Privacy Policy

1. Information We Collect

We collect only what is necessary to operate the platform:

• Account information — name, email address, and (if you register with email/password) a hashed password. If you sign in with Google, we receive your name, email address, and profile photo from Google.
• Listing content — property details, photos, location, and pricing that you voluntarily submit when posting a listing.
• Inquiry messages — name, email, phone number, and message text you submit through a listing's inquiry form.
• Saved listings — the listings you bookmark while logged in.
• Usage data — page views, listing view counts, and standard server logs (IP address, browser type, referring URL). We do not sell or share this data.

2. How We Use Your Information

• To create and manage your account.
• To display your listings and agent profile to prospective buyers and renters.
• To deliver inquiry messages to the relevant agent or seller.
• To send transactional emails (inquiry notifications, account-related messages). We do not send marketing email without your explicit consent.
• To detect and prevent fraud or abuse.
• To comply with legal obligations under Philippine law.

3. Google Sign-In

When you choose to sign in with Google, we receive your name, email address, and profile photo from Google. We do not request access to your Gmail, contacts, or any other Google data.

Your Google account is linked to your BahayFind account solely to authenticate you. You can disconnect it by emailing us at info@bahayfind.com or by deleting your account.

4. Sharing Your Information

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers — we use Neon (database hosting), Cloudflare R2 (photo storage), and Resend (email delivery). Each processes only the data needed to provide their service and is bound by data processing agreements.
• Public listing content — information you include in a listing (title, location, price, photos, contact details) is visible to the public by design.
• Legal requirement — if required by Philippine law, court order, or government authority.

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we remove your personal information within 30 days. Anonymised aggregated statistics (e.g., total listing view counts) may be retained indefinitely as they cannot identify you.

6. Your Rights (RA 10173)

Under the Data Privacy Act of 2012 you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete information via your dashboard or by emailing us.
• Erasure / Blocking — request deletion of your personal data. See our Data Deletion page for details.
• Object — object to processing of your personal data in certain circumstances.
• Data Portability — request your data in a structured, machine-readable format.
• Complain — lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your rights have been violated.

To exercise any right, email info@bahayfind.com. We will respond within 15 business days.

7. Security

Passwords are hashed using bcrypt and never stored in plain text. All data in transit is encrypted via TLS. Photo uploads are stored on Cloudflare R2 with access controls. We conduct periodic reviews of our security practices.

No system is perfectly secure. If you suspect a security issue, please contact us immediately at info@bahayfind.com.

8. Cookies

We use a single session cookie to keep you logged in (NextAuth.js session token). We do not use advertising cookies or third-party tracking cookies.

9. Children

BahayFind is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of BahayFind after a change constitutes acceptance of the updated policy.