Legal
Privacy Notice
Effective: June 2, 2026
This Privacy Notice describes how Helium Marketing Corporation (“HMC”, “we”, “us”), the operator of RideVerified.ph, collects, uses, shares, and protects your personal information when you use the RideVerified.ph website and related services (the “Service”). It is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
1. Personal Information Controller
Helium Marketing Corporation is the Personal Information Controller for the RideVerified.ph Service.
- Registered office: To be confirmed upon SEC filing.
- Data Protection Officer (DPO): To be designated prior to public launch. In the interim, contact privacy@rideverified.ph.
2. Information We Collect
2.1 Free Valuation
When you submit a vehicle for free valuation, we collect the vehicle make, model, year, mileage, condition, vehicle type, and (optionally) province. None of these fields identify you personally.
2.2 Visitor Tracking
For each valuation request, we generate a one-way SHA-256 hash of your IP address and User-Agent string for fraud prevention and analytics. We do not store the IP address or User-Agent in their original form.
2.3 Marketing Attribution
If you arrive via a partner referral or marketing campaign, we capture the UTM parameters (source, medium, campaign) and the referral code (e.g., RV-XXXX) for attribution purposes.
2.4 Account & Paid Services
If you create an account or purchase a paid Verified Report, we collect your Philippine mobile number (E.164 format), name, and email address. Payment processing is handled by PayMongo Inc.; we do not store your card or e-wallet credentials.
2.5 Document Verification
For Verified Reports, we may collect Official Receipt (OR), Certificate of Registration (CR), chassis number, engine number, and plate number. These are used to perform LTO record matching, encumbrance checks, and document generation.
3. Legal Basis for Processing
| Activity | Legal Basis (RA 10173 §12) |
|---|---|
| Free valuation processing | Legitimate interest (analytics, fraud prevention) |
| Paid Verified Reports | Performance of contract |
| Account creation, OTP, login | Performance of contract |
| “Verified & Win” raffle entries | Consent (separately captured at entry) |
| Marketing communications | Consent (opt-in, withdrawable at any time) |
| Compliance with BIR, DTI, LTO requirements | Legal obligation |
4. How We Use Your Information
- To generate and deliver valuations and Verified Reports.
- To match vehicle records against the Land Transportation Office (LTO) and registry sources, where authorized.
- To verify your identity via one-time passwords (OTP) over Messenger, Telegram, or SMS.
- To process raffle entries under the “Verified & Win” promotion (DTI permit pending) and to contact winners.
- To prevent fraud, abuse, and automated scraping of the Service.
- To comply with our obligations under Philippine law, including BIR retention requirements for paid transactions.
5. Sharing & Disclosure
We do not sell your personal information. We share data only with the following categories of recipients, under data-sharing or processing agreements consistent with RA 10173:
| Recipient | Purpose | Location |
|---|---|---|
| Anthropic, PBC | AI-assisted valuation generation | United States |
| PayMongo Inc. | Payment processing for paid reports | Philippines |
| Supabase Inc. | Database hosting and authentication | Singapore (ap-southeast-1) |
| Vercel Inc. | Web application hosting and edge delivery | Multi-region |
| SMS / Telegram / Messenger providers | OTP and transactional notifications | Multi-region |
| Government authorities | Compliance with valid subpoenas, court orders, or NPC investigations | Philippines |
Cross-border transfers (e.g., to Anthropic in the United States) are supported by contractual safeguards and apply only to the minimum data necessary for the relevant processing activity.
6. Retention
- Anonymous free valuations: 12 months from creation, then aggregated and de-identified.
- Account data: kept while the account is active; 30 days after the last login if inactive, then deleted on request.
- Paid Verified Reports & transactions: 10 years, consistent with BIR record-keeping requirements.
- Raffle entries: kept for the duration of the promo period plus 30 days for verification.
7. Your Rights (RA 10173 §16)
You have the right to:
- Be informed when your personal data is being processed.
- Access your personal data and obtain a copy in a portable format.
- Object to processing or withdraw consent.
- Request correction of inaccurate data.
- Request erasure or blocking of personal data that is unlawfully obtained or no longer necessary.
- Lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.
- Be indemnified for damages from inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
To exercise any of these rights, email privacy@rideverified.ph. We will respond within 15 business days.
8. Security Measures
- TLS encryption for all data in transit.
- AES-256 encryption at rest for the database.
- Row-Level Security (RLS) so users can only access their own records.
- Hashed visitor fingerprints (no raw IP storage).
- Audit logging on all administrative actions (delivery: launch).
- Annual review of access controls and quarterly review of vendor contracts.
9. Children
The Service is not directed at persons under 18. We do not knowingly collect personal information from minors. If we learn that we have done so, we will delete it.
10. Changes to this Notice
We may update this Notice from time to time. Material changes that affect your rights will be notified at least 14 days in advance via the Service and to your registered contact methods.
11. Contact Us
Questions, requests, or complaints: email privacy@rideverified.ph or write to the Data Protection Officer at the registered address (to be published on the website prior to launch).