Strong Media Corp

Privacy Policy

Last updated 24 September 2026

1. Who we are and what this covers

Strong Media Corp (SEC Registration No. CS200321866), Marikina City, Metro Manila, Philippines (“we”, “us”). This policy covers our website, strongmediacorp.com, and EventScan Pro, our event invitation, RSVP and QR check-in service. Our other apps publish their own notice where they collect personal data.

We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.

2. Our role: the organiser decides, we process

There are two kinds of people in EventScan Pro, and we treat their data differently.

• Organisers — the companies and people who open an account and run events. For their account details, we are the personal information controller.
• Guests — the people an organiser invites, or who register themselves at an organiser's event. For guest data, the organiser is the personal information controller and we are their personal information processor. We act only on the organiser's instructions, to run their event.

If you are a guest and want to know why you were invited, or want your details changed or removed, the organiser of that event is the best first contact — their name and phone number are on your invitation, and replying to the invitation email reaches them directly. You can also write to us and we will help, or pass your request to them.

3. What we collect

From organisers

• Name, company name and email address, and the access code that signs you in.
• Event details you enter: name, date, time, venue, description, the contact person and phone number shown to guests, your logo and brand colour.
• For payments: PayMongo handles card and GCash payments and we never see card numbers. If you pay by bank transfer, we keep the screenshot of your payment proof you upload.

About guests — entered by the organiser, or by guests themselves

• Name, email address, and where the organiser collects them: phone number, company, job title, table number, meal choice, number of plus-ones and VIP status.
• RSVP responses, the ticket number, and for ticketed events whether the guest has paid and any payment proof image they upload.
• The door log: when a guest was checked in, at which door or checkpoint, and the name of the staff member who scanned them.
• Feedback a guest chooses to give: ratings, comments, and an anonymous device identifier used only to stop the same phone answering twice.

From visitors to our website

• Our website uses Google Tag Manager, which loads Google Analytics to count visits and see which pages are useful. If we run advertising, we may add advertising tags (for example Meta's) through the same tool. These use cookies; your browser settings can block them.
• Pages load fonts and code libraries from Google and public content networks, which see your IP address when they serve them.
• Anything you send us through a form, by email, or by WhatsApp.

In the app, on your own device

EventScan Pro keeps your sign-in and some preferences in your browser's local storage so you stay signed in. It also records simple usage counts — which feature was opened, and by which account — so we know what is used. Guest details are never part of those counts.

4. What we use it for

• To run the organiser's event: sending invitations, reminders and QR passes; recording RSVPs and check-ins; collecting feedback; producing the organiser's report.
• To run organiser accounts: signing in, taking payment, unlocking paid events, support, and service messages about your account.
• To keep the service secure and working: preventing abuse, limiting how much mail any one account can send, and fixing faults.
• Summarise with AI builds a prompt from an event's feedback — the comments and scores, never guest names or email addresses — which the organiser copies into an AI assistant of their own choosing. We do not send feedback to any AI service ourselves. What the organiser pastes into their assistant is governed by that assistant's own terms.

We do not sell personal data, rent guest lists, or contact an organiser's guests for our own purposes.

Our legal basis. For guests: the organiser's instructions, under the organiser's own basis for inviting them — usually their legitimate interest in running the event, or the guest's consent when they register themselves. For organisers: performing our agreement with you, and our legitimate interest in running a secure service.

5. Email, and who your replies reach

Invitations, reminders and passes are sent from our address on behalf of the organiser, and carry the organiser's name. When a guest replies, the reply goes to the organiser's email, not to us.

Messages that cannot be delivered — a mistyped or closed address — come back to our mailbox. We use them only to find and fix delivery problems.

6. Who else handles the data

We use a small number of service providers, each bound to protect the data and use it only to provide their service to us:

We share personal data with anyone else only if the law requires it, for example a lawful order from a court or the National Privacy Commission.

7. Data stored outside the Philippines

Event and guest data is stored with Google Cloud in a multi-region location in the United States. Google is contractually bound to protect it and applies encryption at rest and in transit. We remain accountable for that data under the Data Privacy Act wherever it is stored.

8. How long we keep it

• Guest data stays until the organiser deletes the event or their account. Deleting an event deletes its guest list, its door log and its feedback.
• Organiser accounts stay open until the organiser asks us to close them. Closing an account deletes every event it ran, with all of the above.
• Sample passes made with the “Try it” button on our website are cleared out automatically once they are more than a week old.
• We keep payment records for as long as Philippine tax and accounting rules require.

9. How we protect it

• All traffic to our website, the app and the database is encrypted in transit (HTTPS).
• Access rules on the database limit each organiser to their own events. The fields that decide payment and branding cannot be changed from an organiser's or guest's browser — only by our server or our own administrators.
• Service credentials are kept outside the public part of our web server.
• Only authorised Strong Media Corp personnel can reach the data, and only to run or support the service.

No system is perfectly secure. If a breach puts personal data at risk, we will tell the affected organisers and notify the National Privacy Commission as the law requires.

10. Your rights

Under the Data Privacy Act you have the right to be informed; to access your personal data; to object to its processing; to have it corrected; to have it erased or blocked; to receive it in a portable form; to be compensated for damage caused by unlawful processing; and to file a complaint with the National Privacy Commission.

To use any of them, write to strongmediacorp@yahoo.com with “Privacy” in the subject. We will reply within 15 working days. For guest data we may need to confirm the request with the organiser, because the guest list is theirs.

11. Children

EventScan Pro is for organisers aged 18 and over. Organisers who invite minors are responsible for having consent from a parent or guardian.

12. Changes

If we change this policy, we will update the date at the top. If a change materially affects how we handle data we already hold, we will tell organisers by email before it takes effect.

13. Contact

Data Protection Officer
Strong Media Corp
Marikina City, Metro Manila, Philippines
strongmediacorp@yahoo.com

See also our Terms of Service.