Data Processing Addendum

Last updated: September 2026

This addendum explains how Tiny Tindera handles the personal data you put into the app about other people, such as your customers, suppliers, and staff. It forms part of our Terms of Service and works alongside our Privacy Policy. This is a plain-language version and a starting point; please have your own counsel review it before you rely on it.

Who is who

• You are the Personal Information Controller. You decide what personal data goes into your account and why.
• Tiny Tindera is the Personal Information Processor. We process that data only to run the service for you, following your instructions and this addendum, under the Philippines Data Privacy Act of 2012 (RA 10173).

What we process, and why

We process the data your account contains (for example customer records, supplier details, staff and payroll information) for one purpose: to provide, secure, and support the service you signed up for. We do not use it for advertising and we do not sell it.

Our commitments

• We process personal data only on your documented instructions and to run the service.
• People who handle the data are bound by confidentiality.
• We keep appropriate security measures in place, described on our Security page.
• We help you respond to requests from the people whose data you hold (access, correction, deletion, objection, and portability).
• We notify you without undue delay if we become aware of a personal data breach affecting your data, and we support any notification you must make to the National Privacy Commission.

Sub-processors

To run the service we rely on a small set of reputable providers, such as cloud hosting and managed database infrastructure, transactional email, and a payment processor. They act on our instructions under their own data-protection commitments. We remain responsible to you for their handling of your data.

Where data is stored and how long

Data is hosted on reputable cloud infrastructure with encryption in transit, and each business's data is isolated from every other business. We keep it for as long as you have an account, plus any period the law requires, and then delete or anonymize it.

Deletion when you leave

When you close your account you can export your data first. After that, we delete or anonymize the personal data within a reasonable period, unless the law requires us to keep certain records for longer.

Data Protection Officer

For any question or request about how we process personal data, contact our Data Protection Officer at privacy@tinytindera.com. You may also raise concerns with the National Privacy Commission of the Philippines.