Privacy policy

1. Who we are

Sagot (“Sagot”, “we”, “us”) is operated by Renz Aron Gorre, doing business under the registered business name Renz Gorre Information Technology Services, in the Philippines, who is the personal information controller for the personal information described in this policy. Every question, request or complaint about it, including anything addressed to a data protection officer, goes to the.renzgorre@gmail.com.

This policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (together, the “Data Privacy Act”). It applies to sagot.app and every page, link and service provided under it (the “Service”). It should be read with the terms of service.

2. Information we collect

2.1 From your Google account. Signing in is only through Google. When you sign in, Google gives us your Google account identifier, your name, your email address and the address of your profile picture. We receive no password. We keep an account record of those details together with when the account was created and when it was last signed in to.

2.2 What you create. Reviewers you write or publish (title, source text, questions, answers and notes); timetables and the email addresses you share them with; your username; year setups you share by code; and the reviewers and timetables you save.

2.3 Your study activity. For each reviewer you take: your answers, what you typed, how long each question took, your score and points, and when you were last active on it. For spaced revision: the due date, difficulty and history of each question you review.

2.4 Your grades. The subjects, terms, weightings, targets and marks you type into the grade calculator. Information about a person’s education is sensitive personal information under Section 3(l) of the Data Privacy Act, and is treated as such here (see section 3.2).

2.5 Documents you upload for AI reading. The file itself is processed as described in section 5 and is not stored. We keep a ledger entry for each attempt: file name, file type, file size, the model used, the amount of processing it took, its cost, the number of reads charged and whether it succeeded.

2.6 Payments. Your balance of reads, and for each purchase the pack, the amount in pesos and the PayMongo reference. When you give reads to the author of a reviewer, which account gave, which received, how many and for which reviewer. Your e-wallet, card or bank details are entered on PayMongo’s checkout and never reach us.

2.7 Feedback. Messages you send through the feedback form, the page you sent them from and when.

2.8 Technical information. Our hosting provider records ordinary server logs (such as IP address, browser type, the page requested and the time) to run and secure the Service. Page views and the use of features are measured as described in section 8.

2.9 Information about other people. Some of what you give us may concern someone else, such as a classmate’s email address typed into a timetable share list, or a name that appears in a document you upload. See section 6.

3. Why we process it, and on what basis

3.1 Personal information. We process the information in section 2 only for the following purposes, each on the lawful basis stated, under Section 12 of the Data Privacy Act:

• To provide the Service you asked for (your account, saving your work, publishing, sharing, revision schedules, AI reading, leaderboards): because it is necessary to perform our agreement with you under the terms of service.
• To take payment and keep an accurate balance: to perform that agreement, and to comply with legal obligations that apply to payments.
• To secure the Service, prevent abuse and enforce the terms (including limiting costly AI use): our legitimate interest in keeping the Service working and safe for everyone using it.
• To answer your feedback and requests: our legitimate interest, and your request.
• To count visits and measure which features are used (section 8): our legitimate interest in knowing how the Service is used so it can be improved, where this is done without a cookie and without linking it to you. Setting the analytics cookie, and linking what is measured to your account, is done only with your consent, which you can withdraw at any time (section 7).

3.2 Sensitive personal information. Grades are processed only on the basis of your consent under Section 13(a) of the Data Privacy Act, and only to show them back to you and calculate with them. You give that consent by choosing to enter them; the grade calculator is optional and nothing else in the Service requires it. You may withdraw consent at any time by deleting the entries, or your account, which erases them. Do not enter another person’s grades.

3.3 What we do not do. We do not sell, rent or trade personal information. We do not use it for advertising or marketing, build profiles for third parties, or make decisions about you by automated means that produce legal or similarly significant effects. We do not use your documents, reviewers or grades to train AI models.

