Privacy Policy
Last Updated & Effective: January 15, 2026
Summary: Andi's Touch is committed to transparent and secure data handling. We do not sell your personal data. We only collect the information necessary to facilitate event inquiries, quotations, real-world bookings, and payments.
1. Introduction
Welcome to Andi's Touch Event Booking Marketplace ("Andi's Touch", "we", "us", or "our"). This Privacy Policy applies to our mobile application, web application, and API services (collectively, the "Platform"). It describes how we collect, use, process, share, and protect your personal information in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), Google Play Developer Policies, and international data protection standards.
2. Information We Collect
We collect personal information that you provide directly to us when you create an account, submit event inquiries, communicate with organizers, or initiate bookings:
- Account Identifiers: Full name, email address, contact phone number, encrypted password hash, and optional profile avatar image.
- Event & Inquiry Details: Event date, event location/city, guest count, budget preference, theme notes, and design reference photos you upload (max 5 images per inquiry).
- Transaction & Payment Metadata: Payment status, booking reference codes, currency, and invoice amounts. Note: Payment card numbers, e-wallet PINs, and sensitive bank details are processed directly by our licensed payment processor (Xendit) on secure checkout pages. We do not store raw card numbers.
- Device & Session Diagnostics: IP address, device model, operating system, and session tokens used strictly to safeguard your account against unauthorized logins.
3. How We Use Your Information
We process your data strictly for legitimate operational purposes:
- To create and manage your customer account and authentication sessions.
- To route your event inquiries to verified event organizers and return customized quotations.
- To fulfill physical event reservations, bookings, and receipt generation.
- To transmit real-time alerts regarding quotation approvals, booking confirmations, and reminders.
- To provide intelligent 24/7 AI chatbot assistance regarding packages and FAQs.
4. Third-Party Data Sharing & Processors
We do not sell, rent, or monetize your personal data. Data is shared solely with trusted service providers under confidentiality agreements to operate the Platform:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Xendit Philippines | Secure payment checkout (GCash, Maya, Cards, Bank Transfer) | Customer Name, Email, Invoice Amount, Booking Reference |
| Verified Event Organizers | Event coordination, quotation preparation, and execution | Customer Name, Contact Info, Event Date/Location, Reference Images |
| Pusher / Soketi | Real-time WebSockets notification delivery | Encrypted user channel IDs and notification payloads |
| OpenRouter / AI Services | Automated customer support chatbot | Anonymized inquiry text and package queries (no raw passwords or payment data) |
5. Data Security & Storage
We implement robust technical and organizational security measures, including:
- Encryption in Transit: 100% of data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS 1.2/1.3 / HTTPS).
- Password Hashing: Passwords are protected using modern Argon2id cryptographic hashing algorithms.
- Token Rotation: Device sessions use rotating SHA-256 hashed refresh tokens with automatic invalidation.
6. Data Retention & Account Deletion Policy
In full compliance with Google Play's User Data & Account Deletion Policy:
- In-App Account Deletion: You can permanently delete your account and associated personal data at any time directly within the mobile app under
Profile → Security → Delete Account. - Web-Based Account Deletion Portal: If you have uninstalled the app, you can request account deletion at our public web portal: https://andis-touch.online/delete-account.html.
- Data Scrubbing & Anonymization: Upon deletion, your personal details (name, email, phone, avatar, session tokens, inquiry reference photos) are immediately purged or irreversibly anonymized. Completed financial invoice records are retained in an anonymized ledger format strictly to comply with statutory accounting and tax regulations.
7. Children's Privacy (COPPA Compliance)
Our Platform is intended for individuals aged 18 and older who have legal capacity to enter into binding event service contracts. We do not knowingly collect personal information from children under 13.
8. Your Privacy Rights
Under applicable data privacy laws, you have the right to:
- Access and receive a copy of your personal data.
- Rectify inaccurate or outdated personal details.
- Withdraw consent and request account deletion.
- Object to automated processing.
9. Contact Us & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Data Protection team:
- Email: privacy@andis-touch.online / support@andis-touch.online
- Business Entity: Andi's Touch Event Booking Marketplace
- Location: Philippines