Privacy Policy

Last updated November 15, 2026

This policy explains what personal information Fullstack HQ, Inc. (“Fullstack HQ”, “we”) collects through fullstackhq.com and while working with clients, how we use it, and the choices you have. We are based in Angeles City, Philippines, and we follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. Information we collect

Information you give us

• Enquiries. Your name, email address, company and whatever you write when you message us through the chat on this website or by email.
• Calls. Your name, email address and the details you enter when you book a call with us.
• Client accounts. Contact details of the people we work with, billing details needed for invoices, and the messages, files and task lists you send us.
• Email updates. Your email address, if you subscribe to updates from us.
• Job applications. The details you send us when you apply to work with us.

We do not take card payments on this website. Payments are made by Wise, PayPal or wire transfer, and those providers handle your payment details. We receive a record of the payment, not your card or bank login details.

Information collected automatically

When you visit this website, we and the tools listed in section 3 collect technical information such as your IP address, browser and device type, the pages you view and the site that referred you. Some of this is collected using cookies. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with the Google Analytics opt-out add-on.

Information we do not collect

We do not ask for sensitive personal information such as your race, religion, health or political views, and this website is not intended for anyone under 18. We sell services to businesses and do not knowingly collect information from children.

2. How we use information

• To reply to enquiries and arrange calls.
• To deliver the work you hire us for, send updates and provide support.
• To send invoices, record payments and keep the accounts the law requires.
• To send email updates, if you subscribed. Every email has an unsubscribe link.
• To understand how this website is used and to improve it.
• To keep this website and our systems secure, and to meet our legal obligations.

The legal basis depends on the purpose:

• Contract: delivering work, support, invoicing and payment for clients, and replying when you ask about hiring us.
• Consent: email updates and job applications. You can withdraw consent at any time.
• Legal obligation: tax and accounting records.
• Legitimate interest: website statistics, improving our services and keeping our systems secure.

3. Service providers we use

We share personal information with the providers below only so they can perform their service for us. Each handles information under its own privacy policy.

• Help Scout: the chat on this website and our support inbox.
• Google Chat and Slack: messaging with clients and within our team.
• GitHub: storing and managing source code for client projects.
• Anthropic (Claude), OpenAI and Figma: AI tools our team uses in client work, under the limits in section 4.
• Google Analytics: website usage statistics.
• Calendly: call booking.
• Netlify: website hosting, including server logs.
• Kit: email updates.
• Wise and PayPal: payments.

We do not sell, rent or lease personal information, and we do not share it with third parties for their own marketing.

4. Client project data and AI tools

While working for a client we may be given access to the client’s systems, code, files and, sometimes, personal information about the client’s own customers. Our virtual assistants may also work inside a client’s inbox, calendar, documents, bookkeeping and online store accounts, which can contain personal information about the client’s contacts and customers.

In all of this work the client decides what the information is used for, and we act as its service provider. We handle the information only on the client’s instructions and to do the agreed work, we give access only to the team members assigned to the account, and we do not copy it out of the client’s systems unless the work requires it. It is covered by the non-disclosure agreement we sign with each client. Clients who need a separate data processing agreement can ask us for one.

Our team uses AI tools such as Claude, OpenAI and Figma AI in its work. As set out in our NDA:

• We share client information with an AI tool only as far as the work needs.
• We use business or API accounts whose terms do not allow the provider to train its models on client information.
• We do not enter a client’s passwords, access keys or its customers’ personal data into an AI tool without the client’s written consent.
• A client may ask us in writing not to use AI tools on its work.

5. When we disclose information

Apart from the service providers in section 3, we disclose personal information only when the law, a court order or a government authority requires it, when it is needed to protect our rights or the safety of others, or as part of a merger or sale of our business, in which case the new owner must continue to honour this policy.

6. International transfers

We work from the Philippines, and several of our service providers store information in the United States and other countries. By using this website or working with us, your information may be transferred to and processed in those countries. We take reasonable steps to make sure it stays protected as described in this policy.

7. How long we keep information

• Enquiries that do not lead to a project: up to two years.
• Client contact, project and billing records: for the length of the engagement, and afterwards for as long as tax and accounting law requires.
• Client files and system access: returned, deleted or revoked when the engagement ends, or earlier at the client’s request.
• Email updates: until you unsubscribe.
• Job applications: up to one year, unless you ask us to delete them sooner.

8. Security

This website is served over an encrypted (HTTPS) connection. We limit access to client information to the team members who need it, and we use access controls on the accounts and systems we work in. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach puts your personal information at real risk of serious harm, we will notify you and the National Privacy Commission within 72 hours of learning of it, as the Data Privacy Act requires.

9. Your rights

Under the Philippine Data Privacy Act you have the right to:

• Be informed about how your personal information is processed.
• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Object to processing, or withdraw consent you have given.
• Have your information erased or blocked.
• Receive a copy of your information in a commonly used format.
• File a complaint with the National Privacy Commission.

If you live in the European Economic Area, the United Kingdom or California, you have similar rights under your local law, including the right to complain to your local data protection authority. We do not sell personal information.

To use any of these rights, contact us as described in section 12. We reply within 30 days. We may need to confirm your identity first.

10. Links to other websites

This website links to other websites, including client projects and our social profiles. We are not responsible for their privacy practices, so please read their own policies.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top. If a change materially affects how we use information we already hold about clients, we will tell them by email.

12. Contact us

For privacy questions or requests, send us a message through the chat on this website, or write to our data protection officer at:

Fullstack HQ, Inc.
468-B 2F & 3F Lead Bldg, Sto. Rosario St.
Angeles City, 2009, Philippines