Zentro Pay ("we", "us") provides payroll, timekeeping and HR software for companies operating in the Philippines. Zentro Pay is operated by [LEGAL ENTITY NAME], with registered address at [REGISTERED ADDRESS].
For questions about this policy or your personal data, contact our Data Protection Officer at [DPO EMAIL].
This distinction matters and affects your rights:
If you are an employee whose data appears in Zentro Pay, direct requests about your data to your employer in the first instance. We will assist them in responding.
| Data | Why |
|---|---|
| Name, email address, profile picture | To create and secure your account |
| Company name, TIN, industry, address | To set up your workspace and generate compliant documents |
| Billing details | To process subscription payments |
| Data | Why |
|---|---|
| Name, employee number, position, department | Payroll and HR records |
| TIN, SSS, PhilHealth and Pag-IBIG numbers | Statutory contributions and BIR reporting |
| Salary, allowances, deductions, loans | Payroll computation |
| Attendance timestamps and timezone | Hours worked, overtime, night differential |
| City-level location at clock-in | To establish country of work for compliance |
| Optional selfie at clock-in | Attendance verification, only where the employer enables it |
| Bank, GCash or Wise details | To disburse pay |
Government identification numbers (TIN, SSS, PhilHealth, Pag-IBIG) are sensitive personal information under the Data Privacy Act. We process them solely to compute and report statutory contributions and taxes as required by law, and we apply access controls so that only authorised personnel within the employer's own workspace can view them.
Each customer company occupies a separate, access-controlled workspace. Database-level row security rules enforce that no user can read data belonging to another company. These rules are enforced by the database itself rather than by application code alone, and are covered by automated tests.
We do not sell personal data. We share it only with:
Some processing may occur outside the Philippines. Where it does, we apply appropriate safeguards consistent with the Data Privacy Act.
Payroll records are retained for the periods required by Philippine tax and labour law — generally ten (10) years for BIR purposes. Employers may request earlier deletion of data not subject to a retention requirement. On account closure we delete or anonymise data once applicable retention periods lapse.
Under the Data Privacy Act you have the right to:
Exercise these rights by contacting [DPO EMAIL]. We respond within the period the law allows.
No system is perfectly secure. In the event of a breach affecting sensitive personal information, we will notify the National Privacy Commission and affected individuals as required by law.
If you sign in with Google or Microsoft we receive only your name, email address and profile picture — enough to identify your account. We do not receive access to your mailbox, files, contacts or calendar.
We use strictly necessary cookies and similar storage to keep you signed in and to secure the service. We do not use advertising cookies or third-party tracking.
Zentro Pay is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 18 other than employment records lawfully provided by an employer.
We may update this policy. Material changes will be notified by email or in-product notice before taking effect.
Data Protection Officer
[DPO NAME]
[DPO EMAIL]
[ADDRESS]
You may also complain to the National Privacy Commission — privacy.gov.ph.