Privacy Policy

bIODATA is operated by AIR/Rally Booking Services (“we”, “us”), which is responsible for the personal information you give us. bIODATA helps you write and design resumes, which contain personal information. This policy explains what we collect, why, where it goes and the choices you have, consistent with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

• Account data: your email address and an encrypted password, handled by our authentication provider (Supabase).
• Resume content: everything you type or import, your design choices and an optional profile photo. Saved to your account in a database protected by per-user access rules.
• Guest drafts: if you don’t sign in, drafts are kept only in your browser’s local storage and moved to your account when you sign in.
• Payment records: amount, status and PayMongo reference IDs. Payment happens in your own bank or e-wallet app through PayMongo’s QR Ph page; bIODATA never sees or stores those details.
• Technical data: standard server logs (IP address, time, request path) kept for security and abuse prevention. We avoid logging resume content.

Imported files

When you import a PDF or Word file, it is read inside your browser to extract text. The file itself is not uploaded to or stored by bIODATA. If you choose “Improve extraction with AI”, the extracted text is sent to our AI provider for that request only.

AI features

When you use AI review, rewriting or job matching, we send only the text needed for that task to our AI provider, Anthropic. Your name, email address, phone number and photo are excluded from review requests. Requests are not used by bIODATA to train models; the provider’s own retention terms apply to processing.

Emails

We email you to confirm your account and to reset your password. Each time you download a PDF, we also email a copy to your account’s address, so it stays in your inbox until you delete it. Word downloads are not emailed.

Who processes your data for us

• Supabase: sign-in and the database that stores your account and resumes.
• Vercel: hosts the site and creates your PDF and Word files.
• PayMongo: processes payments.
• Anthropic: AI features, as described above.
• Resend: delivers our emails, including the PDF copy.

These providers handle data only to provide their service to us. Some of them process it outside the Philippines, for example in Singapore and the United States.

Why we use your data

To provide the service you request (contract), to process your purchase (contract and legal obligations such as keeping transaction records), and to secure the service (legitimate interest). We do not sell personal data or use it for advertising.

Retention

• Resumes and versions: until you delete them or your account. Up to 30 automatic version snapshots per resume.
• Downloaded files are created on demand and sent straight to you; bIODATA does not keep a copy. The emailed PDF copy stays in your own inbox.
• Payment records: kept for accounting and tax purposes; on account deletion they are detached from your identity.

Your rights

Under the Data Privacy Act you may be informed, access, object, correct, erase or block, and port your data, and complain to the National Privacy Commission. You can edit or delete any resume yourself, and delete your whole account from the Account page. For other requests contact our Data Protection Officer.

Data Protection Officer

AIR/Rally Booking Services has designated a Data Protection Officer (DPO) who is accountable for how bIODATA handles personal data. To ask about your data, exercise your rights or raise a privacy concern, email the DPO at biodata@air-rally.com. We will tell you who the DPO is on request.

Security

Data is encrypted in transit (HTTPS). Database access is restricted per user by row-level security; payment and export records can only be written by our server. Secret keys are never sent to your browser.