Privacy Policy

Last updated: October 13, 2026

This policy explains what personal information I collect when you use this website, the chat, and the member account for Personal Privacy Online Support, why I collect it, who I share it with, and the choices you have. I've tried to write it in plain English.

On this page
  1. Who I am
  2. What I collect
  3. Why I use it
  4. The AI assistant
  5. Who I share it with
  6. Where it's stored
  7. How long I keep it
  8. Security
  9. Your rights
  10. Cookies
  11. Children, changes and contact

1. Who I am

I'm Aldrian Loyola, operating Personal Privacy Online Support from Makati City, Philippines. I decide why and how your personal information is used, which makes me the "personal information controller" under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). For privacy questions or requests, contact me at privacy@aldrianloyola.com or through the chat on this site.

2. What I collect

  • Account details: your name and email address, from checkout or when I set up your account.
  • Subscription details: your payment provider's subscription ID and whether it's active. I don't receive or store your full card number; the payment provider handles payment.
  • Messages and files: what you send to me, to the AI assistant, and in the website chat, including screenshots, attachments and voice messages.
  • If you chat as a visitor: the name and email you enter, and your messages.
  • If you use the free Link Check: your email address (needed to see the result), the website you checked and the result. I use your email to follow up with safety tips about online risks, and you can unsubscribe any time.
  • If you sign up for free scam alerts: your email address, where on the site you signed up, and when you pressed the confirm button. To limit misuse of the form, I also keep a scrambled code made from your internet address for 2 days (the address itself isn't stored), and the form uses a quick Cloudflare security check.
  • Technical information: device and browser type, notification settings if you turn notifications on, and usage counts (for example, how many AI messages you've sent today).
  • Website analytics: total page views, browser type and country, counted with Cloudflare Web Analytics, which doesn't use cookies (see the Cookie Notice).

3. Why I use it

  • To provide the service: reply to you, run your account, and operate the tools and AI assistant.
  • To process and manage your subscription.
  • To keep the service secure and prevent abuse.
  • To understand how the site is used and improve it.
  • To meet legal, tax and accounting obligations.

I rely on your consent, on needing to use your information to provide the service you signed up for, on legitimate interests (like security), and on legal obligations, as the Data Privacy Act allows. I don't sell your personal information.

4. The AI assistant (Alds Privacy)

Alds Privacy is an AI assistant, not a person. The messages you send to it are sent to Google's Gemini service to generate replies. I can read AI conversations to help you and to improve the service. AI can be wrong, and it can't check live websites. Please don't share passwords, one-time codes or full card numbers in any chat.

Voice messages. Members can record a voice message instead of typing. The recording is stored privately with your account and sent to Google's Gemini service to write out your words, which are saved as your message. I delete the recording itself after 30 days; the written words stay with your conversation until your account is deleted. The "Listen" button reads replies aloud using your own phone or computer's voice, so that text isn't sent anywhere else.

The Chrome extension. If you add my "Aldrian Online Safety Check" extension to Chrome, it does nothing until you press a button. When you press "Check this website" or "Check this store", it sends me the address of that one page (without anything after "?" or "#", which can hold personal details) so my tools can look for warning signs. When you right-click a link and choose "Check this link", it sends that link. The extension keeps your sign-in on your computer so you don't have to sign in each time. It doesn't read the pages you visit, doesn't collect your browsing history, and doesn't use any information for advertising. Signing out of the extension removes its sign-in.

5. Who I share it with

I use trusted service providers to run the service. They handle information only to provide their part:

  • Supabase: database, sign-in and file storage.
  • Cloudflare: website hosting, security and cookie-free visit counting.
  • Brevo: sending emails such as your login link.
  • Gumroad and PayPal: payments, receipts and subscription management. Gumroad handles the payment and any sales tax or VAT that applies. They receive the name, email and payment details needed to process your payment.
  • Google: the AI assistant (Gemini) and some Protection Suite checks.

I may also disclose information when the law requires it, or to protect rights and safety.

6. Where it's stored

I'm based in the Philippines. My service providers may store and process information in other countries, including the United States. I choose providers that use appropriate safeguards.

7. How long I keep it

  • While you're a member: your account, messages and files are kept so I can help you.
  • When you cancel: you keep access until the end of the billing period you've already paid for. After that, your account, conversation history and uploaded files are permanently deleted. My hosting provider's backups may keep a copy for a short time before they expire.
  • Uploaded files: files you send in chat are automatically deleted after 90 days.
  • Website chat enquiries (non-members): kept for as long as needed to reply and follow up, and deleted if you ask me to.
  • Free Link Check emails: kept for 12 months, then deleted. Ask me and I'll delete yours sooner.
  • Scam-alert sign-ups: kept until you unsubscribe (one click in any alert email). If you never press the confirm button, your address is deleted after 7 days.
  • Payment records: my payment provider and I may keep transaction records as long as the law requires.

8. Security

I protect your information with encrypted connections (HTTPS), sign-in controls, and database rules that stop one member from seeing another's messages. Admin access is restricted. No system is perfectly secure. If a breach affects your information, I'll tell you and the National Privacy Commission where the law requires it.

9. Your rights

Under the Data Privacy Act you have the right to be informed, to access your information, to object, to correct it, to ask for it to be erased or blocked, to data portability, and to claim damages if you've been harmed. You can also complain to the National Privacy Commission (privacy.gov.ph). To use any of these rights, contact me using the details above. If you're in the EU, UK or California, you may have additional rights; contact me and I'll honour them where they apply.

10. Cookies and similar technologies

The site doesn't use cookies for analytics or advertising. It uses your browser's local storage to keep you signed in and remember preferences. See the Cookie Notice.

11. Children, changes and contact

This service is for adults (18 and over) and isn't directed at children. I may update this policy, and I'll change the date at the top when I do. Questions? Contact privacy@aldrianloyola.com or use the chat.