Privacy Policy
Effective 2026-01-01. Last updated August 4, 2026.
Who we are
FrontPass ("we", "us") is a software platform operated under the laws of the Republic of the Philippines. We provide community management software to homeowner associations ("HOAs").
What we collect
- Resident accounts: name, mobile number, email, house label, photo (optional), notification preferences.
- Visitor records: visitor name, optional vehicle plate, photos captured at gate entry (visitor + ID for verification purposes).
- Transaction data: dues invoices, payments, election ballots (encrypted at rest), village request submissions.
- Operational metadata: device fingerprints for guard sessions, audit logs of administrative actions.
How we use it
Only to operate the service for your HOA. Specifically:
- To authenticate residents and guards.
- To validate visitor passes and record gate entries.
- To send Web Push notifications you've opted into.
- To produce audit logs the HOA board can review.
- To bill the HOA for the service.
We do not sell or share personal data with third parties for advertising or profiling. We do not use third-party tracking on the resident or guard applications.
Photo retention
Visitor photos are retained for 90 days by default. Government ID photos (captured in lax-mode entries) are retained for 30 days in a separate, stricter storage bucket. HOA administrators may configure these retention periods within legal limits.
Your rights under the Data Privacy Act of 2012 (RA 10173)
- Right to be informed about how your data is processed (this policy).
- Right to access your data.
- Right to object to processing.
- Right to erasure or blocking.
- Right to data portability.
- Right to file a complaint with the National Privacy Commission.
To exercise any of these rights, email privacy@cmrp.app. We respond within 30 days.
Visitor photo deletion
Visitors have no account with us. If you appeared as a visitor at a FrontPass village and want your photos deleted, submit a deletion request to privacy@cmrp.app with your pass ID (printed on your QR receipt link) or the date + village name. We coordinate with the HOA admin and complete deletion within 30 days.
Security
Multi-tenant isolation via Postgres row-level security. End-to-end encryption for election ballots until close. Idempotent write APIs. Append-only audit logs. SMS-OTP based authentication with no passwords. See our security page for the technical details.
Data location & processing
Data is stored in cloud infrastructure with availability zones in or near the Philippines. We are evaluating data residency options for HOAs with stricter requirements.
Changes to this policy
We will update this page when our practices change. Material changes will be communicated via in-app announcement to HOA admins.
Contact
Data Protection Officer: privacy@cmrp.app