Privacy Policy

Last updated: June 11, 2026

GrabPitik is committed to protecting your personal data in accordance with Republic Act 10173 (Data Privacy Act of 2012) and its implementing rules and regulations.

1. Data We Collect

We collect your name, email address, and OAuth provider identity when you sign in. Photographers may optionally provide a bio, location, Instagram handle, and Facebook URL — these are displayed publicly on your profile only if you choose to add them. Riders also provide payment information processed exclusively by Xendit — GrabPitik does not store card numbers or banking details.

2. How We Use Your Data

Your data is used solely to operate the GrabPitik marketplace: authenticating your account, enabling photo browsing and discovery, processing photo purchases, issuing download links, and sending transactional emails. We do not sell your data to third parties.

3. Photo and Content Data

Photos uploaded by photographers are stored on Google Cloud Storage. Watermarked previews are publicly accessible to enable discovery. Full-resolution originals are accessible only to the photographer and to riders who have purchased a specific photo.

During the launch beta, rider payments are disabled. Photos are available for browsing and saving only — no purchases are processed and no rider payment data is collected.

4. Data Retention

Account data is retained for as long as your account is active. If you delete your account, personal data will be removed within 30 days except where retention is required by law (e.g., transaction records).

Photo files follow a lifecycle retention policy: draft and unpublished photos are eligible for deletion after 7 days of inactivity; unsold published photos after 45 days of archiving; sold originals are retained for 180 days after purchase to support download access.

5. Photo Removal and Takedown

If you appear in a photo on GrabPitik and wish to request its removal, email takedown@grabpitik.ph with the subject line “Takedown Request”. Include the photo or album URL, a brief reason, and your contact information. We will acknowledge within 2 business days and process valid requests within 3 business days. See our Terms of Service for the full takedown procedure.

6. Your Rights

Under RA 10173, you have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact us at privacy@grabpitik.ph.

7. Contact

Data Privacy Officer: privacy@grabpitik.ph