GodoERP

Privacy Policy

Version 2026-11 · Effective 25 October 2026 · See also our Terms of Service.

1. Our two roles

GODO WEB DESIGN SERVICES (GoDoWeb) handles two kinds of personal data in GodoERP, and our role differs for each under the Data Privacy Act of 2012 (Republic Act No. 10173):

DataExamplesOur role
Account dataYour name, email, phone, business name and address, TIN, login and billing recordsPersonal information controller
Workspace dataThe customers, suppliers, employees, payroll and contacts you enterPersonal information processor, acting for you

For workspace data, you decide what is collected and why; we process it only on your instructions to run GodoERP.

2. What we collect and why

  • Signup and account details, to create and approve your workspace and contact you about it.
  • Billing records (plan, invoices, payment references, bank-transfer proof), to bill you and keep our own books as the law requires. Card and e-wallet details are entered on PayMongo's page; we do not see or store full card numbers.
  • Security and usage records (sign-ins, IP address, browser, two-factor status, audit log of platform actions), to protect accounts and investigate problems.
  • Support messages, to answer you.

Our legal bases are the contract with you, our legal obligations (including tax and bookkeeping records), and our legitimate interest in keeping the service secure.

3. Who we share it with

We do not sell personal data. We use these service providers, only as needed to run GodoERP:

ProviderPurpose
InterServerServer hosting and backups
PayMongoCard and e-wallet payments
BrevoSending system emails (welcome, password reset, billing notices)

We may also disclose data when Philippine law, a court or a government authority requires it.

4. Where your data is stored

GodoERP runs on our server hosted by InterServer in the United States. Each Customer's workspace has its own separate database. We remain responsible for data we transfer to our providers, including abroad.

5. How we protect it

  • A separate database for every workspace, so one Customer's records are never stored with another's.
  • Encrypted connections (HTTPS) and encrypted storage of database credentials.
  • Two-factor sign-in for accounts, automatic sign-out of idle platform sessions, and re-confirmation of the password before sensitive platform actions.
  • An append-only audit log of platform administrator actions.
  • Daily backups, with restore tests.

6. How long we keep it

  • Workspace data: while your workspace is active, then 90 days after closure, then deleted; backups roll off within a further 30 days.
  • Billing and accounting records: as long as Philippine tax law requires.
  • Security logs: up to 12 months.

7. Your rights

Under the Data Privacy Act you may ask to be informed about, access, correct, object to, or have blocked or erased your personal data, to get a copy in an electronic format, and to claim damages. You may also complain to the National Privacy Commission.

For account data, write to us. For workspace data, ask the business that uses GodoERP; we will help them answer you.

8. If there is a breach

If a breach is likely to cause serious harm, we notify the National Privacy Commission and the affected people within 72 hours of knowing about it, as NPC Circular 16-03 requires. For workspace data, we notify the Customer without delay so it can meet its own obligations.

9. Contact

Data Protection Officer: Ian, privacy@godoerp.com. Postal: ACM Building, 2/F Room 207, Rizal–Burgos St., Talisay, Sorsogon City, Philippines.

We will post changes to this policy here and notify Customers by email or in the app before material changes take effect.