Privacy Policy

Effective September 8, 2026 · Version 1.0

Who we are. Mabuhay Works LLC, of PO Box 261, Thornfield, MO 65762. You can reach us through our Contact page.

What we collect. When you ask for a Free First Look or become a client, we collect what you give us: your name, your business name, your town, your phone number, your email address, and whatever you tell us about your business. If you become a client, we also collect what we need to do the work—access to your Google Business Profile, the photos and text you send us, and, for review services, the customer list you provide and certify.

We do not collect payment card details. Payments are handled by Stripe, and card information goes to Stripe, not to us.

What we do with it. We use it to prepare your review, to contact you about it, to do the work you hire us to do, and to keep our own records. That’s all.

Text messages.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

If you agree to receive text messages from us, that agreement is yours alone and we do not pass it, sell it, or rent it to anyone. You can stop the messages at any time by replying STOP.

Who else sees your information. Only the services we need to run the business—our messaging and customer platform, our email provider, our payment processor, and our hosting. They act on our instructions. We do not sell your information. We do not trade it. We do not share it for anyone else’s marketing.

Customer lists you give us. If you buy a review service, the list of your past customers is yours, and it is confidential.

• We use your customer list only for the campaign you authorised, with one exception, and it is the do-not-contact register described below.
• We do not market our services to the people on it.
• Access is limited to the people who need it to run your campaign.
• We delete our active working copies within 30 days after the campaign ends, except any records we reasonably need to keep for legal or accounting compliance.
• Residual backup copies may remain until they are overwritten through ordinary backup cycles, and they stay protected while they exist.
• You can ask us to return or delete the list earlier, and we will.

Our do-not-contact register. If someone opts out of a campaign, or asks any of us not to contact them, we keep their contact details and their opt-out on a company-wide register. We use that register to suppress future campaign messages to that person — across every campaign we run, including campaigns for our other clients.

We do this because a person who has said stop, and then receives another message from the same system, experiences it as one business ignoring them. That damages their opinion of the business that messaged them, and it damages our ability to deliver mail at all.

That record is a legal-compliance record. It survives the 30-day deletion described above. It is used for suppression only — never for marketing, never sold or transferred, never disclosed.

Two things this is not. It is not a limit on your own contact with your own customers: you may contact anyone you like, directly, and this register does not bind you. And it is not sharing.

If our register suppresses people on a list you give us, we will tell you how many records were suppressed. We will not tell you which ones, because those individuals have not opted out of anything from your business, and their identity is not ours to disclose.

If something goes wrong. If we confirm a security incident that is reasonably likely to materially affect you or your customers, we will tell you without unreasonable delay and give you the information we have.

How long we keep things. Enquiry information for as long as it is useful and then not longer. Client records for as long as we work together, plus the period our accountant and the law require.

Cookies. Our site uses only what it needs to run, and to tell us in aggregate how many people visited. We do not run advertising trackers.

Your choices. Ask us what we hold about you and we will tell you. Ask us to correct it and we will. Ask us to delete it and we will, except where we have to keep a record of a transaction.

Children. This is a service for businesses. It is not for anyone under 18.

Changes. If we change this policy we will change the date at the top.

Questions. support@mabuhayworks.com · 417-712-6345