Privacy Policy — Brosebo

Brosebo ("we", "us", "our") is committed to protecting your personal information in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. This Privacy Policy explains what data we collect, how we use it, and your rights as a data subject.

1. Information We Collect

Information You Provide

Account data: name, email address, phone number, and password (hashed).
Profile data: role (tenant or owner), profile photo (if uploaded).
Property data (owners): boarding house name, address, city, barangay, description, photos, pricing.
Lease & payment data: lease dates, monthly rental amount, payment records, payment method, reference numbers, proof of payment images.
Utility bill data: billing period, amount, bill type, attached bill files.
Messages & inquiries: content of messages sent through the platform.
Reviews: ratings and review text you submit.

Information Collected Automatically

Device type, browser, operating system, and IP address for security and analytics purposes.
Location data (only if you explicitly grant permission) for the "Find rooms near me" feature. This is used only at the time of the request and is not stored.
Cookies and session tokens necessary for authentication and platform functionality.

2. How We Use Your Information

To create and manage your account and authenticate your identity.
To display property listings and facilitate connections between tenants and owners.
To process and record payment submissions and lease records.
To send notifications relevant to your account (lease updates, payment status, messages).
To improve platform features and detect, prevent, or investigate fraud or abuse.
To comply with legal obligations under Philippine law.

3. Sharing of Information

We do not sell your personal data. We may share it only in these limited circumstances:

Between tenants and owners: When a lease is created, both parties can view each other's contact information and relevant lease/payment records within the platform.
Service providers: Trusted third-party services (e.g., cloud hosting, file storage) that process data on our behalf under strict confidentiality agreements.
Legal requirements: When required by a court order, law enforcement, or applicable Philippine law.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account at any time (see Section 6). After deletion, residual data may be retained for up to 90 days for backup and legal compliance purposes, after which it is permanently deleted.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Passwords are stored using one-way cryptographic hashing (bcrypt). Payment proof images are stored in a private, access-controlled directory and are not publicly accessible.

6. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data, subject to legal retention obligations.
Objection: Object to the processing of your data for specific purposes.
Portability: Receive your data in a structured, commonly used format.
Complaints: File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise these rights, contact us at privacy@brosebo.ph.

7. Cookies

We use session cookies strictly necessary for authentication and secure browsing. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some platform features may not function correctly without them.

8. Children's Privacy

Brosebo is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will promptly delete the account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of the platform after changes take effect constitutes your acceptance of the revised policy.

10. Contact & Data Protection Officer

For privacy-related concerns, please contact our Data Protection Officer at:
Email: privacy@brosebo.ph
Platform: Use the inquiry form on Brosebo.ph