Privacy
Privacy notice
This notice explains how Digiscript Philippines Inc. collects, uses, stores and shares personal data in Digisite, the portal through which our clients view site monitoring footage. It is written to meet the requirements of Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules.
1. Who is responsible for your data
Digiscript Philippines Inc. (“Digiscript”, “we”) is the personal information controller for the account data described below. Our Data Protection Officer may be reached at privacy@digiscriptinc.com. Where a client organisation directs us to capture, retain or release footage of its own site, that organisation is the controller for that footage and Digiscript acts as its personal information processor.
2. Personal data we process
We process four categories of data, and no more than these:
- Account data. Your name, work email address, the organisation you belong to, your role, the projects you are permitted to open, and the dates your account was created and last used.
- Communications. Messages you send us through the support thread inside the portal, and the replies we send back, together with the project each message refers to.
- Usage records. Which files you open, when a share link you created was opened, and the coarse technical details of that request, held as an audit record rather than as a behavioural profile.
- Site footage. Timelapse segments, aerial video, orthophotos and site photographs captured under a services agreement with the client organisation. This footage is of construction sites, not of people, and we do not apply facial recognition, biometric analysis or any form of identification to it.
We do not collect sensitive personal information as that term is defined in RA 10173, and we do not ask for government identification numbers, financial account details or health information.
3. Why we process it
Account data and usage records are processed to perform our contract with your organisation: to give you access to the correct projects, to keep unauthorised people out of them, and to answer the question of who saw what and when. Communications are processed to provide support. Optional notification emails — the weekly digest and new-capture alerts — are sent only where the member has switched them on, and every one of them carries a link to switch them off again.
4. Ownership of site footage
Footage of a client’s site belongs to that client, subject to the payment terms in the services agreement covering its capture. Digiscript does not sell it, license it to third parties, or use it to promote our services without written permission. The software, interfaces, processing pipelines and derived indexes that make the footage browsable remain the property of Digiscript. Deleting an account does not delete the client’s footage, and deleting footage does not affect the client’s rights in it.
5. Who else handles the data
We use a small number of service providers to run the portal: a cloud database and authentication provider, an object storage provider for photographs and raw media, a video delivery provider for compiled films, and an email delivery provider for the messages described above. Each is engaged under a written agreement that limits them to processing data on our instructions, requires appropriate security measures, and forbids any other use. We do not sell personal data and we do not share it for advertising.
Some of these providers operate outside the Philippines, which means account data and footage may be stored or processed abroad. Where that happens, the transfer is covered by contractual commitments that hold the provider to a standard of protection comparable to that required under Philippine law.
6. How long we keep it
Account data is retained for as long as the account exists and for two years after it is deactivated, so that an access history remains available for audit. Deactivated accounts are never deleted outright, because deleting one would erase the record of what that person could see. Files deleted from a project stay recoverable for 30 days and are then purged permanently. Site footage is retained for the life of the client relationship unless the client instructs otherwise in writing.
7. Your rights
Under RA 10173 you have the right to be informed about how your data is processed, to access it, to have inaccurate entries corrected, to object to processing, to have data suspended, blocked or erased where it is incomplete, outdated, unlawfully obtained or no longer necessary, to obtain a copy in a portable format, and to be indemnified for damages arising from unlawful processing. Requests may be sent to the address in section 1. We respond within fifteen working days. If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission.
8. Security
Access to every project is enforced in the database itself rather than only in the interface, so a member sees only what their organisation holds. Passwords are stored as salted hashes and are never visible to Digiscript staff. Share links are issued as unguessable tokens, may carry a passcode and an expiry, and can be revoked at any time. Administrative actions are recorded. In the event of a personal data breach likely to cause real harm, we notify the National Privacy Commission and the affected data subjects within 72 hours of establishing the facts.
9. Changes
We will post any material change to this notice on this page with a new version number, and tell affected members by email before it takes effect. Continuing to use the portal after that date means the revised notice applies.