Privacy Notice

This notice explains how Apollos Table collects, uses, shares and protects personal data, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

Effective December 1, 2026

1. Who we are

Apollos Table (apollostable.app) is operated by Apollos Software Development Services, a sole proprietorship registered with the Department of Trade and Industry, based in the Philippines ("Apollos Table", "we", "us").

For anything about your personal data, contact our Data Protection Officer at [email protected].

2. Two roles: our own data, and data we handle for cafés

• As controller. We decide how personal data is used when you visit our website, request a demo or free trial, join our launch list, or sign in to manage a café on Apollos Table.
• As processor. When a café, restaurant or co-working space uses Apollos Table to take orders or bookings from its own customers, that business is the controller of its customers' data. We process that data only on the business's instructions, to provide the service. If you are a customer of a café that uses Apollos Table, please also read that café's own privacy notice, and contact the café first about your data.

3. What we collect

When you fill in a form on our website (book a demo, start a free trial, or join the launch list):

• your name, business name, type of business and number of branches
• your email address and, if you give it, your mobile number
• your preferred demo date and time, which page you were on, and your language choice

When you sign in as a café owner, staff member or administrator: your email address, your name if given, the café you belong to and your role, and the times you signed in. We send one-time sign-in links instead of using passwords.

About the café you set up: business details such as name, address, phone, email, website, social media pages and opening hours.

Automatically, for security: to stop abuse of our forms, we keep a one-way scrambled ("hashed") version of your internet (IP) address together with the time of the request. We do not store your IP address itself for this purpose. Our hosting provider also processes standard technical data (such as IP address and browser type) to deliver and protect the website.

We do not ask for, and ask you not to send us, sensitive personal information such as government ID numbers, health information or bank or card details.

4. Why we use it, and on what basis

• To respond to your request: to confirm your demo, set up your free trial, or tell you when Apollos Table launches for your type of business. Basis: to take steps you asked for before entering into a contract, and your consent when you submit the form.
• To provide the service: to create your café's workspace, let you sign in, and send service emails such as sign-in links, confirmations, reminders and follow-ups about your request. Basis: performance of our contract with you.
• To keep things secure: to prevent spam and abuse, secure sign-ins, and fix problems. Basis: our legitimate interests in running a safe service.
• To meet legal obligations, such as tax and accounting rules, or valid orders from authorities. Basis: legal obligation.

We do not sell personal data, and we do not use it for third-party advertising.

5. Who we share it with

We share personal data only with service providers that help us run Apollos Table, under agreements that require them to protect it:

• Cloudflare, Inc.: website hosting, database, security and email forwarding.
• Resend: sending our emails (such as confirmations and sign-in links).
• Google: the website loads fonts from Google Fonts, which means your browser connects to Google's servers.

When you follow our links to Facebook or Instagram, those platforms' own privacy policies apply.

We may also disclose data when required by law, or to protect the rights, safety or property of our users, the public or Apollos Table.

6. Transfers outside the Philippines

Our service providers may store or process data on servers outside the Philippines, including in Japan, the United States and other countries where they operate. We choose providers that apply appropriate security measures, and we remain responsible for your data under Philippine law.

7. How long we keep it

• Demo, trial and launch-list requests: for up to two (2) years after our last contact with you, unless you become a customer or ask us to delete them sooner.
• Café workspace and account data: for as long as the café uses Apollos Table, and up to ninety (90) days after the account is closed, so the café can download its data. After that it is deleted, except what we must keep by law.
• Sign-in links expire after 15 minutes (or 3 days for invitations) and are deleted soon after. Sign-in sessions end after 14 to 30 days.
• Records required by law, such as invoices, for the period the law requires.

8. How we protect it

We use encrypted connections (HTTPS) for the whole website, store sign-in links and session codes only in scrambled (hashed) form, use secure cookies that scripts cannot read, limit access to people who need it, and require two-factor authentication on the accounts we use to run the service. No system is perfectly secure. If a personal data breach occurs that is likely to put you at real risk of serious harm, we will notify you and the National Privacy Commission as required by law, generally within seventy-two (72) hours of becoming aware of it.

9. Cookies and similar technologies

We do not use advertising or analytics cookies. We use only:

• Sign-in cookies that keep café owners, staff and administrators signed in. These are necessary for the service.
• Browser storage that remembers your language and sound preferences on our website. This stays on your device.

10. Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your personal data is processed
• access your personal data
• object to processing, including direct marketing
• correct inaccurate or incomplete data
• have your data erased or blocked when it is no longer needed or was unlawfully processed
• data portability: get a copy in a commonly used electronic format
• withdraw consent at any time, without affecting processing already done
• claim damages for inaccurate, unlawfully obtained or misused data
• file a complaint with the National Privacy Commission (privacy.gov.ph)

To use any of these rights, email our Data Protection Officer at [email protected]. We may ask you to confirm your identity first, and we aim to reply within fifteen (15) working days.

11. Children

Apollos Table is a service for businesses. It is not directed to children, and we do not knowingly collect personal data from anyone under eighteen (18) through our website forms.

12. Changes to this notice

We may update this notice as our service changes. We will post the new version on this page with a new effective date, and tell café owners by email about important changes.

13. Contact us

Data Protection Officer
Apollos Software Development Services
Philippines
[email protected]