Privacy notice
What we collect about you, why, how long we keep it, who else sees it, and what you can require of us.
Last checked against the platform: 27 August 2026
Who is responsible for your data
e-Selyo is an Electronic Notarization Facility operated by Daloy Tech Solutions. The Personal Information Controller for the purposes of the Data Privacy Act of 2012 (R.A. 10173) is [TO BE CONFIRMED — see the notice above].
Our Data Protection Officer can be reached at [DPO NAME AND ADDRESS TO BE CONFIRMED]. In the meantime, write to support@daloytechsolutions.com and mark it for the attention of the Data Protection Officer.
Our NPC registration reference is [NOT YET REGISTERED].
One thing to understand before the detail
A notarial act is a public record. When a notary notarizes your document, they are required by the Supreme Court’s rules to enter it in a register and keep it. That record is not ours to delete on request, and it is not the notary’s either. Most of the retention periods below, and the one real limit on your rights, follow from that.
What we collect, and why
Your account
Your name, email address, a hashed password, your authenticator secret if you enrol one, and the IP addresses you sign in from. We need these to give you an account at all, which is a contractual necessity under Article 12(b).
Five failed sign-in attempts lock the account for fifteen minutes. That decision is automated.
Proving who you are
Before your first notarial act we check your identity against a government-issued ID with a liveness scan. This collects images of your ID, a live video or selfie of your face, the personal details read off the document, and the biometric scores produced by comparing them.
We do this because A.M. No. 22-10-17-SC requires the notary to satisfy themselves of your identity, and because you consent to the biometric processing specifically. Biometric data is sensitive personal information under NPC Advisory 2017-03 and is treated as such.
The pass or fail is automated against a confidence threshold. A weak result goes to a person rather than being decided by the score.
The raw images do not stay with us. They are held by the identity verification provider; we keep the scores, the result, and the details read off your document.
Where you are
Immediately before a session we record your browser’s location, the country your connection appears to come from, and whether that connection is a VPN, a proxy or a Tor exit node. A notarial act must take place within the Philippines and the notary must be commissioned where you are — this is how that is established. We record the position once and do not track you afterwards.
Your documents
The PDF you upload, its SHA-256 fingerprint, every version of it, and the finished notarized file. Documents are encrypted at rest.
The session
The video session is recorded and the recording is retained as part of the notarial record. The Supreme Court’s rules require it. You are told this on screen throughout the session, and you consent to it in the checks beforehand.
Your signature
The signature you draw on screen, and the cryptographic signature applied to the document.
The act itself
Your name, the identity document you presented, the witnesses and their identity details, the act performed, the fee, and the notarial certificate — all entered in the notary’s Electronic Notarial Book.
What we log
Every step of an act is written to a tamper-evident chain: who joined, when the oath was administered, when the signature was applied, what was sealed. You can read your own act’s trail in your account.
How long we keep it
| What | How long | Why |
|---|---|---|
| Account details | While active, then 7 years | R.A. 10173 §13; audit obligations |
| Password and authenticator secrets | Deleted when the account is | No reason to keep them |
| Identity details and ID document data | 10 years after the account closes | 2004 Notarial Rules; SC REN Rules |
| Identity check results and scores | 10 years | SC REN Rules |
| Raw biometric images (held by the provider) | Up to 3 years, then deleted by them | Their retention policy under our agreement |
| Notarized documents and their hashes | Permanent | 2004 Notarial Rules §253 — a notarial record |
| Notarial acts and register entries | Permanent | 2004 Notarial Rules §245 |
| Electronic signatures | Permanent | R.A. 8792 — the document’s legal validity depends on it |
| Session recordings | 10 years | SC REN Rules §14 |
| Location records | 10 years | SC REN Rules §7 |
| Payment records | 10 years | BIR Revenue Regulation 18-2012 |
Who else sees your data
We use other companies to do specific things. Each of them sees only what that thing requires.
| Who | What for | Where |
|---|---|---|
| Identity verification provider | Your ID images, liveness video and the details read off them | Outside the Philippines — transferred under Standard Contractual Clauses |
| Video provider | The session video and its recording, for a short download window | Outside the Philippines — Standard Contractual Clauses |
| Cloud infrastructure | Storage and hosting of everything above | Philippine region |
| Transactional email | Your email address, to send you account and act notifications | Outside the Philippines — Standard Contractual Clauses |
| Payment provider | Payment details, when payments are turned on | Philippines |
Some transfers leave the Philippines. Where they do, they are made under Standard Contractual Clauses and the provider is bound by a data processing agreement.
What we do not do: we do not sell your data, we do not use it for advertising, and we do not hand it to anyone not listed above except where a law or a court requires it.
A note on document classification
The platform contains an optional feature that would send a document’s text to an AI provider for an advisory classification. It is switched off and sends nothing. It refuses rather than operating, and no document text has left this platform through it. If that changes, this notice changes first.
Your rights, and where they stop
Under the Data Privacy Act you may ask us for the following. Use the data request form, or write to the Data Protection Officer. We answer within 15 calendar days of receiving your request, extendable once with notice to you.
| Right | What you get |
|---|---|
| To be informed | This notice. |
| Access | A copy of what we hold about you. In full. |
| Portability | The same, in a machine-readable format. |
| Rectification | Correction of inaccurate data — except in a completed notarial act. A certificate records the name on the ID you presented at the time. Rewriting it afterwards would destroy the evidential value of the act it belongs to. |
| Erasure or blocking | Deletion of your data — except a completed notarial act, its register entry, its recording and its documents. The notary is required to keep those. We will tell you exactly what was erased and what was not, and cite the rule. |
| Objection | To stop processing — except processing the Supreme Court’s rules require of a notarial act. |
| Complaint | To us, and independently to the National Privacy Commission, whose contact details are on their own site. You do not need our permission to complain about us. |
We will ask you to prove who you are before we disclose anything. Handing your data to somebody claiming to be you is the exact thing these rights exist to prevent.
Security
Documents are encrypted where they are stored. Notaries and regulators must use multi-factor authentication. Every notarial act is written to a tamper-evident chain that is recomputed whenever it is read, so alteration shows. Uploads are scanned before they are stored.
Two things are worth stating plainly rather than implying. Long-term immutable storage is not yet in place — documents are encrypted but not held on write-once media, so the ten-year retention above is a policy the platform follows rather than one the storage enforces. And no backup system currently reports to this platform.
If something goes wrong
If a breach affects your personal data and is likely to put you at risk, we will notify the National Privacy Commission and you within 72 hours of knowing, as R.A. 10173 requires. See our breach notification page.
Changes to this notice
When what we do changes, this changes first. The date at the top is when it was last checked against the platform, not when the file was last touched.