Privacy Policy

Lunarcore Studios OPC ("Lunarcore", "we") is a multimedia company in GMA, Cavite. Lunarcore Studios OS is the system we use to handle inquiries, offers, contracts, projects, our team and the freelancers we work with. This policy explains what personal data the system holds, why, who can see it and the choices you have. It follows the Data Privacy Act of 2012 (Republic Act No. 10173).

Last updated October 15, 2026.

Clients and people who inquire:

• Name, company, email, mobile number and how you reached us.
• Your inquiry and survey answers: what you need, your goals, timeline and budget range.
• Offers, contracts and the name you type to accept or sign them, with the date and time.
• Payments we record and billing details for official receipts (registered name, address, TIN).
• Messages, change requests, approvals and feedback you send through your client page or project portal.

Freelancers: name, contact details, skills and rates, payout account (GCash or bank), TIN if given, contracts, deliverables and payout records.

Our team:

• Employment records and documents, pay and payout details, leave and payslips.
• Clock-in records with a selfie and the location at the moment of clocking in, after the team member agrees to it.
• Team chat messages, whiteboards, and meeting recordings with their transcripts and summaries.
• Questions asked to the in-app AI assistant and how much it was used.

Everyone who signs in: sign-in details and the cookies needed to keep you signed in. We use no advertising or analytics cookies.

• To answer inquiries, prepare offers and contracts, and run the projects you hire us for.
• To record payments, issue receipts and keep the books required by tax law.
• To contract and pay freelancers.
• To run payroll, attendance and leave for our team, as employment and tax laws require.
• To coordinate our team: chat, meeting notes and action steps.
• To send updates you expect: reminders, approvals and project status by email, text or our team's Telegram alerts.

We rely on your consent (for example, the inquiry form, clock-in selfies and meeting recordings), on the contract we have with you, and on our legal obligations. We do not sell personal data.

• A meeting is recorded only after the person recording confirms that everyone in it knows it is being recorded and transcribed.
• Recording audio, and questions asked to the AI assistant, are processed by AI services (OpenAI, Anthropic or xAI, through Vercel's AI Gateway) to write transcripts, summaries and answers. They are not used to advertise to you.
• Anything the AI writes is a draft. A person checks it before it is sent to anyone or added to a project.
• Meeting audio is deleted after 30 days; the transcript and summary stay with the meeting room.

Inside Lunarcore, access depends on the person's role, and the system enforces it on its own servers:

• Costs, margins and rate cards: only our CEO and COO.
• Salaries and pay details: only the CEO, COO and project manager; contact details of team members only to the CEO, COO and the person.
• Direct messages and private rooms: only their members.
• Client billing details: only the CEO, COO and project manager.

We use these service providers, who process data for us under their own security and privacy terms:

• Supabase (database and file storage, Singapore region) and Vercel (hosting and the AI Gateway).
• OpenAI, Anthropic and xAI (AI transcription, summaries and assistant answers).
• Google (creating meeting links, when connected), Telegram (alerts to our team), Resend (email) and One Way SMS (text messages).
• GoHighLevel and Meta (for Orbit marketing clients only: message and ad performance numbers).

Some providers store data outside the Philippines. We share only what each service needs, and we may disclose data when the law requires it.

• Clock-in selfies and exact locations: 90 days.
• Meeting audio: 30 days. Transcripts and summaries: while the room is in use.
• Payments, payroll and tax records: as long as tax and labor laws require.
• Inquiries that did not become projects, and other records: until you ask us to delete them or they are no longer needed.

Data travels encrypted. Every record is protected by role-based access rules in the database. Private files (documents, payment proofs, selfies and recordings) are kept in private storage and shown only through short-lived links. Changes to money, approvals and access are recorded in an audit log that cannot be edited.

Under the Data Privacy Act you may:

• be informed of how your data is used, and see a copy of it;
• have wrong data corrected;
• object to processing, or have your data blocked or deleted where the law allows (records we must keep for tax or employment law stay until their period ends);
• get your data in a format you can take elsewhere;
• file a complaint with the National Privacy Commission (privacy.gov.ph).

Email us at the address below. We reply within 15 working days.

For privacy questions or requests, contact our Data Protection Officer:

Lunarcore Studios OPC, Blk 7 Lot 17 Cong. Rd, Brgy. San Gabriel, GMA, Cavite 4117, Philippines · lunarcorestudios@gmail.com · +63 975 159 6971 (Monday to Friday, 8 AM to 5 PM)

We may update this policy. The date above shows the latest version; we tell clients and the team about important changes.