Privacy Policy

How E-Rat protects and handles your personal data

Last Updated: December 29, 2025

Introduction

E-Rat ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Electronic Notarization Facility platform.

As an Electronic Notarization Facility operating under Supreme Court A.M. No. 24-10-14-SC, we are required to maintain the highest standards of data protection and confidentiality.

Information We Collect

Personal Information

Full name, email address, and contact information
Government-issued ID (Philippine ID, Passport, Driver's License)
Biometric data (facial recognition for identity verification)
Digital signatures and notarial information
Payment information (processed securely through Stripe)

Documents and Records

Documents uploaded for notarization
Audio-visual recordings of notarization sessions (as required by law)
Digital certificates and notarial seals
Transaction logs and audit trails

Technical Information

IP address, browser type, and device information
Session data and authentication tokens
Usage data and platform interactions
Video conferencing metadata (call duration, participants)

How We Use Your Information

1
Identity Verification: To comply with Supreme Court requirements for multi-factor authentication and biometric verification of principals and notaries.
2
Notarization Services: To facilitate electronic notarization sessions, document signing, and issuance of electronic notarial certificates.
3
Legal Compliance: To maintain records as required by law, including audio-visual recordings and audit trails for a minimum of 10 years.
4
Platform Improvement: To analyze usage patterns, improve our services, and ensure platform security and reliability.
5
Communication: To send you notifications, updates, and support-related communications about your account and services.

Data Security

We implement industry-leading security measures to protect your personal information:

End-to-End Encryption
All data transmitted is encrypted using TLS 1.3
Secure Storage
Data stored in encrypted databases with access controls
Access Controls
Role-based permissions and multi-factor authentication
Audit Trails
Blockchain-anchored immutable audit logs

Data Retention

In compliance with Supreme Court A.M. No. 24-10-14-SC, we retain:

Notarized Documents: Minimum of 10 years from date of notarization
Audio-Visual Recordings: Minimum of 10 years from date of session
Audit Trails: Permanently stored with blockchain anchoring
Account Information: Duration of account activity plus 5 years
Identity Verification Data: As required by Anti-Money Laundering laws

Your Rights

Under the Data Privacy Act of 2012, you have the right to:

Access: Request copies of your personal data
Correction: Request correction of inaccurate information
Portability: Request transfer of your data in a structured format
Erasure: Request deletion of data (subject to legal retention requirements)
Object: Object to processing of your data for certain purposes

To exercise these rights, contact our Data Protection Officer at contact.e-rat@gmail.com

Third-Party Services

We use the following trusted third-party services:

Supabase: Database and authentication services
Agora: Video conferencing infrastructure
Stripe: Payment processing (PCI-DSS compliant)
Vercel: Hosting and content delivery

These services are contractually obligated to protect your data and use it only for providing services to E-Rat.

For privacy-related questions or concerns, please contact:

Data Protection Officer

Email: dpo@e-rat.ph

Phone: +639610320154

Address: DotJPGE Labs, Silay City, Philippines