Effective draft: September 27, 2026
1. Scope and roles
This policy describes how Xybersoft IT Services (“Xybersoft,” “we,” “us”) handles personal information in connection with this marketing website and the Posibli + Inventonet products. It does not replace a business customer’s own privacy notice to its employees or shoppers.
When a business uses the platform, that business generally decides why customer, employee and transaction data is entered and used. Xybersoft may process that data to provide the service under its agreement with the business. Our role for a particular data set depends on the arrangement and applicable law.
2. Information involved
- Website inquiries: information you send when you contact us or request a demo, such as your name, business, email address and the content of your message.
- Platform accounts: business and staff details, login identifiers, roles, permissions and activity logs.
- Operational records: catalog, orders, invoices, payments, customers, suppliers, job orders, inventory movements and related records entered by a business.
- Technical information: device, browser, connection and diagnostic information needed to operate, secure and support the website and platform.
What is collected in a specific deployment depends on the features the business enables and the information it chooses to enter. Payment details may be handled by a payment provider where such an integration is used.
3. How information is used
We use information to respond to inquiries, provide and support the platform, authenticate users, process requested workflows, maintain records, troubleshoot issues, improve reliability and protect accounts and systems. A business customer may use its own records for sales, fulfillment, loyalty, reporting and bookkeeping according to its policies and legal obligations.
Processing must have an appropriate basis under applicable law. Where consent is required for an optional feature or marketing activity, the relevant notice and choice should be provided before it is enabled.
4. Sharing and service providers
Information may be made available to authorized users within the business, to service providers that help host, deliver or support the platform, to integrations the business enables, and when required by law. We do not describe a specific provider as active here unless it is confirmed for the relevant deployment. Cross-border processing, if any, should be disclosed in the business’s final notice and handled under applicable safeguards.
5. Retention and security
Records are retained for the time needed to provide the service, meet contractual and legal obligations, resolve disputes and maintain appropriate audit trails. The exact retention schedule depends on the record type and customer agreement and must be confirmed before this draft is finalized.
We use administrative, technical and organizational measures intended to protect information, including access controls and logging. No method of storage or transmission can guarantee absolute security.
6. Your privacy rights
People in the Philippines may have rights to be informed, access, correction, objection, erasure or blocking, portability, damages and complaint under the Data Privacy Act, subject to applicable conditions. For information held by a business customer, contact that business first so it can identify the relevant records. You may also contact Xybersoft about information we handle directly.
More information is available from the National Privacy Commission.
7. Planned Bluetooth Beacon features
Customer proximity recognition and warehouse zone tracking through Bluetooth beacons are future concepts, not features described here as currently deployed. Before activating any such feature, the business and Xybersoft should provide a specific notice covering the data collected, purpose, participation choices, access and retention. Warehouse tracking may concern tagged assets or equipment; it should not be presented as precise indoor positioning without validation.
8. Changes
We may update this policy as the products and our practices change. The current version and effective date will appear on this page. Material changes should be communicated through an appropriate channel.
9. Contact
For privacy questions or requests, contact Xybersoft IT Services through info@xybersoft.com. The official privacy contact and business address must be confirmed before final publication.