Privacy notice

Panaderya Demo is a sample shop, built by James Carl Sitsit to show how an automated ordering and payment-checking system works. It is not a real business and sells nothing. You chat with an AI assistant, not a person. This notice follows the Philippine Data Privacy Act of 2012 (RA 10173).

Who is responsible

James Carl Sitsit, a freelance developer in the Philippines. Contact: jamescarlsitsit@gmail.com or the contact form at sitsit.dev.

Why

To run the demo you chose to use, and to stop abuse of it (a bot check and limits on how much one visitor can send). Nothing is used for advertising, sold, or used to train AI models by this demo.

What is collected

• The messages you type in the chat, and the order you build (items, quantities, delivery zone).
• A random session id, so the chat and the order board know which orders are yours.
• If you build your own shop: the shop name, menu, prices and settings you enter. They are saved for your session only, are never shown to other visitors, and are sent to Anthropic as part of your chat. Test orders from a shop you build stay in your browser.
• A salted, one-way hash of your IP address, used only to limit how many sessions one connection can open. Your IP address itself is not stored by the demo.
• If you tap "Send this setup to James" or "Talk to James", James's assistant on sitsit.dev opens with your setup pre-filled so you can review it before sending, or you can use "Or email this setup directly" to send it from your own email app. Nothing is sent until you press Send. James uses it only to reply about your project and deletes it within 12 months if no work follows.

The order board is public: anyone viewing the page sees today's order numbers, items, totals and payment status. It never shows who placed an order, and only your own browser sees your payment link and checks.

The demo never asks for your name, phone number, address or email in the chat. Please do not type them there.

If you chat on Facebook Messenger

The same assistant also answers on the demo's Facebook Page, "Panaderya Demo by sitsit.dev". There, Meta sends the demo your message text and a Page-scoped ID: a number Meta assigns to you for this Page only. The demo does not ask Meta for your name, profile picture or anything else from your Facebook account.

• To keep the conversation going, the demo stores your last 20 messages (yours and the assistant's) with that ID and a demo session id, on the server described below. They are deleted every day at 3:00 AM Philippine time. Your messages are deleted right away if you send "delete my data" (or "burahin ang data ko"); the Page-scoped ID and session id stay until the next 3:00 AM deletion, so the demo can still confirm a payment you already made. See how to delete your data.
• Your messages go to Anthropic to write the replies, and a confirmed order gets a Xendit test payment link, exactly as on the website.
• When Xendit confirms a test payment, the demo sends you a confirmation message in Messenger.
• The conversation itself also stays in Messenger, where Meta keeps it under Meta's Privacy Policy. Deleting it there is up to you, in the Messenger app.

In your browser

Your browser keeps your session id, chat, cart and any shop you build in session storage, so a refresh does not lose them. It clears when you close the tab. Cloudflare's human check loads with the page and may set a cookie it needs for bot detection.

Who processes it

• Anthropic (Claude): your chat messages are sent to Anthropic's API to write the replies. Anthropic keeps API messages for up to 30 days, or longer if its safety systems flag them, under its own policy.
• Xendit, in test mode, for the sample shop only: when you check out, the order number, items and amount go to Xendit to create a test payment page, which Xendit keeps under its own policy. Anything you type on Xendit's page goes to Xendit. Use only the simulated GCash or Maya options; no real money moves.
• Cloudflare Turnstile: checks that a person, not a bot, is starting the chat. Cloudflare sees your IP address and browser details to do this.
• The system runs on a server in Germany operated by netcup GmbH. If a step fails, the developer gets an alert on Telegram with the error message only, not your messages.
• Meta (Facebook Messenger), only if you chat on the demo's Facebook Page: Meta carries the messages between you and the demo under its own policy.
• All of this is processed outside the Philippines: on the demo's server in Germany (netcup), and by Anthropic, Xendit, Cloudflare and Meta in other countries.
• The bread photos are stored on the same server; loading them sends nothing to Wikimedia.

How long it is kept

The demo's orders, sessions and shops are deleted every day at 3:00 AM Philippine time. On the website, chat messages are not saved by the demo after a reply is sent; on Messenger, the last 20 messages are kept until that 3:00 AM deletion (or until you send "delete my data"); the order board keeps only the order number, items, total, status and a list of the payment checks with their times. If processing a payment confirmation from Xendit fails, that run (order number, invoice reference, amount and payment channel, nothing about you) is kept in the server's error log for up to 14 days so it can be fixed. Other failed runs are not kept. Anthropic's and Xendit's copies follow their own policies, as above.

Your rights

Under the Data Privacy Act you can ask to be informed about, access, correct, object to, or erase data about you, get a copy in a portable format, and claim damages, and you can complain to the National Privacy Commission. Write to jamescarlsitsit@gmail.com. Since nothing identifies you by name, include your order number.

Last updated 24 October 2026.