Privacy Policy
Effective: October 24, 2026
Merllou (“we,” “us,” or “our”) provides a business software website and access to an online workspace. This notice explains our general practices for handling personal data. It is intended to reflect principles under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and other privacy laws that may apply to particular users, including the GDPR where applicable.
1. Information we process
Depending on how you use our services, we may process your name, email address, business or account details, support correspondence, subscription and transaction records, technical data (such as device, IP address, browser and security logs), and information you choose to store or submit through the workspace. Payment providers generally process payment credentials directly; we may receive payment status, identifiers, and billing records.
2. Why we use it
We use data to register and authenticate accounts, provide subscribed features, deliver account and service communications, respond to support requests, process billing through providers, protect our services from abuse, meet legal obligations, and improve service reliability. Marketing messages, where offered, are subject to applicable consent and opt-out requirements.
3. Legal grounds
Where required by law, processing relies on an appropriate legal basis such as performance of a contract, consent, legitimate interests balanced against individual rights, or compliance with legal obligations. Applicable grounds depend on the data and jurisdiction.
4. Service providers and international transfers
Merllou uses third-party technology, hosting, payment, communication and workspace providers to operate the service. Data may be processed outside the Philippines. We seek to use appropriate contractual, organizational, and technical safeguards where applicable, but no internet service is completely risk-free.
Support requests
When you submit our support form, we process your name, email address, selected topic, subject, message, and any optional attachment to respond to your request. Cloudflare hosts and protects the form. Google Sheets and Google Apps Script record requests and send email notifications to [email protected]. Optional attachments are stored in a restricted Google Drive folder. Cloudflare Turnstile processes technical information to help prevent automated abuse. These providers may process data internationally. Requests and attachments are retained in our Google Sheets, Google Drive, and support email systems under the general retention principles below. Please avoid sending passwords, card information, or unnecessary sensitive personal data.
5. Customer-controlled data
Business customers may upload contacts and other personal data into their workspaces. Depending on the service and applicable law, customers may be responsible for giving notices, obtaining lawful permissions, and honoring requests relating to data they control. Merllou and its platform providers may process that information to deliver the service.
6. Retention and security
We retain information for as long as reasonably necessary to provide services, resolve disputes, enforce agreements, or comply with applicable law, and then delete or anonymize it where feasible. We apply reasonable security measures and rely on our providers’ controls, but cannot guarantee absolute security.
7. Your privacy rights
Subject to applicable law, you may request access, correction, deletion or erasure, restriction, portability, or object to certain processing; withdraw consent where consent is the basis; and complain to an appropriate data protection authority, including the Philippine National Privacy Commission where relevant. We may need to verify your identity before acting.
8. Cookies
Our site and workspace providers may use essential cookies and similar technologies for functionality, authentication, and security. See our Cookie Notice for more information.
9. Children
Our business services are not directed to children. Users must have legal capacity to enter into agreements or act with appropriate authorization.
10. Updates and contact
We may update this notice and publish the revised date here. For questions or requests, email [email protected]. Merllou is operated from the Philippines. Additional operator details and a designated privacy contact should be published as required by applicable law.