Privacy Policy

How we collect, use, and protect your information.

1. Introduction

This Privacy Policy explains how Panalo Solutions ("Panalo," "we," "us," or "our"), operator of the Panalo.ai platform, collects, uses, stores, and protects information about you when you visit our website, create an account, or use our services.

Panalo.ai is operated from Cebu, Philippines. We comply with applicable data protection laws, including the Philippine Data Privacy Act of 2012 (RA 10173), and apply equivalent protections to users in other jurisdictions where feasible.

2. What we collect

We collect different categories of information depending on how you use Panalo.ai:

Information you provide directly

• Account information: name, email address, company name (optional), password (stored as a one-way hash), and plan selection.
• Task content: task descriptions, files you upload, messages you send to AI or human agents, and any other content you submit through the platform.
• Communications with us: emails, support requests, and feedback.
• Payment information: processed by Stripe (we do not store full card numbers on our servers; Stripe handles all card data).

Information collected automatically

• Usage data: pages viewed, features used, timestamps, and interaction patterns.
• Device and browser data: IP address, user-agent, browser type, operating system.
• Cookies and similar technologies: session tokens, authentication state, and basic analytics (no third-party advertising trackers).

Information from third parties

• Google Sign-In: if you sign up via Google, we receive your name, email, and profile picture from Google. We do not request access to your contacts, calendar, drive, or other Google data.

3. How we use your information

We use the information we collect to:

• Operate and provide the Panalo.ai service — process your tasks, route them to AI or human agents, deliver results.
• Authenticate you and protect your account.
• Send you transactional emails (task updates, completion notifications, password resets, billing receipts).
• Communicate with you about your account, our service, and important changes to our terms.
• Improve our products and develop new features, including improving our AI systems (see Section 8 on AI training).
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

4. Service providers and sub-processors

We rely on trusted third-party services to deliver Panalo.ai. These providers process limited data on our behalf under contractual obligations to protect it. Many of these providers are located in the United States, which means your data may be transferred to and processed in the U.S. or other countries with different data-protection laws than your own.

5. Sharing your information

We do not sell your personal information. We share your information only:

• With our service providers listed above, under contractual obligations to use it solely to provide their service to us.
• With human agents on our team when a task requires human handling — agents see the task content and your name to fulfill the request.
• To comply with the law — for example, in response to a subpoena, court order, or other valid legal request.
• To protect rights and safety — investigating fraud, abuse, or security incidents.
• In a business transaction — if we are acquired or merge with another company, your data may transfer to the new entity, subject to this Privacy Policy or a successor with equivalent protections.
• With your consent — for any other purpose you explicitly agree to.

6. Data security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (HTTPS/TLS).
• Encryption of passwords using one-way hashing (bcrypt).
• Access controls limiting which team members can see your data.
• Regular security reviews of our systems and sub-processors.

No system is 100% secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you and the relevant authorities as required by law.

7. Data retention

We retain your information for as long as your account is active. If you close your account or request deletion:

• We delete your profile, tasks, and messages within 30 days.
• Backups may retain copies for up to 90 days before being overwritten.
• We may retain certain data longer where required by law (for example, tax records and billing history for up to 10 years under Philippine BIR regulations).
• Anonymized data (data with no identifiers connecting it to you) may be retained indefinitely.

8. AI training and model improvement

To improve our AI systems, we may use anonymized and aggregated data derived from tasks and conversations on Panalo.ai. "Anonymized" means we remove or strip identifiers such as names, emails, company details, and any content that could reasonably re-identify you.

We do not:

• Share your personal data with AI providers for them to train their general-purpose models.
• Sell your data to AI training brokers or data marketplaces.
• Use the content of your private tasks to improve AI in any identifiable way.

If you do not want even anonymized data derived from your tasks to be used for AI improvement, please contact us at the email below and we will honor your request.

9. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to update inaccurate or incomplete data.
• Deletion — ask us to delete your data, subject to retention requirements above.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain types of processing (such as anonymized AI training).
• Withdraw consent — withdraw any consent you've given us, where processing relies on consent.
• Complain — lodge a complaint with the Philippine National Privacy Commission (privacy.gov.ph) or your local data protection authority.

To exercise any of these rights, email us at jr.calanoc@panalo.ai. We respond to verified requests within 30 days.

10. Cookies and tracking

We use cookies and similar local-storage technologies for:

• Authentication — to keep you signed in (required).
• Preferences — to remember your settings (optional, but improves experience).
• Security — to detect suspicious sign-in activity and prevent bots (Cloudflare Turnstile).

We do not use third-party advertising cookies or sell your behavior data to advertisers. You can disable cookies in your browser, but some features may stop working.

11. Children's privacy

Panalo.ai is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website. The "Last updated" date at the top reflects the most recent revision. Continued use of Panalo.ai after changes take effect means you accept the updated policy.

13. Contact us

For privacy questions, data-subject requests, or any concerns about how we handle your information, please contact:

Panalo Solutions
Attn: Privacy Officer
Cebu, Philippines
Email: jr.calanoc@panalo.ai