Privacy Policy

RentFlow PH("we", "our", "us") is committed to protecting your personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights as a data subject.

1. Information We Collect

We collect the following categories of personal information:

• Account information: full name, email address, mobile number, and password (hashed).
• Property information: property addresses, unit details, and rental amounts you enter into the platform.
• Tenant information: names, contact details, and lease terms of tenants you add to your account. You are responsible for obtaining tenant consent before entering their data.
• Payment data: transaction records, payment methods used (GCash, Maya, card), and amounts. We do not store card numbers — payment processing is handled by PayMongo, Inc.
• Usage data: browser type, IP address, pages visited, and actions taken within the platform, collected via server logs and analytics tools.
• Communications: any messages you send to our support team.

2. Legal Basis and Purpose of Processing

We process your personal information for the following purposes:

• To provide and operate the RentFlow PH platform (contractual necessity).
• To record rent payments and official receipt details (contractual and legal obligation).
• To send transactional notifications (payment receipts, maintenance updates) via email and SMS.
• To comply with Philippine tax and regulatory requirements (BIR compliance).
• To improve our services through anonymized analytics.
• To respond to support inquiries.

3. Data Sharing and Third Parties

We do not sell your personal data. We share data only as follows:

• PayMongo, Inc. — payment processing. Governed by PayMongo's own privacy policy.
• Supabase, Inc. — database and authentication hosting.
• Vercel, Inc. — application hosting and deployment infrastructure.
• Government authorities — if required by Philippine law, court order, or regulatory mandate.

All third-party processors are bound by data processing agreements consistent with RA 10173 requirements.

4. Data Retention

We retain your account data for as long as your account is active. Payment records and receipts are retained for a minimum of 10 years to comply with BIR and tax regulations. Upon account deletion, we anonymize non-required data within 30 days and delete it within 90 days, except where retention is legally required.

5. Data Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage, Row Level Security policies in our database, and access controls limiting employee access to personal data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights as a Data Subject

Under RA 10173, you have the right to:

• Access — request a copy of your personal data we hold.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Object — object to certain types of processing, including direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• File a complaint — with the National Privacy Commission (NPC) at privacy.gov.ph.

To exercise any of these rights, contact us at privacy@rentflow.ph. We will respond within 15 business days.

7. Cookies and Tracking

We use essential cookies required for authentication and session management. We may use analytics cookies (anonymized) to understand how the platform is used. You may disable non-essential cookies through your browser settings; this may affect platform functionality.

8. Children's Privacy

RentFlow PH is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 30 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related inquiries, contact our Data Protection Officer:
RentFlow PH
Email: privacy@rentflow.ph