4. Who can see it

4.1 Other users. The following are visible to other people by design:

• A published reviewer, including its questions and answers and your name and picture as its author, is visible to anyone who has its link. It is not listed in a public directory, but links can be forwarded and copied. Publishing is publication.
• A reviewer’s leaderboard shows the name, picture, score and points of each person who finished it, and a list of who is taking it at the moment, to anyone who opens it.
• A timetable is visible according to the setting you choose: only you, the addresses you name, or anyone with the link. A timetable URL contains your username and can be guessed.
• A shared year setup is visible to anyone with its code. It carries the structure only, never your marks.

Your gradebook, revision schedule, balance, AI reading history and feedback are never shown to other users. When you give reads to an author, their balance goes up; they are not shown who gave them.

4.2 Service providers. We use the following providers to run the Service. Each receives only what it needs for its function and processes it under its own terms and privacy commitments:

• Google: sign-in (Google Sign-In), and reading uploaded documents (Gemini API).
• Vercel: hosting, server logs, routing requests to the AI model (AI Gateway), and visit counting (Web Analytics).
• Neon: the database where everything in section 2 except uploaded files is stored.
• PayMongo: payment processing. It receives your email address when you open a checkout, so a receipt can be sent.
• PostHog: measuring which features are used (section 8). Data it receives is processed in the United States.

4.3 Legal requirements. We may disclose personal information where required by law, court order or a lawful request of a government authority, or where necessary to protect the rights, safety or property of users, the public or ourselves. Where the law allows, we will tell you first.

4.4 Transfers outside the Philippines. Google, Vercel and Neon store and process data on servers that may be located outside the Philippines, including in the United States. By using the Service you acknowledge that transfer. We remain accountable under Section 21 of the Data Privacy Act for personal information transferred to them, and use only providers that apply security measures appropriate to it.

5. Documents you upload

5.1 How they are handled. When you have AI read a document, the file is held in memory for the duration of the request and transmitted to Google’s Gemini API, through Vercel’s AI Gateway, to be read. We do not write the file to our database or to any file storage, and once the request ends we hold no copy of it. The questions produced are returned to your editor and are stored only if you then save or publish them.

5.2 Processing by the AI provider. Google and Vercel process the file under their own terms, which may permit them to retain it for a limited period to detect abuse or meet legal obligations. That retention is outside our control.

5.3 What you must not upload. Do not upload documents containing sensitive personal information about any person (such as health, government identification numbers, or other people’s grades or records), personal information about others that you have no right to share, or material you are bound to keep confidential. See section 6 and the terms of service.

6. Information you give us about other people

If you give us personal information about someone else, whether by typing their email address into a share list, publishing content that names them, or uploading a document that contains it, you confirm that you are entitled to do so and, where the law requires it, that they have consented. For that information you, and not Sagot, are responsible for having a lawful basis to share it.

An email address in a timetable share list is used only to compare against the address that person signs in with, is shown to nobody except the timetable’s owner, and is deleted when the owner removes it, when the timetable is deleted, or when the person it belongs to deletes their own Sagot account. Anyone who finds their information in content on Sagot and objects to it may write to the.renzgorre@gmail.com, and it will be reviewed and removed where appropriate.

7. Cookies and browser storage

7.1 Necessary. We use a session cookie to keep you signed in, and short-lived cookies the sign-in process needs to prevent forged requests. These are strictly necessary and the Service cannot work without them. Some pages, such as the editor and the grade calculator, keep working state in your own browser’s storage so that it is not lost on refresh, and a reviewer taken without an account keeps your answers there until you sign in to see your score. That data stays on your device.

7.2 Analytics, only if you accept. The first time you visit, you are asked whether we may use a cookie to see how the Service is used. If you accept, PostHog sets a cookie that recognises your browser on later visits, and while you are signed in, what is measured is linked to your account id. If you decline, or have not chosen, no analytics cookie is set and nothing measured is linked to you. Your choice is kept in your browser’s storage. You can change it at any time:

Change cookie choice

We use no advertising cookies.

