Privacy Policy

Eastgate Software Engineering builds Software-as-a-Service products, marketplaces, and web and mobile applications. This policy explains how we handle personal information on this website (the “Site”).

“Eastgate”, “we” and “us” mean Eastgate Software Engineering.

This policy covers the Site only. It does not cover the separate websites and applications we build or operate, such as PH.rentals, PH.condos, PH.house, PH.reviews, PH.sale and PH.vacations. Each of those has its own privacy policy, which applies when you use it. See Our products and client projects.

We keep the information we collect on the Site to a minimum.

• Information you send us. If you email us, we receive your email address and whatever you choose to include, such as your name, company and details about your project.
• Questions you ask the website assistant. If you use the AI assistant, we receive the messages you type. See Website assistant.
• Technical information. Like most websites, our servers and hosting infrastructure may automatically record technical information about visits, such as IP address, browser and device type, the pages requested, and the date and time. We use it to keep the Site secure and reliable.
• Team sign-in. Authorised Eastgate team members sign in to our administration console with their Google account. For them, we receive the name, email address and profile picture that Google shares, and we store a session so they stay signed in. This does not apply to visitors, who have no accounts on the Site.

At the time of writing, the Site does not have contact forms or visitor accounts, and does not use advertising trackers, analytics services or social media pixels.

Only authorised Eastgate team members sign in with Google, to reach the Site’s administration console. Visitors never sign in.

• What we access. Only the basic profile Google shares at sign-in (the openid, email and profile permissions): your name, email address, whether the email is verified, and your profile picture. We do not request access to Gmail, Drive, Calendar, Contacts or any other Google service.
• How we use it. To check that the account is on our list of approved team members, to sign it in and keep it signed in, and to show who is signed in and who last edited content. If an account is not approved, sign-in is refused and nothing about it is stored.
• What we store. For approved team members: the name, email address and profile picture, the link between the Google account and their console account (including the sign-in tokens Google issues), and their session. Edits they make are recorded with their email address.
• What we never do. We do not sell Google user data, use it for advertising, share it with anyone except the service providers that host the Site, or use it to train AI models. People do not read it except to keep the console secure, to fix a problem, or where the law requires it.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the Site’s access at any time from your Google Account permissions. To have the data we store about your Google account deleted, contact us (see Contact us). We remove it when a team member no longer needs console access.

The public pages of the Site set two small cookies for visitors. When you use the website assistant, we set a necessary cookie named eg_chat. It counts how many questions your browser has asked in the last 24 hours, so we can keep the free assistant fair for everyone. It is signed so it can’t be altered, contains no personal information, and expires after 24 hours.

We also set a cookie named eg_presence on your first visit. It holds a random identifier, not linked to you, so the “visitors online” indicator can count your browser once and show it the same generated avatar. It is signed, contains no personal information, and expires after 30 days.

The administration console uses a necessary, secure session cookie for signed-in team members, which is removed when they sign out or the session expires. The Site’s fonts and images are served from our own hosting, not from third-party font or image services.

The Site has an AI-powered assistant that answers questions about Eastgate. When you send it a message, the message is passed to our AI provider, Groq, which generates the reply. Groq handles that data under its own terms and privacy policy.

We do not store the conversation ourselves and we do not ask who you are. To prevent abuse, we briefly keep your IP address in memory and count your questions (see Cookies). Each browser can ask only a small number of questions per day.

Please do not share passwords, payment details or other sensitive or confidential information. The assistant is limited to questions about Eastgate and can make mistakes; its answers are not a quote, contract or advice.

• To reply to your enquiries and discuss possible projects.
• To operate, secure and improve the Site.
• To control access to the administration console so only authorised team members can change the Site’s content.
• To meet legal obligations and protect our rights.

We do not sell personal information.

The Site features testimonials from clients and interns, photographs of our team, and screenshots of products we have built. Testimonials and photographs are published with the agreement of the people featured. Screenshots show the public pages of those products.

If you appear on the Site and would like something corrected or removed, contact us and we will act on it promptly.

We share personal information only when needed to run the Site:

• with service providers that host the Site or provide our email and sign-in services, who may only use it to provide those services to us;
• with our AI provider, Groq, which processes the questions you ask the website assistant in order to generate answers;
• where the law requires it, or to protect our rights, safety or property; and
• in connection with a merger, acquisition or sale of the business, with the same level of protection.

The Site links to other websites, including our products and the sites of our clients. We do not control those sites and are not responsible for their privacy practices. Please read the privacy policy of any site you visit.

We build marketplaces, property and rental listings, review sites, travel and booking platforms, business software and AI-powered features. Products like these commonly handle:

• account details, often through Google sign-in instead of a password;
• listings, photos and other content that users post;
• messages between users, enquiries and bookings;
• reviews and ratings; and
• text and files that users submit to AI features, such as chat assistants.

How each product collects, uses and keeps that information is described in that product’s own privacy policy, which you should read before using it.

When we build software for a client, the client decides what personal information it collects and why. We handle that information on the client’s behalf, under a written agreement, and only as needed to deliver the work.

We keep enquiry emails for as long as we need them to respond and to keep reasonable business records. Team members’ Google sign-in data is kept while they have console access; their sessions expire after 24 hours without activity. Technical logs are kept for a limited period for security and troubleshooting. Information we no longer need is deleted or anonymised, unless the law requires us to keep it.

We use reasonable technical and organisational measures to protect the information we hold, including limiting administrative access to authorised team members and requiring them to sign in with an approved Google account. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, data protection laws, including the Data Privacy Act of 2012 of the Philippines where it applies, may give you rights over your personal information. These can include the right to be informed, to access and correct your information, to object to certain uses, to ask for it to be erased or blocked, to receive a copy in a portable format, and to complain to your data protection authority (in the Philippines, the National Privacy Commission).

To use any of these rights, contact us using the details below. We may need to confirm who you are before we act on a request.

The Site is not directed at children, and we do not knowingly collect personal information from children through it. If you believe a child has sent us personal information, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will make that clear on the Site.

Questions about this policy or about your information? Email us. The address is shown as an image to keep it away from spam bots; select it to open your email app, or use the copy button.