withholding tax, loans, and reimbursements.
- Billing data — subscription and invoice records. Card, GCash, and
Maya payment details are handled entirely by our payment processor,
PayMongo — Panatag never receives or stores your card number.
- Product usage data — pages viewed and features used in the app and
marketing site, collected via PostHog to help us fix bugs and
improve the product. This is about how the software is used, not payroll content.
- Device & log data — IP address, browser/device type, and
request logs, kept for security and troubleshooting.
2. How we use it
We use the data above to:
- Compute payroll, statutory contributions, and withholding tax correctly.
- Generate payslips, government e-files, and employment certificates.
- Let employees clock in/out and self-serve payslips, leave, and loan requests.
- Process subscription billing and send invoices.
- Send transactional emails — invites, payslip-ready notices, password resets.
- Detect fraud, secure accounts, and maintain audit trails required by law.
- Diagnose problems and improve the product.
We do not sell personal data, and we do not use payroll or
employee data to serve ads.
3. Legal basis for processing
We process personal data under RA 10173 on the basis of: performance of the
subscription contract with the Organization; the Organization's own legal obligations
as an employer (statutory reporting, tax withholding, record-keeping); consent, where
a feature is explicitly opt-in (e.g. selfie clock-in, chat-based clock-in); and our
legitimate interest in keeping the service secure and working correctly.
4. Who we share data with
We share data only with the processors needed to run the service:
- Cloudflare — hosting, database, storage, and edge infrastructure.
- PayMongo — subscription payment processing (cards, GCash, Maya).
- Resend — transactional email delivery.
- PostHog — product usage analytics.
- Anthropic — only if the Organization enables punch-card photo
scanning, to read a bundy-card image into a reviewable digital punch.
- Meta (Messenger), Telegram, Viber — only if the Organization
connects a chat channel for employee clock-in; no payslip amounts are ever sent
through chat.
We disclose data to government agencies (BIR, SSS, PhilHealth, Pag-IBIG) only in the
form of the statutory files and reports the Organization itself chooses to generate
and file. We disclose data to other third parties only when required by law or a
valid legal process.
5. How we protect it
- Government ID numbers are encrypted at the field level, never stored in plain text.
- Every plaintext reveal of a sensitive field is logged — who, when, which record.
- Data is isolated per Organization — one company can never query another's records.
- All traffic is encrypted in transit (HTTPS/TLS).
- Access to the underlying infrastructure is restricted and audited.
6. How long we keep it
Payroll and employee records are retained for as long as the Organization's
subscription is active, plus the retention period required by Philippine labor and
tax law (generally at least three years for payroll and statutory records). We favor
archiving over deletion for compliance records — an employee who
leaves the Organization keeps a historical record rather than being erased, since
past payslips and statutory filings must remain reconstructable.
7. Your rights
Under RA 10173, you have the right to:
- Be informed that your personal data is being processed.
- Access a copy of your personal data.
- Correct inaccurate or outdated personal data.
-
Object to or request the deletion of your data, subject to the Organization's
legal obligations to retain payroll and statutory records.
- Lodge a complaint with the National Privacy Commission.
Employees should first raise data requests with their employer (the
Organization), who controls their employment records. Reach us directly at
hello@panatag.app for anything about your account with Panatag itself.
8. Cookies & analytics
We use a session cookie to keep you signed in, and PostHog (which sets its own
cookies/local storage) to understand how the product is used. These are functional
and analytics purposes only — we don't run third-party advertising trackers.
9. Children's privacy
Panatag is a business payroll tool and isn't directed at children. We don't knowingly
collect data from anyone under 18, other than in the ordinary course of employment
records for employees who meet the legal working age under Philippine law.
10. Changes to this policy
We'll update the date at the top of this page when this policy changes, and notify
the Organization's account owner by email for any material change.