Skip to content

Privacy notice

Draft — requires review by a Data Protection Officer / counsel

Structured around the Data Privacy Act of 2012 (RA 10173), its IRR and NPC circulars. Retention periods are configurable by administrators.

Personal information controller. [Company name, address, DPO contact — to be completed. NPC registration to be confirmed.]

What we collect. Account data (name, e-mail, mobile number), messages, viewing requests, rental applications you choose to submit (move-in date, occupants, employment status, declared income, uploaded documents), verification documents of advertisers, and technical logs.

What we never use for matching or ranking. Religion, ethnicity, nationality, gender, sexual orientation, family or marital status, age, health or disability.

Purposes and legal bases. Providing the service (contract), fraud prevention and verification (legitimate interest / legal obligation), sharing your application with a landlord (your explicit consent, recorded with a version and timestamp), marketing (opt-in consent, withdrawable anytime).

Retention. Application documents are purged after the configured period following a decision; identity documents submitted for verification are purged after the configured period following the decision; search logs are kept for a short period.

Your rights. Access, correction, erasure or blocking, objection, data portability and complaint to the National Privacy Commission. Requests can be made from “My space → Privacy”.

Security. Encryption in transit (TLS) and at rest (managed database and storage), private document storage with short-lived links, role-based access and audit logs.