Privacy Policy

F.E. Santiago Management Consultancy ("FESMC," "we," "us," or "our") operates ParkEngine Pro. This Privacy Policy explains what information we collect when you use it, how we use and store it, who we share it with, and the rights you have under Philippine law, in particular the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations. It should be read together with our Terms of Use.

We do not collect geolocation data, and ParkEngine Pro has no mapping, geocoding, or site-lookup feature that would send an address or coordinates to any external service.

Project data is stored in a Postgres database hosted on our behalf by Supabase. We use Supabase strictly as a database host: your project data is written and read only by our own application server, through a database access layer (Prisma), never directly from your browser. We do not use Supabase's built-in authentication service, and your account's data is not exposed to Supabase's client-side APIs at all.

Access control is enforced in our application code, not by database-level row policies: every request to read, save, or delete a project first verifies your signed-in session, and every database query for project data is scoped to your own account's user ID on our server before it ever reaches the database. In practice, this means your projects are only ever returned to a request that has already been authenticated as you.

ParkEngine Pro requires a signed-in account to use the calculator — there is no anonymous or guest mode, so every project you create is tied to your account from the start. Sign-in works by emailing a one-time link to the address you provide (via Resend, see Section 7); clicking it issues a signed session token stored in a cookie in your browser. We do not store your password because we never ask for one.

We use the information described in Section 2 to:

We do not sell your personal information, and we do not use your project data to train any machine learning model.

We process your personal information on the following bases recognized under the Data Privacy Act: performance of our contract with you (operating the account and subscription you sign up for), your consent (where we ask for it, such as marketing email you can opt out of), and our legitimate interest in keeping the Service secure and functioning, balanced against your rights.

The following third parties process data on our behalf to operate the Service:

We do not use a payment gateway or processor of any kind — plans are paid by direct bank transfer, GCash, or Maya to our own account, and verified manually by our team, so no additional third party sits between you and your payment.

Each provider is contractually restricted to using data only to provide its service to us and is bound by its own privacy and security commitments.

We keep your account and project data for as long as your account is active. Deleting a project from your dashboard removes it from the database. If you close your account, contact projects@fesmc.com.ph and we will delete your account record and remaining project data, other than billing records we are required to retain for tax and accounting purposes under Philippine law.

To be specific about the boundaries of data handling in ParkEngine Pro:

We use industry-standard safeguards appropriate to the sensitivity of the data involved, including encrypted connections (HTTPS/TLS) between your browser and our servers and between our servers and our database, session tokens signed with a private server-side secret, and application-level authorization checks on every request for project data as described in Section 3. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

As a data subject under the DPA, you have the right to be informed, to access your personal information, to object to certain processing, to correct inaccurate data, to have your data erased or blocked under the conditions the law provides, to data portability, and to file a complaint with the National Privacy Commission (NPC). To exercise any of these rights, contact us at privacy@fesmc.com.ph. We will respond within the timeframe required by the DPA's implementing rules.

ParkEngine Pro is not directed at, and is not intended for use by, children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@fesmc.com.ph and we will delete it.

Our infrastructure providers (Supabase, Vercel, Resend) operate data centers outside the Philippines. Where your data is processed or stored outside the Philippines, we require our providers to maintain security and confidentiality standards consistent with the Data Privacy Act, through their own contractual and technical safeguards.

This Privacy Policy governs how we handle your personal information — it does not expand the scope of the Service itself. As explained in Section 4 of our Terms of Use, ParkEngine Pro's computed outputs, including everything shown in the Project Readiness panel, are schematic-level estimates and are not a substitute for review, verification, and sealing by a Professional Engineer or Architect licensed in the jurisdiction of your project.

We may update this Privacy Policy from time to time to reflect changes to the Service or to legal requirements. We will update the "Last updated" date above and, for material changes, notify active subscribers by email before the change takes effect.

For privacy questions, data subject requests, or complaints, contact our privacy point of contact: