Privacy Policy

This policy explains how KURSO.PH OPC (“Kurso.ph”, “we”) collects, uses and protects personal information in Ads by Kurso (ads.kurso.ph), in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. What we collect

• Account information: your email address, and your name if you give it at checkout.
• Business information you submit: your Facebook Page name and Page ID, industry, product details, prices, promos, locations, budget, age range, website, logo and photos (including photos of people, if you choose to upload them).
• Generated content: the strategy notes, creatives, copy, welcome messages and export files made for your campaigns.
• Payment information: what you bought, the amount, status and Xendit payment references. Card, e-wallet and bank details are handled by Xendit; we do not receive or store them.
• Usage and technical information: sign-in records, IP address used for login security, actions in the app, and error logs.

We do not access your Facebook account, Page inbox, ad account or the people who message you. Do not upload sensitive personal information (such as health or government ID details) that your ads do not need.

2. How we use it

• To create your account, sign you in, and provide the service you asked for: generating creatives, copy and export files.
• To process payments, keep track of credits and plan periods, and send receipts.
• To send service emails: login codes, “creatives ready” notices, renewal reminders and important account notices.
• To send product announcements and promos, which you can unsubscribe from at any time using the link in those emails.
• To provide support, prevent abuse and fraud, secure the service, and fix problems.
• To comply with legal and tax obligations.

Our legal bases are: performing our contract with you, your consent (for example for announcements and for photos of people you upload), our legitimate interests in running and securing the service, and legal obligations.

3. Who we share it with

We do not sell your personal information. We share it only with service providers that help us run Ads by Kurso:

• Supabase (database, file storage and sign-in)
• Vercel (website hosting)
• Inngest (background processing)
• Anthropic (AI used to write copy and check content)
• KIE.ai (AI image generation from your prompts and photos)
• Resend (sending emails)
• Xendit (payment processing)

These providers process information on our behalf and may store it outside the Philippines. We may also disclose information when required by law or to protect our rights, users or the public.

4. How long we keep it

• Account and campaign data: while your account is active, and up to 12 months after it closes, unless you ask us to delete it sooner.
• Payment records: as long as required by Philippine tax and accounting rules.
• Login and security logs: up to 12 months.

5. How we protect it

We use encrypted connections, access controls that keep each user's data separate, private file storage with short-lived links, and limited staff access. No system is perfectly secure; if a breach affects you, we will notify you and the National Privacy Commission as required by law.

6. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to damages, and to file a complaint with the National Privacy Commission. To use these rights, email support@kurso.ph. We may need to verify your identity first.

7. Children

Ads by Kurso is for people 18 and older. We do not knowingly collect information from children.

8. Changes

We may update this policy. We will post the new version here and email you about material changes.

9. Contact

KURSO.PH OPC, Data Protection: support@kurso.ph.