8. Visit counting and feature use

8.1 Vercel Web Analytics records page views: the page, the referring site, the country and the device type. It sets no cookie, stores nothing in your browser, does not follow you across sites, and is not linked to your account. We see only aggregate counts.

8.2 PostHog records the pages you visit and the features you use, such as uploading a file, publishing or saving a reviewer, starting or finishing one, redeeming a voucher or opening a checkout, with counts that describe them (for example how many questions, which mode, or the percentage scored). It also receives your browser, device and approximate location, which it derives from your IP address. It never receives the contents of your documents, reviewers, answers or grades, and we do not record your screen. Without your acceptance it runs without a cookie and nothing is linked to you; with it, see section 7.2. It reaches PostHog through our own domain.

9. How long we keep it

We keep personal information for as long as your account exists, because the Service is a store of your own work and study history and has no reason to discard it on a timer. When you delete your account, everything keyed to it is erased at once, as described on delete your data, with these exceptions:

• Reviewers, timetables and year setups you choose to leave published are kept, with your name, picture and account removed from them.
• A record of reads given between two accounts is kept with your account removed from it, because it also explains the other person’s balance.
• Payment records held by PayMongo are kept by it under its own legal obligations.
• Server logs held by Vercel expire under its standard retention.
• Analytics held by PostHog are kept under its retention for our plan. Ask us, and we will delete whatever it holds that is linked to your account.
• Scores recorded without an account carry nothing that identifies anyone and cannot be traced to you.
• Information we are required by law to keep, or need to establish, exercise or defend a legal claim, is kept for as long as that requirement or claim lasts and used for nothing else.

10. How we protect it

We apply organizational, physical and technical measures appropriate to the information, including: encryption of all traffic in transit (HTTPS); hosting with providers that encrypt stored data; no passwords held at all, since sign-in is delegated to Google; signed session cookies; access to the database restricted to the operator; checks on every request that you may only read or change what is yours; and not keeping uploaded files. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization.

If a personal data breach occurs that is likely to give rise to a real risk of serious harm to you, we will notify the National Privacy Commission and the affected users within 72 hours of becoming aware of it, as NPC Circular No. 16-03 requires, and tell you what happened, what information was involved and what you can do.

11. Your rights

Under the Data Privacy Act you have the right:

• to be informed whether and how your personal information is processed;
• to object to processing, including processing based on legitimate interest;
• to reasonable access to your personal information;
• to have inaccurate or incomplete information corrected;
• to have your information erased or blocked;
• to obtain a copy of it in a structured, commonly used electronic format;
• to withdraw consent where processing is based on consent;
• to be indemnified for damages sustained through inaccurate, false or unlawfully obtained or used information; and
• to lodge a complaint with the National Privacy Commission.

You can exercise erasure yourself, immediately, at delete your data, and correct most information by editing it in the Service. For anything else, write to the.renzgorre@gmail.com from the email address on your account. We may ask you to verify your identity before acting. We will respond within 15 days. Your rights may be subject to the limits the Data Privacy Act sets, such as where information must be kept to comply with the law.

If you are not satisfied with our response, you may complain to the National Privacy Commission at privacy.gov.ph.

12. Minors

Many people who use Sagot are students, and some are under 18. You must meet the minimum age Google sets for managing your own Google account in your country to use the Service. If you are under 18, you may use it only with the knowledge and consent of a parent or guardian, who consents on your behalf to the processing described in this policy, and in particular to grades being entered and to anything being published under your name. A parent or guardian who believes a minor is using Sagot without consent may write to the.renzgorre@gmail.com to have the account deleted.

13. Changes to this policy

We may update this policy when the Service or the law changes. The new version will be posted on this page with a new effective date. If a change materially affects how your existing information is used, we will give notice in the Service before it takes effect, and where the change requires your consent, we will ask for it.