Privacy Policy

At Shield AI ("we," "our," or "us"), operated via shieldai.ph and panel.shieldai.ph, we are deeply committed to protecting the privacy, security, and integrity of personal data. This Privacy Policy outlines how we collect, use, store, and process your data in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and other applicable global data protection standards.

By interacting with our website, accessing our Command Center dashboard, or integrating your digital channels through our platform, you acknowledge and consent to the processing of your data according to the principles of transparency, legitimate purpose, and proportionality.

1. Information We Collect

We collect information to provide, secure, and continuously improve our digital defense and sentiment intelligence services:

• Directly Provided Account Data: Name, business email address, company/entity name, contact details, and account credentials required to register for access to the Command Center.
• System Telemetry & Technical Logs: IP address, browser type, device metadata, operating system, and access timestamps collected automatically to maintain system security and session integrity.

2. Third-Party API & Social Media Integration Clauses

To provide automated channel monitoring, sentiment analysis, and community defense, Shield AI integrates with the Application Programming Interfaces (APIs) of various third-party social media networks and websites. When you authorize our platform to manage or connect to your official profiles, we collect and process specific data strictly in accordance with each respective platform's Developer Policies and Terms of Service:

A. API Data Collected

• Platform Credentials & Access Tokens: Secure Access Tokens (e.g., OAuth tokens) generated during the authentication flow to establish and maintain authorized API connectivity.
• Public Telemetry & Engagement: Public posts, user comments, post reactions, timestamp metadata, and comment hierarchy on connected third-party channels.
• Profile Identifiers: Public User IDs or Scoped IDs associated with engagements on your connected channels, which are necessary for analyzing repetitive behavioral threats and sentiment trends.

B. How API Data Is Used

Data retrieved via third-party APIs is processed based on your explicit instructions and used exclusively for:

• Automating sentiment analysis, threat detection, and engagement moderation on your connected profiles.
• Generating real-time risk alerts, executive briefings, and analytical dashboard telemetry inside your private Command Center.
• Isolating coordinated spam, synthetic bot activity, or hostile raids directed at your digital assets.

3. User Data Deletion Instructions

Shield AI respects user privacy rights regarding data processed through integrated APIs. In compliance with the Data Privacy Act of 2012 and standard Developer Policies of major platforms, users whose data has been processed by our system may request complete data deletion through the following method:

Formal Data Deletion Request (Right to Erasure)

In accordance with your Right to Erasure or Blocking under the Data Privacy Act, any user or account owner may submit a formal request to completely purge their stored profile data, comment logs, or token records from our databases:

Please send an email to our Data Protection Officer at info@shieldai.ph with the subject line "Formal Data Deletion Request". Provide relevant details (e.g., your Name, connected URL, or specific profile details) to help us locate your data. Upon verification, our security team will process the permanent purge request within 7 business days and confirm completion via email.

4. Data Security and Storage

We implement enterprise-grade organizational, physical, and technical security controls to protect your data against unauthorized access, alteration, disclosure, or destruction:

• All API communication and dashboard data transfers are encrypted in transit using the latest TLS / SSL Encryption.
• Access Tokens, database credentials, and sensitive API keys are encrypted at rest using industry-standard cryptographic algorithms.
• Database access is strictly isolated via multi-factor authentication, role-based access protocols, and continuous audit logging.

5. Data Retention Limits

We adhere to the principle of proportionality, retaining collected information only as long as necessary to fulfill the legitimate operational purpose for which it was gathered:

• Active Token Data: Retained strictly for the duration of your active service subscription. Tokens are purged immediately upon channel disconnection or contract termination.
• Comment Telemetry & Analytics Logs: Retained for historical reporting, trend analysis, and legal evidentiary archiving as specifically requested by the client. Once the retention period lapses or a deletion request is validated, records are permanently securely destroyed or irreversibly anonymized.

6. Third-Party Disclosures

We do not share your personal information or connected social media data with third parties, except in the following limited circumstances:

• Authorized Sub-Processors: Trusted infrastructure and cloud service providers operating under strict non-disclosure agreements and Data Processing Agreements (DPAs) that meet Philippine regulatory standards.
• Legal Requirements: If compelled by applicable law, regulation, valid judicial order, or official law enforcement request, provided that such disclosure is legally mandated.

7. Your Rights under the Data Privacy Act of 2012

As a data subject in the Philippines, you are entitled to the following rights under Republic Act No. 10173:

• Right to be Informed: To know whether your personal data is being, or has been, processed, and how it will be used.
• Right to Object: To object to the processing of your personal data, including processing for direct marketing, automated processing, or profiling.
• Right to Access: To request reasonable access to your personal data held by us.
• Right to Rectification: To dispute inaccuracies or errors in your personal data and request that we correct them immediately.
• Right to Erasure or Blocking: To suspend, withdraw, or order the blocking, removal, or destruction of your personal data from our systems.
• Right to Damages: To claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to Data Portability: To obtain a copy of your data in an electronic or structured format commonly used.

8. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological advancements, operational changes, or revisions to relevant data protection laws and third-party developer policies. Any updates will be posted on this page with an updated "Effective Date." Continued use of our services after modifications constitutes your acknowledgment of the updated terms.

9. Contact Our Data Protection Officer (DPO)

If you have any questions, concerns, or requests regarding this Privacy Policy, your data rights, or formal data deletion procedures, please contact our Data Protection Officer at: