Privacy Policy

1. Information We Collect

We collect the following types of information:

1.1 Information you provide directly

• Full name, email address, and mobile number (during registration)
• Profile photo and short biography
• Government-issued ID (for identity verification)
• Property listing details (photos, address, pricing, descriptions, house rules)
• Messages sent through the platform
• Payment information for subscription plans
• Payment records logged through the Payment Tracking feature
• Support tickets and their contents
• Saved search filters and preferences
• Reviews and ratings submitted for properties and lessors

1.2 Information collected automatically

• Device information (browser type, operating system)
• IP address and approximate location
• Pages visited, features used, and time spent on the platform
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Verify your identity (government ID verification process)
• Facilitate communication between lessors and lessees
• Process subscription payments via Stripe or GCash
• Send notifications about reservations, messages, and account updates
• Improve our platform, fix bugs, and develop new features
• Detect and prevent fraud, spam, and policy violations
• Comply with legal obligations

3. How We Store & Protect Your Data

• Data is stored securely using MongoDB with encrypted connections.
• Passwords are hashed using bcrypt and never stored in plain text.
• Images and IDs are stored via Cloudinary with access controls.
• Payment data is processed by Stripe — we never store full card details.
• Access to personal data is restricted to authorized personnel only.

While we implement industry-standard security measures, no system is 100% secure. We encourage users to use strong passwords and keep credentials confidential.

4. Sharing Your Information

We do not sell your personal information. We may share data with:

• Other users — your public profile (name, photo, contact number) is visible to users you interact with.
• Service providers — Cloudinary (image hosting), Stripe (payments), Pusher (real-time messaging), Nodemailer (email).
• Law enforcement — if required by Philippine law or valid legal process.
• Moderation team — to investigate reports and enforce community guidelines.

5. Cookies

CaviteNest uses cookies to maintain your session, remember your preferences (such as dark/light mode), and improve performance. You may disable cookies in your browser settings, but some features may not function properly.

6. Data Retention

• Account data is retained as long as your account is active.
• Government IDs are retained for verification purposes and deleted 30 days after account termination.
• Messages are retained for the duration of the conversation unless deleted by users.
• Deleted accounts are purged from our systems within 90 days.

7. Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update or correct inaccurate information.
• Erasure — request deletion of your account and personal data.
• Object — object to processing of your data for specific purposes.
• Portability — receive your data in a structured, commonly used format.

To exercise any of these rights, email us at cavitenest.official@gmail.com.

8. Children's Privacy

CaviteNest is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: cavitenest.official@gmail.com

You may also file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.