Privacy Policy

This policy explains how KURSO.PH OPC (“Kurso.ph”, “we”) collects, uses and protects personal information in Posters by Kurso (posters.kurso.ph), in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. What we collect

• Account information: your email address, and your name if you give it at checkout.
• Business information you submit: your business or brand name, industry, product details, prices, promos, website, logo, brand style samples and photos (including photos of people, if you choose to upload them).
• Generated content: the brand notes, image prompts and posters made for you.
• Payment information: what you bought, the amount, status and Xendit payment references. Card, e-wallet and bank details are handled by Xendit; we do not receive or store them.
• Usage and technical information: sign-in records, IP address used for login security, actions in the app, and error logs. We also set two Meta cookies (_fbp and, if you came from a Facebook or Instagram ad, _fbc) to measure our own ads.

We do not access your Facebook account, Page inbox, ad account or the people who message you. Do not upload sensitive personal information (such as health or government ID details) that your ads do not need.

2. How we use it

• To create your account, sign you in, and provide the service you asked for: generating posters.
• To process payments, keep track of credits, and send receipts.
• To send service emails: login codes, “posters ready” notices, payment receipts and important account notices.
• To send product announcements and promos, which you can unsubscribe from at any time using the link in those emails.
• To measure and improve our own Facebook and Instagram ads (see section 3).
• To provide support, prevent abuse and fraud, secure the service, and fix problems.
• To comply with legal and tax obligations.

Our legal bases are: performing our contract with you, your consent (for example for announcements and for photos of people you upload), our legitimate interests in running and securing the service, and legal obligations.

3. Who we share it with

We do not sell your personal information. We share it only with service providers that help us run Posters by Kurso:

• Supabase (database, file storage and sign-in)
• Vercel (website hosting)
• Inngest (background processing)
• Anthropic (AI used to write copy and check content)
• KIE.ai (AI image generation from your prompts and photos)
• Resend (sending emails)
• Xendit (payment processing)
• Meta (measuring our own ads): when you view our home page, sign up, start a checkout or buy credits, we send Meta that event with your email address in hashed (scrambled) form, your IP address, browser type and Meta cookie IDs. Your posters and business details are never sent.

These providers process information on our behalf and may store it outside the Philippines. We may also disclose information when required by law or to protect our rights, users or the public.

4. How long we keep it

• Account and poster data: while your account is active, and up to 12 months after it closes, unless you ask us to delete it sooner.
• Payment records: as long as required by Philippine tax and accounting rules.
• Login and security logs: up to 12 months.

5. How we protect it

We use encrypted connections, access controls that keep each user's data separate, private file storage with short-lived links, and limited staff access. No system is perfectly secure; if a breach affects you, we will notify you and the National Privacy Commission as required by law.

6. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to damages, and to file a complaint with the National Privacy Commission. To use these rights, email support@kurso.ph. We may need to verify your identity first.

7. Children

Posters by Kurso is for people 18 and older. We do not knowingly collect information from children.

8. Changes

We may update this policy. We will post the new version here and email you about material changes.

9. Contact

KURSO.PH OPC, Data Protection: support@kurso.ph.