Privacy Policy

PayBridge (“we”, “us”, or “our”) provides payroll-linked cash advance services for participating employers and their employees. This policy explains how personal information is handled when you visit our website, use our mobile app or employer portal, request a cash advance, or contact us.

We handle personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and applicable National Privacy Commission requirements. Your employer also has responsibilities for the employment and payroll records it maintains. This policy does not replace your employer's own privacy notice.

The information we handle depends on your role and the services you use. It may include:

• Identity and contact information: your name, email address, phone number, address, and profile photo, where provided.
• Employment and payroll information: your employer, employee identifier, department, position, hire date, salary or wage rate, payroll dates, days worked, absences, earnings, deductions, and net pay supplied by your employer.
• Cash advance and payment records: requested amounts, repayment arrangements, authorizations, approval decisions, disbursement details, balances, payment references, and transaction history.
• Payout information: your selected bank or e-wallet, account name, account number, and information needed to process or verify a payment.
• Account and security information: account identifiers, user role, password hashes, verification and session records, account activity, and security or integration logs.
• Documents and communications: receipts, payment proofs, other files you or an authorized user submits, and the contents of support requests or contact form messages.
• Technical information: network, browser, or device information made available when you access the service or use a third-party security feature.

Information comes from you, your employer and its authorized payroll systems, payment providers, and your interactions with PayBridge. Please provide only information needed for the relevant request, and avoid putting unrelated sensitive details in messages or attachments.

We use personal information to:

• Create and manage accounts, verify access, and connect employees to their participating employer.
• Receive payroll updates, calculate available cash advance amounts, and assess requests against applicable employer and platform rules.
• Manage approvals, disburse funds, administer payroll deductions or other repayments, reconcile payments, and maintain billing records.
• Send account verification messages, transaction updates, payment reminders, and other service communications.
• Respond to inquiries, correct records, investigate errors, prevent misuse, and maintain the reliability and security of the service.
• Meet applicable legal obligations and establish, exercise, or defend legal claims.

Some information is necessary to provide the service. If it is not provided or cannot be verified, we may be unable to create an account, assess a request, or complete a payment.

Depending on the purpose, processing may be based on your consent, steps you request before entering an agreement, performance of an agreement, a legal obligation, or legitimate interests such as securing the service and preventing fraud, balanced against your rights. Sensitive personal information requires an applicable legal basis under the rules for that information.

Where we rely on consent, you can withdraw it by contacting us. Withdrawal does not undo earlier lawful processing or prevent processing that has another lawful basis. This notice explains our practices; reading it or visiting the website does not, by itself, give consent for every use of your information.

PayBridge uses rules to determine available amounts and whether a cash advance request can proceed. These may consider payroll or salary information, employer-set limits, employment tenure, existing cash advances, repayment status, and the timing of earlier requests.

When your employer enables automatic approval rules, a qualifying request may be approved automatically based on its amount or your employment tenure. These checks can affect whether a request is available or approved. You can contact us to ask about a decision or request a review, and contact your employer to correct the payroll or employment information it supplies.

Personal information may be disclosed, as needed for the purposes described in this policy, to:

• Your employer and its authorized representatives, including HR, payroll, finance, or designated approvers, to administer participation, requests, and repayments.
• Authorized PayBridge personnel, for administration, support, payment operations, and security.
• Payment service providers, banks, and e-wallet providers, including Xendit, to process payouts, payments, verification, and reconciliation. See Xendit's privacy policy.
• Service providers, for hosting, database and file storage, email delivery, and security features, including Google reCAPTCHA on our contact form.
• Public authorities or professional advisers, where disclosure is required by law, necessary for a lawful investigation, or needed to establish or defend a legal claim.

Access is limited according to the person's role and the purpose of the disclosure. Your employer and payment providers may also process information under their own responsibilities and privacy notices.

The website uses session cookies to keep you signed in and protect account access. The mobile app uses protected device storage for sign-in session information. Signing out clears the local session used by that device. Blocking or deleting cookies may prevent sign-in features from working correctly.

Our contact form uses Google reCAPTCHA to help prevent automated abuse. This feature may use cookies and process device, network, and interaction information. Google's Privacy Policy and Terms of Service apply to that feature. You can also contact us directly by email.

We use service providers to host the platform, store records and uploaded files, and deliver service communications. Depending on the provider, information may be stored or processed outside the Philippines.

Applicable privacy responsibilities continue when information is transferred. We require appropriate safeguards for processing on our behalf and limit transfers to the purposes described in this policy. Contact us if you need more information about the providers or safeguards relevant to your information.

Retention depends on the type of record and why it is needed. Account, employment, and payroll information may be needed while you or your employer use PayBridge and while related cash advances are administered. Transaction and billing records may need to be retained for accounting, legal obligations, disputes, or legal claims. Support and security records are kept for the purposes of resolving inquiries, protecting the service, and investigating incidents.

Closing an account or uninstalling the app does not automatically erase all records. Some information may still be required for unsettled transactions or other lawful retention purposes. Information should not be kept longer than necessary for those purposes. You can ask us about the retention of a particular record or request deletion through the contact details below.

We use safeguards including account authentication, password hashing, role and company access controls, expiring sessions, and time-limited links for protected document access. These measures help limit access to authorized users and support the security of personal information.

Keep your sign-in details private, sign out on shared devices, and contact us promptly if you suspect unauthorized access. Do not send passwords or verification codes in a privacy request. If a personal data breach requires notification, we will notify affected individuals and the relevant authority as required by applicable law.

Subject to applicable conditions and exceptions, Philippine privacy law allows you to:

• Understand how your information is handled and request access to information held about you.
• Ask for inaccurate or incomplete information to be corrected.
• Object to certain processing or withdraw consent where consent is the basis for processing.
• Request erasure or blocking when the legal conditions for doing so are met.
• Receive an electronic copy in a usable format where the right to data portability applies.
• Seek compensation where available under law and raise a complaint with the National Privacy Commission.

Read more about your privacy rights. To make a request, email us using your registered address where possible and explain the information or action you are asking about. We may need proportionate information to verify your identity or authority before disclosing or changing records. If a request cannot be fulfilled, we will explain the reason and any applicable limitations.

PayBridge is designed for workplace users and is not directed at children. If you believe a child's information has been submitted inappropriately, contact us so we can assess the circumstances and take appropriate action.

We may update this policy as the service or applicable requirements change. The date at the top identifies the latest revision. Material changes will be brought to your attention through an appropriate channel, such as the website, app, or service email. Where a new use requires your consent, we will request it before that use begins.

For privacy questions, access or correction requests, account deletion requests, or concerns about how your information is handled, email info@dxform.ph with the subject “Privacy request”. Include enough detail for us to identify the account and understand your request, but avoid sending passwords, verification codes, or full bank account details.

You may also raise a concern with the National Privacy Commission using its official complaint process.