Privacy notice

How we handle personal data

Last updated 20 August 2026. This is the notice for vyrm.xyz and for the systems VYRM runs. It is written to be read, not to bury you.

Who we are

VYRM is a software company in the Philippines. Write to hello@vyrm.xyz. That address reaches the people who run the systems.

Philippine law that applies here is Republic Act 10173, the Data Privacy Act of 2012, and the rules of the National Privacy Commission.

This website

vyrm.xyz sets no cookies and loads no scripts from other companies. There is no analytics product, no advertising pixel, and no location prompt.

The web server keeps ordinary access logs so the site can be kept up and defended:

• the page requested, the time, and whether it succeeded
• your public IP address
• the browser and device string your software sends
• the page that linked here, if your browser sends one

Those logs are used for security and upkeep — not to build a marketing list, not to profile you, and not to sell. They are kept for a limited time and then dropped.

If you email us, we keep the correspondence so we can reply and, if you become a client, so we have a record of what was agreed. We do not add website visitors to a mailing list.

The systems we run for clients

School and shop systems hold other people’s data: students, parents, staff, customers. In that work the school or the shop is the personal information controller. They decide why the data is collected and what is done with it. VYRM is a personal information processor: we host the system, keep it running, back it up, and follow the client’s instructions.

In that role we:

• keep the database on servers we operate
• copy it off-site every night and check that the copy is good
• limit staff access to what the job requires
• do not use client data to market VYRM, and do not sell it
• give the client a full copy of their database on request, in a standard format

If you are a parent, student, or customer who wants a copy of your own record, or a correction, write to the school or the shop first — they are the controller. If you cannot reach them, write to us and we will point you to the right office rather than invent an answer we do not own.

Your rights

Under the Data Privacy Act you may, with the usual legal limits, ask to:

• be told whether we hold data about you, and see it
• have it corrected if it is wrong
• have it erased or blocked where the law allows
• object to a use that the law lets you object to
• complain to the National Privacy Commission

For this website, write to hello@vyrm.xyz with the subject line “Privacy”. For a school or shop system, start with that organisation; we will help if they ask us to.

National Privacy Commission: privacy.gov.ph.

Security reports

If you think you have found a security problem in a VYRM system, email hello@vyrm.xyz. A machine-readable contact file lives at /.well-known/security.txt. Please do not use a finding to take data that is not yours.

Changes

If this notice changes in a way that matters, we will update the date at the top and keep the current version at this address.