Privacy Policy

Kasama Space (“we”, “us”) is an online workspace where small businesses keep their contacts, sales, projects, tasks and invoices. This policy explains what personal information we handle, why, and the choices you have. We follow the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Who is responsible for what

• Your account. For the details you give us to create and use your account, we decide how they are used, so we are responsible for them.
• What a business keeps in its workspace. Contacts, leads, deals, invoices and files belong to the business that owns the workspace. That business decides what goes in and is responsible for it; we store and process it only to run the service for them. If you are a client of a business that uses Kasama Space and want to see, correct or remove your details, ask that business first. We will help them answer you.

What we collect

• Account details: your name, email address and password (stored only as a secure hash). If you sign in with Google, Google shares your name, email address and profile picture with us.
• Billing: your workspace’s plan and the payments made for it: amount, date, status and payment method (such as GCash or card), but never card numbers or account details.
• Profile and workspace details: such as your photo, job title, time zone, business name, logo, currency and tax settings, and who is on your team.
• Workspace content: whatever you and your team add, such as contacts, companies, leads, deals, projects, tasks, comments, invoices, estimates, payments, expenses, receipts and photos.
• Lead form submissions: when someone fills in a business’s enquiry form, we store their answers for that business, along with where the visit came from (the page address, the referring site and campaign tags such as utm_source). To stop spam, we keep a scrambled code made from the visitor’s network address, not the address itself.
• Technical information: sign-in cookies, and the logs our hosting and database providers keep, such as network addresses, browser type and the time of each request.

How we use it

• To create your account, sign you in and keep your workspace working.
• To send the emails the service needs, such as confirming your address, resetting your password and team invitations.
• To keep the service secure, prevent spam and abuse, and fix problems.
• To understand, in aggregate, how people use our website so we can improve it.

We do not sell personal information, and we do not use the content of your workspace for advertising.

Who we share it with

We use a small number of service providers to run Kasama Space:

• Supabase stores the database, sign-in and uploaded files, and sends account emails.
• Vercel hosts the website and app.
• Resend delivers the emails the app sends for you: invoices and estimates to your clients, team invitations, and reminders before a paid plan ends.
• Groq drafts an email message when you press “Write with AI”. Only what the draft needs is sent: the client’s first name, the document number, amounts, dates and your name. Nothing is sent unless you press the button.
• PayMongo takes payments for paid plans. You pay on PayMongo’s page; we never see or store your card, GCash or Maya details, only whether the payment went through and how it was paid.
• Product Hunt serves the review badge on our home page, so your browser loads it from their site.
• Google provides “Continue with Google” sign-in, if you choose it, and Google Tag Manager, which loads the tools that measure visits to our website.

These providers may process information outside the Philippines. They are bound by their own data protection terms, and we only give them what they need to provide their service. We may also disclose information if the law requires it.

Inside a workspace, your teammates can see the records you share with them, according to their role. If you share an invoice by link, anyone who has that link can view that invoice until you replace the link.

Cookies

We use cookies that are needed to keep you signed in. Our website may also use measurement cookies, loaded through Google Tag Manager, to count visits and see which pages are useful. You can block or delete cookies in your browser; if you block the sign-in cookies, you will not be able to sign in.

How long we keep it

We keep your account and workspace for as long as you use Kasama Space. You can delete your account, or a workspace you own, yourself in Settings → Data and account; it is removed from the live service straight away. If you ask us to delete it instead, we do so within 30 days. Copies in backups are removed as those backups expire. We may keep a limited record where the law requires it.

How we protect it

Information is encrypted in transit (HTTPS). Every workspace is kept separate in the database, so one business cannot see another’s records, and each person only sees what their role allows. No method of storage or transmission is perfectly secure, but we work to protect your information and will tell you and the National Privacy Commission about a breach when the law requires it.

Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your personal information is processed;
• access the personal information we hold about you;
• correct information that is wrong or out of date;
• object to processing, and ask us to block or erase your information;
• get a copy of your information in a format you can use elsewhere;
• be compensated for damage caused by its misuse; and
• file a complaint with the National Privacy Commission (privacy.gov.ph).

You can change most of your details yourself in your profile and workspace settings. In Settings → Data and account you can download a copy of your information, export a workspace you own or manage as spreadsheet files, and delete your account. For anything else, email hello@kasama.space. We will reply within 15 days.

Children

Kasama Space is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you by email or in the app before it takes effect.

Contact us

Questions or requests about your personal information: hello@kasama.space. See also our Terms.