Privacy Policy

Effective: August 17, 2026 · Last updated: August 18, 2026

Who we are

joyjoybuyers ("we", "us") runs a community risk register at joyjoybuyers.com for Philippine online sellers. Sellers report buyers who refused a cash-on-delivery parcel (RTS) or who "mined" an item on a live sale and never checked out. Other sellers can then check a delivery address or a platform username before they ship. joyjoybuyers is a product of everytech.io.

This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. Questions, requests, and complaints all go to support@joyjoybuyers.com.

What we collect

Account data

Accounts are handled by our authentication provider. When you sign up we receive your email address and, if you use social sign-in, the basic profile details that third-party sign-in provider returns for that sign-in. We store a seller record with your account id, your role, an optional shop URL, an optional display alias, and a verification flag that admins set. Passwords, if you use one, are held by our authentication provider and never by us.

Reports you submit

A report is the point of the service, and it is about someone other than you. Depending on the type, a report can contain:

• a delivery address (street line, barangay, city or municipality, province, postal code) for a returned or refused COD parcel;
• a marketplace platform and username for a live-sale no-checkout report;
• the platform, order id, order date, and order amount of the transaction;
• reason tags describing what happened;
• optional free-text notes about you, the reporter (we call this "your info"); and
• optional proof images or files, such as a screenshot or a waybill photo.

Anonymous reporter data

You can report without an account. When you do, we set a cookie named jjb_anon holding a random token. The token is stored on our side only as a SHA-256 hash, never in readable form, and it is the only thing that ties a report back to the browser that filed it. The cookie is httpOnly, SameSite=Lax, and lasts 90 days. We also keep a device group: the hashed tokens of browsers that share the same anonymous identity, so your own reports stay reachable from them. Each anonymous identity gets a friendly alias such as "masipag-kuting-27". An alias is a label, never a password. You may also give us your own email address with an anonymous report. That is optional, and it is your address, not the buyer's.

Technical and abuse-prevention data

• IP address. We read the client IP to enforce rate limits and to log lookups for abuse investigation. It is also converted into an irreversible keyed hash to form the anonymous identifier used in analytics.
• Anti-bot challenge. Public search and public reporting are protected by an anti-bot challenge, which processes request data for that purpose. Waybill scanning is not: it is guarded by IP-based rate limits instead.
• Analytics. Depending on what is enabled at the time, we use privacy-respecting analytics tools to count page views and product events. We send them event names and coarse properties, keyed to a hashed identifier rather than to your name.
• Search logs. A lookup record can hold the IP, the barangay code, the street query, and the resulting verdict.

Waybill scanning

If you choose to scan a waybill photo, that image is sent to an OCR provider that reads the address text out of it. Scanning is opt-in for each upload, it is never automatic, and the text that comes back is stripped of phone numbers before it reaches the form, your screen, or our database.

What we do not collect

We never collect, store, or let anyone search a buyer's phone number. Phone detection exists in our code only to redact numbers before storage, and that applies to pasted addresses, scanned waybills, and free-text notes alike. We also do not ask for a buyer's name. Platform usernames are different: a username is a public, self-chosen identifier, so reports about live-sale incidents do carry one.

How we use it

• To run the register: store reports and answer address and username checks.
• To attach your anonymous reports to your account when you sign up on the same browser.
• To prevent abuse: rate limits, bot checks, duplicate detection, and moderation.
• To improve the product using aggregate analytics.
• To answer your emails and handle removal or correction requests.
• To meet legal obligations and respond to lawful requests.

What is public. Anyone, signed in or not, can see the verdict for an address or username, the number of counted reports, the platforms involved, and, for addresses with two or more counted reports, the reason tags. The per-report list behind those numbers is visible only to signed-in accounts. Dismissed reports never count toward a verdict.

Legal basis

We process personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Our bases are your consent (for the account and the report you choose to file), the performance of a contract with you (running the service you signed up for), and our legitimate interests in operating a fraud-prevention register for sellers and in keeping it free from abuse, balanced against the rights of the people named in it. You may complain to us at support@joyjoybuyers.com or to the National Privacy Commission (privacy.gov.ph).

Sharing

We do not sell personal data. We share it with service providers who process data on our behalf under contract and only for the purposes above: our authentication provider (accounts and sign-in), a third-party sign-in provider (social sign-in), our hosting and storage providers (bot checks, proof storage, web analytics, application hosting, and database), analytics providers (product analytics), and an OCR provider (waybill scanning, only for images you scan). We may also disclose data when the law requires it, or to protect our rights and the safety of users.

Retention

Reports stay in the register until they are deleted or dismissed, because an old refusal is exactly the history a seller is checking for. Account data is kept while your account exists. The anonymous cookie and the practical ability to claim reports expire after 90 days, though the reports themselves remain. Lookup logs and analytics events are kept only as long as they are useful for abuse prevention and product measurement. Deleting a report deletes its reason rows and its proof files as well.

Your rights

Under the Data Privacy Act you may ask for access to your data, its correction, its erasure or blocking, and you may object to processing or ask for a portable copy. You can also withdraw consent. Two of these you can do yourself: sign in and delete any report you filed from your dashboard (the deletion is permanent and takes the proofs with it), or manage your email and sign-in details from the account menu. For anything else, email support@joyjoybuyers.com and we will respond within a reasonable period.

If you are a buyer named in a report

You do not need an account to ask us about a report. Email support@joyjoybuyers.com with the address or the platform username at issue and a short explanation. We will review it. If a report is inaccurate, duplicated, filed in bad faith, or cannot be supported, we dismiss or remove it, and a dismissed report stops counting toward the verdict immediately. Please do not send us additional personal details we did not ask for, such as phone numbers.

Security

Anonymous tokens are stored hashed. The analytics identifier is a keyed one-way hash of the IP. Proof files live in private cloud storage rather than on a public URL, and the register itself is blocked from search-engine indexing. Access to production data is limited to people who need it. No system is perfectly secure, so we cannot promise absolute protection.

Children

The service is for adults. You must be at least 18 years old to use it. We do not knowingly collect data from children, and we delete it if we find it.

International transfers

Our hosting and our providers operate globally, so the servers handling your data may be located outside the Philippines. When data moves abroad we rely on contracts with those providers that require protection consistent with the Data Privacy Act.

Changes

We may update this policy. The effective date at the top always shows the current version, and material changes will be announced on the site before they take effect.

Contact

Privacy questions, data requests, and removal requests: support@joyjoybuyers.com.