LEGAL & TRUST
Privacy Notice
This notice describes the current ZevByte website, its application-controlled data flows, and the choices available to people who use its forms and tools.
Effective: 2026-08-16 · Last updated: 2026-08-16
1. Who operates ZevByte
ZevByte is operated by Gerardo B. Galvez II in the Philippines.
Privacy contact: [email protected]
2. Information you provide
Depending on the feature you use, you may provide some of the following information. Not every field is required in every interaction.
Contact inquiries
- name and email
- optional mobile number
- inquiry category and subject
- message and optional project reference
- consent or acknowledgment information
- request identifiers used to prevent duplicate processing
Solar planner requests
- name, email, mobile, and preferred contact method
- installation and address information
- appliance, load, system, and project requirements
- project notes and generated planning results
- consent or acknowledgment information
Browser geolocation is currently disabled by the site Permissions Policy. Coordinates are not currently read by the live site; any future coordinate capability will be separately reviewed.
3. Technical and security information
Application-controlled processing may include IP-derived information from the Cloudflare client-IP header for rate limiting and security, request identifiers, Turnstile verification results, idempotency state, delivery/reconciliation state, and bounded security or error information needed to operate the submission paths.
This notice does not claim specific contents or retention periods for provider-level logs that ZevByte does not control.
4. Why information is used
- respond to contact inquiries and requested project discussions
- assess requested solar planning or quotation needs
- route requests to the appropriate ZevByte or contractor mailbox
- send request confirmations where configured
- prevent abuse, duplicates, and unsafe delivery retries
- maintain service reliability and handle applicable legal obligations or claims
5. Plain-language processing basis
Information needed to respond to an inquiry or requested quotation may be processed to take requested pre-contractual steps or provide the requested response. Security and abuse-prevention processing may be used for legitimate operational and security purposes where permitted. Consent or acknowledgment is requested where a flow depends on an explicit user choice. This page does not make a blanket statutory classification for every situation.
6. Service providers and cloud processing
Relevant service categories and providers include Cloudflare Pages, Functions, D1, and Turnstile; Resend-compatible email delivery; and PayPal or GCash only when a user independently chooses voluntary support. Google AdSense is supported in the codebase but currently inactive.
Application-controlled processing means the data flow implemented by ZevByte. Service-provider processing is governed in part by the selected provider's own terms and notices. Some providers may process information through infrastructure outside the Philippines; ZevByte does not promise that all data remains in the Philippines.
7. Retention
- Contact inquiries: application-controlled inquiry records, if separately maintained, are retained for 12 months after the last meaningful interaction.
- Solar quotation inquiries: application-controlled inquiry records, if separately maintained, are retained for 12 months after the last meaningful interaction.
- Delivery/reconciliation payloads: terminal or reconciled application records become eligible for deletion after 30 days and are removed through scheduled maintenance after that retention period; unresolved or active processing records are not removed by routine cleanup.
- Rate-limit records: approximately 10-minute expiry is preserved.
- Completed idempotency records: 24-hour TTL is preserved.
- If an inquiry becomes an actual client engagement, it is outside the inquiry-only rule and may be retained under separate contractual, accounting, dispute, tax, or legal requirements.
Provider mailboxes and provider-level logs may have separate retention rules that are not controlled by this application.
8. Privacy requests and applicable rights
Applicable Philippine privacy law may provide rights such as information and transparency, access, correction, objection, blocking or erasure where applicable, portability where applicable, and complaint or redress. A request does not automatically require deletion when another lawful, contractual, security, or dispute-related retention basis applies.
Send a request to [email protected]. Include enough information to identify yourself, identify the relevant interaction or data, and explain the action requested. Do not send sensitive identity documents unless specifically requested through an appropriate follow-up.
Operational handling
Receive → verify proportionately → locate applicable records → determine the lawful response → perform the approved action → document completion.
9. Security, children, and updates
ZevByte uses reasonable technical and organizational safeguards such as input validation, anti-spam verification, rate limiting, request-size limits, controlled routing, idempotency, and delivery reconciliation. No internet service can promise absolute security.
The site is not presented as a child-directed service and does not add an age gate in this milestone. Do not knowingly submit another person's information without an appropriate basis.
Material changes will be reflected on this page with updated Effective and Last updated dates.