Privacy Policy
Effective Date: Aug 2, 2026
1. Introduction
VERIS respects your privacy and is committed to protecting personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines. This policy explains how we process information when you use our platform.
2. Legal Basis for Processing
Personal data is processed based on contractual necessity, legitimate interests, legal obligations, and, where applicable, the consent of the data subject. For organizational data, the Subscriber acts as the Personal Information Controller (PIC), and we act as the Personal Information Processor (PIP).
3. Information We Collect
From Subscribing Organizations: Organization name and logo, officer names and emails, official contact details, and payment information. From Students/Members: Student ID numbers, full names, course/year level, attendance timestamps, and payment verification data. Children's Data: If a user is below the age of majority, processing of personal data shall be subject to applicable laws and university policies.
4. Cookies and Session Management
The Service may use cookies and similar technologies to maintain user sessions, improve security, remember preferences, and analyze platform usage. This includes tokens utilized for authentication and secure state management.
5. International Data Transfers and Third-Party Services
Some information may be processed or stored in data centers located outside the Philippines through trusted cloud providers. Appropriate safeguards are implemented to ensure compliance with applicable data protection laws. We utilize the following third-party services: Firebase Authentication, Cloud Firestore, Firebase Storage, Google OAuth.
6. Data Sharing and Disclosure
Data is securely isolated. Authorized officers can only access their respective organization's data. We do not sell data. Information is only shared with trusted cloud infrastructure providers or if strictly mandated by law or formal university administration inquiries.
7. Data Breach Notification
In the event of a personal data breach affecting personal information, we will comply with applicable notification requirements under the Data Privacy Act of 2012 and the guidelines set by the National Privacy Commission (NPC).
8. Data Retention
Personal data is retained only for as long as necessary to fulfill the operational purposes of the Subscriber's contract. We are responsible for deleting student data from their respective dashboards once it is no longer required, or once the student graduated, filed a LOA or any reason from discontinuing in his studies.
9. Rights of the Data Subject
Under the Data Privacy Act of 2012, users have the right to be informed, access, object, dispute, and request the erasure or blocking of their data. Students seeking to exercise these rights regarding their organization records should first direct their requests to the respective Subscriber (the organization).
10. Contact Information
For data privacy concerns, policy inquiries, or technical assistance regarding data rights, please contact our designated privacy representative: Data Protection Officer (DPO), Email: veris-dev@vsu.edu.ph
This Privacy Policy is not final and may be revised or updated as the platform evolves or as required by applicable laws and regulations.