Privacy policy

Two different relationships run through this service, and they are treated differently in law.

Your employees’ data. Your company is the personal information controller. You decide what to collect and why. We are the processor: we hold and handle it on your instructions and for no other purpose.

Your company’s account data. For the details of the people who sign in to administer Axcelink, and for billing, we are the controller.

The practical consequence: if one of your employees asks to see or correct their record, that request goes to you, not to us. We will help you answer it, but we will not act on their data without your instruction.

Because you put it there, on your instruction:

• Employee records — name, contact details, position, department, employment history
• Government identifiers — SSS, PhilHealth, Pag-IBIG and TIN, needed to produce statutory reports
• Payroll and compensation, including loans, benefits and deductions
• Attendance, including punch times and, where you use geofenced work sites, the location of a punch
• Leave, disciplinary records, performance reviews and training records
• Documents and photographs you upload against an employee

Because running the service requires it:

• Sign-in details for your administrators, and a record of when they signed in
• An audit log of actions taken in your account, and who took them
• Billing details — your company’s registered name, TIN and address for receipts

We never see your card number. Payment details are entered on PayMongo’s own page and never reach our servers.

If your company uses the Axcelink mobile app, also:

• The location of each time in, break and time out, with its accuracy and whether the phone reported it as faked — taken only at the moment of the punch, never in the background
• The registered phone: its model, operating system, app version, a random installation identifier, and a public key the phone created
• How each punch was confirmed (fingerprint or face, or the phone’s screen lock), and when a punch made offline arrived
• A notification token, if the person allows notifications, so announcements and messages can reach the phone

We never receive fingerprints or face data. The phone checks them itself and tells the app only that the check passed; a key held in the phone’s security chip then signs the punch. No biometric template, image or measurement is sent to us or stored by us.

Government-issued identifiers and records relating to health, discipline or performance are sensitive personal information under RA 10173 and carry stricter obligations. We hold them only because a payroll and HR system cannot do its job otherwise — a BIR or SSS filing cannot be produced without the identifier it is filed under. They are visible only to users you have granted the relevant role.

To provide the service you have asked for: to run payroll, record attendance, track leave, produce your statutory reports, and let your staff see their own records.

To keep the service working and secure: diagnosing faults, preventing abuse, and keeping the audit trail that lets you see who did what.

To bill you, and to email you about your account — receipts, and notice before a trial or term ends.

We do not sell your data. We do not use it for advertising. We do not use it to train machine-learning models. There is no AI model in this product and nothing in your account is sent to one.

A short list, and it is the whole list of processors we use to run the service:

• DigitalOcean — the servers and database the service runs on, and where uploaded files are stored
• PayMongo — payment processing. They receive your billing email and the amount; they do not receive employee data
• Resend — sending the email we send you, such as receipts and renewal reminders
• Google Firebase Cloud Messaging — delivering push notifications to the Axcelink app. It receives the phone’s notification token and the notification’s title and text, nothing else

We will disclose data if the law requires it — a court order, or a lawful request from a regulator. Where we are permitted to tell you first, we will.

Your data is held on servers in Singapore. Under RA 10173 that is a cross-border transfer, and it remains protected by this policy and by our agreement with you wherever it sits — we stay accountable for it, and so do the processors listed above.

Passwords are stored hashed and are never recoverable in readable form, including by us. Traffic is encrypted in transit.

Every company’s data is isolated at the database layer, not merely filtered in the application — a query that fails to say which company it is for is rejected rather than answered.

Access inside your account is governed by the roles you assign, and every change is written to an audit log you can read.

No system is perfectly secure. If a breach affects your data we will notify you, and the National Privacy Commission where the law requires it, within the periods RA 10173 sets.

While your account is open, we keep your data so the service can work.

When you close your account, tell us and we will remove it. Some records must be retained for longer than you might expect: Philippine law requires payroll records to be kept for several years — the BIR asks ten years for books of account, DOLE three for payroll — and that obligation is yours as the employer. We therefore archive rather than immediately destroy, so that a company which closes an account does not lose records it is legally required to produce.

If you want a copy before you go, export it while the account is still active.

Under RA 10173 a data subject has the right to be informed, to object, to access, to correct, to erasure or blocking, to damages, and to data portability.

If you are an employee of a company using Axcelink, exercise these with your employer — they control your record. Much of it is visible to you already in your own profile.

If you administer an account, contact us at the address below and we will act within the periods the law sets.

You may also complain to the National Privacy Commission at privacy.gov.ph.

We use only what is needed to keep you signed in and to remember preferences such as your chosen currency and theme. There is no advertising tracking and no third-party analytics following you between sites.

Questions about this policy, or a request about your data: [email protected] · Purok 6a, San Francisco Calihan, San Pablo City Laguna, Philippines

We will update this page when the service changes. The date at the top is always the current version, and we will email account owners about anything that materially affects them.

See also our terms of use.