Privacy notice
Manbrella OS · Manbrella Corporation (Manbrella Packaging Experts) · Draft, Oct 11, 2026
Draft for the company's counsel to confirm. It describes how the system works today; it is not legal advice.
What this covers
Manbrella OS is the company's internal system for inquiries, quotes, orders, stock, cash and the people who work on them. Only people the Owner adds can sign in.
What we keep
- Staff: name, work email, role, sign-in times, and the actions each person takes (the audit log).
- Warehouse phones: the time and location of loading photos, only after the person agrees on their own phone.
- Customers, plants, suppliers, brokers and truckers: company names, TIN, addresses, and contact people's names, phone numbers and emails.
- Documents: photos of POs, delivery receipts, invoices, receipts, cheques and payment proofs, attached to the order they belong to.
- Email: each person connects their own Gmail. Business messages, meaning mail to or from contacts in the company's Address Book or mail the person labels "Manbrella", are copied into the shared inbox with their attachments so the team can answer them. Other mail is never copied: the system reads only who it is from and to, and fetches nothing else. The Gmail access key is stored encrypted, and disconnecting removes it.
- Messenger and Instagram: messages sent to the company's Facebook Page and Instagram account, with the sender's name and any photos or files, are copied into the shared inbox so the team can answer them. The Page's access key is stored encrypted, and the Owner can disconnect it at any time.
- Other channels: Viber, WhatsApp and phone messages that staff log by hand, with any screenshot they add.
Why
To answer inquiries, quote, fulfil and deliver orders, collect payment, keep the books for the accountant and the BIR, and know who did what and when.
Who can see it
Access follows each person's role. For example, the warehouse sees releases and counts but no prices, payments or customer phone numbers; margins and costs are limited to the Owner, Board and Finance. Every change is recorded in the audit log.
Where it is stored
In Supabase (database and private file storage) in Singapore, and the application runs on Vercel. Files are private and open only through short-lived links. Data travels encrypted.
How long
Records are not deleted; corrections are made as new entries so the history stays complete. Retention periods follow the accountant's guidance for tax and business records.
Your rights
You may ask to see the personal data the company keeps about you, to have it corrected, and, where the law allows, to have it blocked or removed, or to object to its use. Ask the Owner, who acts as the company's data protection contact. Requests are answered within 15 working days.