Privacy Policy

Tenant.ph is run by Unisoft Ventures in the Philippines. It helps landlords keep their rentals' records (leases, rent, payments, deposits and documents) and gives their tenants their own view of them.

For your own account, we decide what's collected and why, so we're the personal information controller. For the details a landlord keeps about their tenants, see section 3.

Your account

• Your email address, and your password if you set one (stored only as a one-way hash).
• Your mobile number, which every account confirms with a code we text to it before using Tenant.ph. It keeps accounts real (a number can be used on at most 3 accounts) and is where reminder texts go.
• If you sign in with Google: your Google account's ID, name, email and profile picture, which we use to fill in your profile the first time.
• Whatever you add to your profile: name, phone number, photo, business name, business address and TIN, date of birth, occupation, employer and an emergency contact. Every field is optional.

Your rental records

• Properties and units, with their photos.
• Leases: the parties, rent, deposit, dates and terms, and the people living in the unit (only a name, a relationship and whether they're under 18).
• Charges, payments, receipts, statements, refunds and deposit settlements. When a tenant pays, they send a screenshot or photo of the payment as proof.
• Move-in and move-out inspections, with their photos.
• Documents added to a lease, which can include a government ID.
• Your landlord's payment details for you, such as a GCash or bank QR code.

When you agree to something

When you accept a lease, or answer an inspection or a deposit settlement, we record when you did it, your IP address and your browser's description of itself. That's the proof of who agreed to what, for both sides.

What we don't collect

We don't take card or bank details: rent is paid straight to the landlord. When a tenant pays online, they pay on the page of the landlord's payment provider (PayMongo or Xendit) into the landlord's own account, and their card or e-wallet details go to that provider, never to us: we get back only that it was paid, the amount, when and how (GCash, card and so on). When a landlord pays for a plan, they pay on Xendit's page, and their details go to Xendit. We don't use advertising or analytics trackers.

A landlord can add their tenants' details themselves, or send an invite so the tenant fills them in. Either way, the landlord decides what they need to know about their tenants and why, so they're the personal information controller for those details, and Tenant.ph processes them on the landlord's behalf.

If you're a landlord: collect only what you need to rent your unit, tell your tenants what you keep and why, and keep it accurate. A tenant who joins Tenant.ph sees their lease, their records and what they uploaded.

• To run the service: show each side its records, work out balances, and make statements, receipts and PDFs.
• To send you emails: sign-in links, leases to accept, statements, payment updates and rent reminders. You can turn reminders off from any reminder or in Settings; statements and receipts always go out, since they're records.
• To text you the same reminders, when your landlord's plan (or yours) includes SMS reminders: only to the Philippine mobile number you confirmed on your own profile. You can turn texts off in Settings without turning off emails. Besides these reminders, we only text the codes that confirm a number, and never ads.
• To keep things safe: limiting repeated attempts, and checking that records haven't been changed.
• To keep records as the law and a fair dispute need (see section 8).

We don't use your data for advertising, and we don't sell or rent it to anyone.

• A lease's records (terms, charges, payments, statements, inspections, deposit and documents) are seen by its landlord and its tenants, and no one else.
• Your landlord sees what you send them: payment proofs, your answers, your documents, and the email of the account that accepted the lease.
• Your tenants see your name or business name and your email on their lease and statements, and the payment details you set up.
• Your profile photo is seen only by you. A tenant's photo is seen only by them and their landlord.

Private files (IDs, payment proofs, inspection photos, statements) are never public: each one opens through a short-lived link, only for someone allowed to see it. Property photos you add for a listing are public.

A few companies run parts of Tenant.ph for us, and see only what that part needs:

• hosting and file storage, such as Amazon Web Services;
• an email delivery service, to send our emails;
• Xendit, to take landlords' payments for their plans: it gets the landlord's email address, our account number for them, the amount and what it's for (we don't send their name, though an email address may contain it);
• UniSMS, to send SMS reminders on Plus and Pro and the codes that confirm a number: it gets the mobile number and the text (a reminder can name the unit, a date and an amount);
• PayMongo or Xendit, when a landlord connects their own account with one of them so their tenants can pay online. It's the landlord's payment provider, under its own terms and privacy policy. We send it the amount, the lease's reference and unit, and where to send the tenant back (never the tenant's name, email or number); it tells us when a payment goes through. The landlord's secret key (and, for Xendit, their webhook verification token) is stored encrypted and used only for their tenants' payments, and deleted a few days after they disconnect (for Xendit we keep only a one-way fingerprint of the token, which can't be turned back into it, to recognise notifications from that account);
• Google, only if you choose to sign in with Google.

They may process data outside the Philippines. We'll share data with authorities only when the law requires it.

• Everything travels over an encrypted connection.
• Passwords are stored only as hashes, and sign-in links expire.
• Private files are stored apart from public ones, and are checked when they're uploaded.
• Leases, payments and statements can't be edited once made: corrections are added as new entries, so the history stays whole. Important documents carry a fingerprint you can check.

No system is perfectly safe. If a breach puts your data at risk, we'll tell you and the National Privacy Commission as the law requires.

Leases, charges, payments, statements, signatures and inspections are kept as records for as long as your account exists, even after a lease ends: both sides may need them later, for taxes or a dispute.

• A removed document's file is deleted. A note that it existed stays in the lease's history; for an ID, not even its name.
• Photos and files that were uploaded but never saved are deleted within about a day.
• A record of each reminder we sent, by email or text (to which address or number, and when), and who asked us to stop them, so we never send one twice or after you've said stop. Confirmation codes work for 10 minutes and are deleted within half an hour of being sent; the number a code was sent to, and which account asked for it, are kept about a week, so we can count how many codes go out.

If you close your account, we delete what we can. What another person's lease still relies on (a statement they were sent, a lease they signed) is kept as a record, as the law allows, and we'll tell you what that is.

We use only the cookies Tenant.ph needs to work: one that keeps you signed in, one that remembers you for up to 14 days if you choose "Log in and stay logged in", and one that protects forms from forgery. No advertising or tracking cookies.

Under the Data Privacy Act of 2012 you have the right to:

• be told what we collect and why (this page);
• see the data we hold about you, and get a copy;
• have wrong or incomplete data corrected;
• object to how we use it, or ask us to block or delete it;
• take your data elsewhere in a usable format;
• be compensated for damage from wrong use of your data;
• complain to the National Privacy Commission.

You can change your profile at any time, and download your statements and documents from the app. For anything else, write to us (section 13). We aim to answer within 15 working days. If it's about details your landlord keeps, we'll help you reach them, since they decide about those.

A lease's history can't be erased while the other side relies on it, but a wrong entry can always be corrected with a new one.

Tenant.ph is for adults. A lease can list children living in the unit, but only their name, their relationship to the tenant and that they're under 18: no birthdates, IDs or photos.

When we change this policy, we'll publish the new version here with a new version number and date. If the change affects how we use your data, we'll tell you by email before it takes effect.

For privacy questions or to use your rights, write to our data protection officer at support@tenant.ph. Unisoft Ventures, Philippines.