Privacy Policy
Effective 11 November 2026
MainStreet CRM is the customer relationship management (CRM) service of The IT VA Philippines (TheITVA), based in Davao City. This policy explains how we collect, use and protect personal information, in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and the issuances of the National Privacy Commission. For clients and visitors outside the Philippines, we also follow the privacy laws that apply to them, such as the Australian Privacy Act 1988 and US state privacy laws like the CCPA.
What we collect
- Details you give us when you book a call, start a trial, subscribe or contact us: your name, business name, email, mobile number, industry, location, time zone and any message you write.
- Account details when you become a client: billing contacts, plan, payment records and support history.
- Website data: basic technical information such as browser type and pages visited. Your chosen location is stored only in your own browser.
- Your customers’ data: when you use MainStreet CRM, you add your own contacts and conversations. We process that data on your behalf and only on your instructions.
Why we use it
- To reply to you, arrange your call and set up your trial or account.
- To provide, support and bill the MainStreet CRM service.
- To send the MainStreet Journal, only if you subscribe. Every email has an unsubscribe link.
- To keep our systems secure and meet our legal obligations.
We rely on your consent, on the need to perform our agreement with you, and on our legitimate interests in running and improving our service, as allowed under Section 12 of the Data Privacy Act.
Who we share it with
We never sell personal information. We share it only with service providers that help us run MainStreet CRM, such as our CRM platform provider, email, SMS and payment providers, and with TheITVA staff who support your account. Some providers store data outside the Philippines; we use providers that protect it to a standard comparable to Philippine law.
How long we keep it
We keep inquiry details for as long as needed to follow up with you, and client records for as long as you have an account plus any period the law requires. When data is no longer needed, we delete or anonymise it.
How we protect it
We use access controls, encrypted connections and platform security safeguards, and we limit access to people who need it to do their work.
Your rights
Under the Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, erased or blocked, to data portability, and to claim damages. You may also file a complaint with the National Privacy Commission (privacy.gov.ph). If you are outside the Philippines, you also have the rights your local law gives you.
Contact us
For privacy questions or requests, contact us through our Support page, or write to MainStreet CRM, The IT VA Philippines, Davao City, Philippines.
Changes
We may update this policy. The effective date at the top shows when it last changed.