Privacy Policy
Effective date: November 6, 2026 · Last updated: November 12, 2026
1. Who we are and what this policy covers
This Privacy Policy describes how rvdc.online (the "App"), the business management system of RVDC Ref and Aircon ("RVDC", "we", "us", "our"), collects, uses, stores, shares, and deletes information. It applies to the App at https://www.rvdc.online and https://api.rvdc.online, and to our Facebook Page.
The App is an internal tool used by RVDC's owners, managers, and employees to manage aircon services, sales, inventory, clients, attendance, and payroll. It is not offered to the general public.
2. Information we collect
- Client information: name, phone number, address, service and installation history, payments, and warranty records.
- Employee information: account details (name, username, role), attendance and leave records, and the payroll information needed to pay staff.
- Service request form: when you send a request from our booking page, we collect the details you enter (name, mobile number, optional email, address, the service and appliance, preferred schedule, and whether you have been our client before) so our staff can contact you and schedule the job. To find your existing client record, our staff may compare your name and number with our records; the form never shows you anyone's records. To prevent spam we keep a one-way (hashed) version of your IP address and your browser type. Requests that don't push through are kept so we don't contact you twice; ask us to delete yours at any time.
- Facebook messages: when someone messages our Facebook Page, we receive their Facebook name, profile ID, and message content to reply to them.
- Technical data: login session cookies and basic server logs (IP address, time, pages requested) used to keep the App secure and working.
- Passkeys: if you choose to sign in with a fingerprint, face, or device PIN, we store only the passkey's public key, a device name, and when it was last used. Your fingerprint or face data never leaves your device and is never sent to us. You can remove a passkey at any time in your Profile.
- Google user data: described in detail in section 4.
3. How we use information
- To provide, schedule, and record our air conditioning and refrigeration services.
- To record sales, payments, expenses, and remittances, and to produce business reports.
- To manage staff attendance and payroll.
- To reply to inquiries and send service updates, reminders, and warranty information.
- To keep the App secure, prevent misuse, and fix problems.
We do not sell personal information and we do not use it for advertising.
4. Google user data
An RVDC administrator can connect the company's own Google account to the App (Settings → Google Sheets → "Connect Google account") so the App can keep RVDC's daily sales records in Google Sheets. This section explains exactly what the App does with data from that Google account.
4.1 Data the App accesses
The App requests only these Google permissions (OAuth scopes):
- openid and email (
userinfo.email): the Google account's email address. https://www.googleapis.com/auth/drive.file: access only to Google Drive files that the App itself creates. The App cannot see, read, change, or delete any other files in the user's Google Drive.
The App does not access Gmail, contacts, calendar, photos, or any other Google data.
4.2 How the App uses Google user data
- The email address is shown in the App's settings so administrators can see which Google account is connected.
- The Drive access is used only to: (a) create a folder named "RVDC Sales Sheets"; (b) create one spreadsheet per stall per month in that folder; (c) share those spreadsheets with RVDC's own service account, which writes the daily sales, expense, and remittance figures into them; and (d) share them with the email addresses an RVDC administrator enters in the App's sharing settings, as an editor or as view-only, and remove view-only access when an address is removed.
Google user data is used only to provide this feature to RVDC. It is not used for advertising, not sold, not used to build user profiles, and not used to develop, improve, or train artificial intelligence or machine-learning models.
4.3 How Google user data is stored and protected
- The App stores only the connected account's email address, an OAuth refresh token, and the ID of the "RVDC Sales Sheets" folder, in RVDC's private database on our own server.
- The refresh token is never sent to web browsers or shown in the App, and is available only to the App's server.
- All connections to the App and to Google use encrypted HTTPS. Access to the server and database is limited to RVDC's authorized administrators.
- The spreadsheets themselves are stored in the connected Google account's own Google Drive.
4.4 Sharing and disclosure of Google user data
We do not sell, transfer, or disclose Google user data to third parties. The only sharing the App performs is on the spreadsheets it created: giving RVDC's own Google service account edit access so it can update them, and giving access to the people an RVDC administrator chooses in the App's sharing settings (one editor and any number of view-only addresses). We would disclose data only if required by law.
4.5 Retention and deletion of Google user data
- The email address, refresh token, and folder ID are kept only while the Google account is connected.
- When an administrator clicks "Disconnect", the App revokes its access with Google and immediately deletes the stored email address, refresh token, and folder ID.
- Access can also be removed at any time from the Google Account at myaccount.google.com/permissions. The App then stops creating spreadsheets.
- Spreadsheets already created stay in the account owner's Google Drive, under their control; they can delete them there at any time. To ask us to delete any other data, contact us (section 10).
4.6 Limited Use disclosure
rvdc.online's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How long we keep information
We keep business records (clients, services, sales, and payments) for as long as needed to serve clients and meet tax and legal requirements. Payroll records are kept for three years and then archived. Read notifications are deleted after 7 days. You can ask us to delete your personal information, unless the law requires us to keep it.
7. How we protect information
The App requires a login for every user, gives each role access only to what it needs, uses encrypted HTTPS connections, and keeps backups on our own server. No system is perfectly secure, but we work to protect information from unauthorized access, change, disclosure, or loss.
8. Your choices and rights
You can ask to see, correct, or delete the personal information we hold about you, and you can withdraw consent where processing is based on consent. These rights follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
9. Children
The App is a business tool and is not intended for children under 18.
10. Contact us
For questions about this Privacy Policy or to exercise your rights, contact RVDC Ref and Aircon through our Facebook Page or visit our office.
11. Changes to this policy
We may update this policy. The "Last updated" date at the top shows the latest version. If we change how the App accesses, uses, stores, or shares Google user data, we will update this policy and notify administrators in the App before the change takes effect, and ask for the Google account to be reconnected if new permissions are needed. This policy is always available from the App's sign-in page and from Help → Privacy Policy inside the App. See also our Terms of Service.