Legal
Privacy Policy
Effective date: 9 August 2026 · mutabiqalerts.com
MutabiqAlerts is operated by an individual based in the Republic of the Philippines. This policy explains what personal data we collect when you use mutabiqalerts.com, why we collect it, and what we do with it. We collect only what is necessary to operate the service.
1. What Data We Collect
When you create an account
- Email address — required to create an account and to send you service emails (password reset, account notifications)
- Password — hashed and stored securely by our authentication provider (Supabase). We never store or see your password in plain text.
- Name — optional. Only if you choose to provide it in your profile.
- Account creation timestamp
- Subscription tier — which content plan your account is associated with
When you submit a testimonial
- Name, job title, company, and message — voluntarily submitted through the testimonial form
- Submissions are held privately and require manual approval before any public display
When you subscribe to our newsletter
- Email address — passed to our newsletter provider (Resend) solely for sending the digest
Data we do NOT collect
- Payment card numbers or bank details — if/when payment is activated, all card handling is done by a third-party payment processor; we never see your card data
- Government-issued identity documents
- Precise location data
- Device fingerprints or tracking pixels
2. Why We Collect It (Legal Basis)
- Account management and service delivery — your email and password are necessary to authenticate you and deliver the service you signed up for
- Service communications — transactional emails (password reset, account notifications) sent because they are necessary to maintain your account
- Newsletter — only if you explicitly opt in via the newsletter form; you can unsubscribe at any time
- Testimonials — only with your explicit voluntary submission
3. Third-Party Services
We rely on the following external services to operate MutabiqAlerts. Each has its own privacy policy linked below.
Supabase
Authentication & database
Stores your account data (email, hashed password, name, tier) and authenticates your sessions. Servers are in the US (AWS us-east-1) by default.
supabase.com/privacy
Resend
Transactional email
Used to send password-reset and authentication emails, and — if you subscribe to the MutabiqAlerts newsletter — the weekly digest email. You can unsubscribe from the newsletter at any time via the link in any digest email.
resend.com/legal/privacy-policy
Hosts the mutabiqalerts.com website. Netlify receives standard web request data including IP addresses and browser information when you load pages.
netlify.com/privacy
Our pages load fonts (DM Serif Display, DM Sans) from Google's font CDN. This causes your browser to make a request to Google's servers, which may log your IP address and browser information.
policies.google.com/privacy
The Supabase JavaScript library is loaded from the jsDelivr CDN. This causes your browser to connect to jsDelivr's servers when you visit the site.
jsdelivr.com/privacy-policy
We do not sell your data to any third party. We do not use your data for advertising purposes.
4. Cookies and Local Storage
We use browser localStorage (not tracking cookies) for two purposes:
- Session persistence — Supabase stores your authentication session token in localStorage so you remain logged in between page visits
- Dismissed banners — we remember if you have dismissed a site-wide notice so it does not reappear
We do not use third-party advertising cookies or cross-site tracking cookies.
5. Data Retention
- Account data — retained while your account is active. If you request deletion, we will delete your account and personal data within 30 days, subject to any legal retention obligations.
- Testimonials — retained until you request removal or we remove them at our discretion.
- Newsletter subscriptions — managed via Resend; you can unsubscribe at any time via the link in any newsletter email.
6. Your Rights
You may contact us at any time to:
- Access the personal data we hold about you
- Correct inaccurate data (your email can be updated in your account settings)
- Delete your account and personal data
- Withdraw consent for newsletter subscription (via the unsubscribe link)
To exercise these rights, email [email protected]. We will respond within 30 days.
7. Data Security
Passwords are hashed and never stored in plain text. Authentication tokens are stored in browser localStorage and transmitted over HTTPS. Access to the database is restricted by row-level security policies. We do not have access to your password.
No method of electronic storage or transmission is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
8. Children
MutabiqAlerts is not directed at children under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, please contact us and we will remove the account.
9. International Transfers
MutabiqAlerts is operated from the Philippines. When you use the service, your data is processed by our third-party providers (primarily Supabase, which uses AWS servers in the United States). By using MutabiqAlerts, you acknowledge that your data may be transferred to and processed in countries other than your own.
10. Governing Law
This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173). We are committed to handling your personal data in accordance with applicable Philippine privacy law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We will notify registered users by email if changes are material.
Questions about privacy? Contact us at [email protected]