Last updated: 5 September 2026
SmallOps is operated by Michelle Baylon as a sole proprietor, based in the Philippines (“SmallOps”, “we”, “us”). This policy explains what personal information we handle when you use the Live Selling Order Manager (LSOM) and our related tools, and how we look after it. We handle personal information in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Sellers. When you sign in with Google, we receive your Google account email address, and your name and profile picture if your account provides them. We use the email address only to identify your shop and sign you in. We do not request or receive access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google service data.
We also hold the shop details you enter: your shop name, payment details and payment QR image, and your product, live session and order records.
Buyers. When a buyer places a reservation through a seller’s link, we store the information they provide: name, mobile number, delivery address, the items reserved, order status and history, and any proof-of-payment image they upload. Buyers do not create an account; a reservation is accessed through an unguessable link.
This buyer information is entered for the seller’s shop, but it is stored by us, in Google Sheets and Google Drive accounts that SmallOps controls. Each shop’s data is kept in its own separate spreadsheet and its own storage folders, so one shop cannot see another’s data.
We do not sell personal information, and we do not use it for advertising or profiling.
We use these service providers to run SmallOps:
We may also disclose information where required by law, or to establish, exercise or defend a legal claim.
Buyer and order data is retained while the seller’s account is active, and for up to 12 months after the account is closed, unless a longer period is required for legal, accounting, dispute-resolution or other legitimate business purposes.
Proof-of-payment images follow the retention period configured by the seller in their shop settings (120 days by default), after which they are deleted.
Seller account information follows the same 12-month period after closure. Earlier deletion is available on request where we are legally able to do so.
Seller access requires Google Sign-In, and each shop’s data is isolated in its own storage. Buyer links use long, unguessable tokens. No system is perfectly secure, but we take reasonable steps to protect the information we hold.
Under the Data Privacy Act you have rights to be informed, to access, to correct, to object, to erasure or blocking, to damages, to data portability, and to lodge a complaint with the National Privacy Commission. To exercise any of these, or if a buyer wishes to reach us about their order data, contact smallops.co@gmail.com. Buyers may also contact the seller they ordered from.
SmallOps is intended for business use by adults and is not directed at children.
We may update this policy. The date at the top shows when it last changed, and material changes will be highlighted in the app.
Michelle Baylon (SmallOps), Philippines — smallops.co@gmail.com