1. Introduction
Carpinoy Logistics ("we", "us", "our") operates a trucking and logistics service in the Philippines. This Privacy Policy explains how we collect, use, store, and protect information when you interact with us through our website (www.carpinoylogistics.com), our Facebook Page, Facebook Messenger chatbot ("Brad AI"), and our subcontractor (subcon) dashboard.
By using any of our services or messaging our Facebook Page, you agree to the terms described in this policy.
2. Information We Collect
A. Information You Provide
Name, contact details, and other information you share via Messenger or our dashboard
Vehicle details (plate number, vehicle type) if you are a subcon operator
Messages and inquiries you send to our Facebook Page or chatbot
Documents submitted for accreditation (valid IDs, business permits, vehicle registration)
Visitor Profile information: Visitor Login ID, PIN (stored in hashed form), name, address, mobile number, email, optional Viber number for client updates, optional Facebook profile link (URL you paste — we do not use Facebook Login to access your account), and car loan status or reservation proofs you upload through your signed-in session
Exclusive Carpinoy Trip Rates Matrix access: when you apply to view our confidential trip rates page, we collect your real name, Viber number, and Facebook/Messenger contact link for Sales identity verification; we log each disclosure acceptance when you view the matrix
Car loan or business package application details you submit, such as contact details, preferred unit, employment/business information, and uploaded reservation proof or supporting documents. Sensitive financial, tax, co-maker, reference, and banking information should only be requested when needed for later bank/dealer/compliance review.
B. Automatically Collected Information
Facebook profile information (name, profile picture) as provided by the Messenger Platform
Chat history and conversation logs with our AI assistant
Device and browser information when accessing our website or dashboard
Usage data such as pages visited, features used, and interaction timestamps
C. Information from Third Parties
Data from Meta/Facebook as part of the Messenger Platform integration
Trip and billing data from our logistics partners and client accounts
3. How We Use Your Information
We use the information we collect to:
Respond to your inquiries and provide customer support via our AI chatbot and human agents
Process and manage subcon operations including trip tracking, billing, and payouts
Manage subcontractor accreditation and compliance
Improve our services, AI responses, and operational efficiency
Send important updates about rates, policies, schedules, billing, and client follow-ups (including via Viber or Messenger when you provide those contact details)
Verify visitors who request access to the Exclusive Carpinoy Trip Rates Matrix and maintain an audit log of disclosure acceptances
Maintain records for accounting, auditing, and legal compliance
Personalize your experience by remembering your preferences and past interactions
Process visitor profile, car loan, reservation proof, and document access requests through secure server-side functions with ownership/session checks
4. AI Chatbot ("Brad AI")
Our Facebook Page, website, and subcon dashboard use an AI-powered chatbot named "Brad AI" to assist with inquiries. When you interact with Brad AI:
Your messages are processed to generate relevant responses
Conversation history may be stored to provide context in follow-up messages
Certain information you share (such as your name, area, vehicle details) may be saved to personalize future interactions
Brad AI uses a knowledge base maintained by Carpinoy Logistics management to provide accurate information
Brad AI is designed to assist with Carpinoy Logistics-related inquiries only. It does not provide personal, medical, legal, or financial advice.
5. Data Storage and Security
Your data is stored securely using industry-standard cloud infrastructure (Supabase). We implement the following measures to protect your information:
Encrypted data transmission (HTTPS/TLS)
Role-based access controls — only authorized personnel can access sensitive data
Private storage buckets and short-lived signed URLs for sensitive uploaded files when document access is required
Server-side validation for visitor PIN and car loan status access; sensitive application tables are not intended for public browser-side database access
Audit logging for sensitive data access, document access, uploads, profile edits, deletes, and associate-related actions where supported by our systems
Regular security reviews and updates
Separate data access levels for subcon operators, admins, Independent Referral Associates, and management
While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure.
6. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:
With our logistics partners and client accounts — to fulfill operational requirements
With service providers — cloud hosting (Supabase), AI processing (OpenAI), strictly for service delivery
When required by law — to comply with legal obligations, court orders, or government regulations in the Philippines
To protect our rights — to enforce our terms, prevent fraud, or protect safety
7. Data Retention
Chat conversations: Retained for operational support and may be periodically archived
Trip and billing records: Retained for a minimum of 3 years for accounting and audit purposes
Accreditation documents: Retained for the duration of the subcon relationship plus 1 year
AI memory data: Retained to improve service quality; can be deleted upon request
8. Your Rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the right to:
Access — Request a copy of the personal data we hold about you
Correction — Request correction of inaccurate or incomplete data
Erasure — Request deletion of your personal data, subject to legal retention requirements
Object — Object to the processing of your personal data in certain circumstances
Data Portability — Request your data in a structured, machine-readable format
To exercise any of these rights, please contact us using the information below. You may also request data deletion at carpinoylogistics.com/data-deletion.
9. Cookies and Browser Storage
Our website and dashboard may use cookies and similar technologies to keep you logged in, remember your preferences, and analyze usage patterns. The Visitor Profile may store your Login ID in your browser and a short-lived session token in session storage so you do not need to re-enter your PIN on every action; profile fields may be cached locally for display until you save or log out. You can control cookies and clear site data through your browser.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data: