Privacy Policy

1. Who We Are

BarangayAI is a social enterprise dedicated to bringing artificial intelligence education, tools, and digital services to Filipino barangays and communities. We operate the BarangayAI platform, website (barangayai.com), and Facebook Messenger chatbot service.

Organization: BarangayAI

Founder: Ian Flores

Operational Base: Philippines and Canada

Contact Email: info@barangayai.com

This Privacy Policy governs how BarangayAI collects, uses, stores, and protects personal data in connection with all our services, including the BarangayAI website, the BarangayAI Operating System (OS) platform, and the BarangayAI Facebook Messenger chatbot.

2. What Data We Collect

We collect only the minimum data necessary to provide our services. The following table summarizes the data we collect and why:

3. How We Collect Data

We collect data through the following means:

• Direct Interaction: When you send messages to the BarangayAI chatbot through our website or Facebook Messenger
• Form Submissions: When you voluntarily submit a contact form, partnership inquiry, or support inquiry on our website
• Platform Use: When you access and use the BarangayAI OS platform as a registered user or community participant
• Automatic Technical Collection: Standard web server logs and analytics tools that collect device and usage information automatically when you visit our website

We do not purchase data from third parties, scrape data from social media, or collect data through any deceptive means.

4. How We Use Your Data

Your data is used exclusively for the following purposes:

• Service Delivery: To generate AI responses to your messages and provide the core functionality of the BarangayAI chatbot and platform
• Service Improvement: To identify how the platform can better serve Filipino communities — improving response quality, fixing errors, and adding relevant features
• Communication: To respond to inquiries submitted through our website contact and partnership forms
• Aggregated Analytics: To understand overall platform usage patterns in an anonymized, aggregate form — no individual user data is analyzed for this purpose
• Legal Compliance: To comply with applicable Philippine law, including the Data Privacy Act of 2012 (RA 10173), when required

5. How Data is Stored and Protected

BarangayAI takes the security of your data seriously. We implement the following protections:

• Encryption in Transit: All data transmitted between your device and BarangayAI servers is encrypted using HTTPS/TLS protocols
• Access Controls: Personal data is accessible only to authorized BarangayAI staff who need it to operate and improve our services
• Secure Infrastructure: We use reputable cloud infrastructure providers with industry-standard security certifications
• No Unnecessary Data Retention: We do not store data longer than necessary for service delivery and legal compliance (see Section 6)
• Regular Security Reviews: We conduct regular reviews of our data handling practices and security measures

While we take all reasonable measures to protect your data, no internet transmission or storage system is 100% secure. If you believe your data has been compromised, contact us immediately at info@barangayai.com.

6. Data Retention

We retain different types of data for different periods based on service needs and legal requirements:

You may request earlier deletion of your data at any time. See Section 11 for how to submit a deletion request.

7. Third Parties — Anthropic AI Processing

The BarangayAI chatbot and AI-powered features are powered by Anthropic's Claude AI API. This means that messages you send to BarangayAI are transmitted to Anthropic's servers to generate AI responses.

Key points about Anthropic's data handling:

• Messages sent through the API are processed to generate responses
• Anthropic maintains its own privacy and security standards for API usage
• Please review Anthropic's Privacy Policy at anthropic.com/privacy for full details on how they handle API data

Aside from Anthropic (for AI processing) and our cloud infrastructure provider (for hosting), BarangayAI does not share your personal data with any other third parties, except when required by Philippine law.

8. Facebook Messenger Chatbot

BarangayAI operates a chatbot accessible through Facebook Messenger. When you interact with the BarangayAI Messenger chatbot, the following applies:

• Your Facebook User ID is shared with BarangayAI by Facebook as part of normal Messenger API functionality
• Your message text is received by BarangayAI and processed through Anthropic's AI API to generate a response
• We do not receive your Facebook profile information (name, photo, friends list, timeline) unless you explicitly share it in a message
• Your interactions with the BarangayAI Messenger chatbot are also subject to Facebook's Privacy Policy and Terms of Service, which govern how Facebook handles your data on their platform

You can stop the BarangayAI Messenger chatbot from receiving your messages at any time by blocking the BarangayAI page in Facebook Messenger.

9. Data We Do NOT Collect or Sell

BarangayAI explicitly commits to the following:

• ✗ We do not sell your personal data to any third party under any circumstances
• ✗ We do not share your data with advertisers or marketing companies
• ✗ We do not collect sensitive personal information such as government ID numbers, financial account details, medical records, or biometric data
• ✗ We do not track your activity across other websites or apps
• ✗ We do not use your data to build advertising profiles
• ✗ We do not disclose your data to law enforcement except when legally compelled to do so under Philippine law

10. Your Rights Under Philippine Law

As a user of BarangayAI, you have the following rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Right to be Informed: You have the right to know what personal data we collect, why we collect it, and how it is used — which this policy provides
• Right to Access: You have the right to request a copy of the personal data we hold about you
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data
• Right to Erasure / Right to be Forgotten: You have the right to request deletion of your personal data, subject to legal retention requirements
• Right to Object: You have the right to object to the processing of your personal data for certain purposes
• Right to Data Portability: You have the right to request your personal data in a structured, commonly used, machine-readable format
• Right to Damages: You have the right to claim compensation for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph

To exercise any of these rights, contact us at info@barangayai.com. We will respond within 15 business days.

11. Data Deletion Requests

You have the right to request deletion of your personal data held by BarangayAI at any time. To submit a deletion request:

1. Send an email to info@barangayai.com with the subject line: "Data Deletion Request"
2. Include: your name (if provided), the email address or Facebook account associated with your use of BarangayAI, and a brief description of what data you want deleted
3. We will confirm receipt of your request within 5 business days
4. We will complete the deletion and notify you within 30 business days

Deletion of your data may result in loss of access to BarangayAI platform features that depend on that data.

12. Cookies and Tracking

The BarangayAI website uses the following types of cookies and tracking technologies:

• Essential Cookies: Required for the website to function correctly (e.g., session management). These cannot be disabled.
• Analytics Cookies: Used to understand how visitors use our website in aggregate. We use privacy-respecting analytics that do not track individuals across sites.
• No Advertising Cookies: We do not use cookies for advertising or cross-site tracking.

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

13. Children's Privacy

BarangayAI's services are designed for general community use, including educational programs for students. However:

• Children under 18 years of age should use BarangayAI services under the supervision of a parent, guardian, or teacher
• We do not knowingly collect personal data directly from children under 13 years of age without parental consent
• If you believe we have inadvertently collected data from a child under 13, please contact us at info@barangayai.com and we will delete the data promptly
• In barangay settings where minors participate in BarangayAI programs, consent and supervision protocols are established with the barangay LGU

14. Changes to This Policy

BarangayAI may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify users through the platform, the chatbot, or email where contact information is available
• Continued use of BarangayAI services after the effective date of changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically. The most current version is always available at barangayai.com/privacy.html.

15. Contact Information for Privacy Inquiries

For all privacy-related inquiries, requests, or concerns, contact BarangayAI's designated Privacy Contact:

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including:

• Republic Act No. 10173 — Data Privacy Act of 2012
• IRR of RA 10173 — Implementing Rules and Regulations
• NPC Circulars and Advisories — Guidelines issued by the National Privacy Commission

Any disputes arising from this Privacy Policy shall be subject to the jurisdiction of Philippine courts and the National Privacy Commission.