Privacy Policy

Last updated: April 13, 2026

1. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, phone number, account type (tenant, BHO, admin)
  • Profile Information: University, student ID (for OCR verification), profile photo
  • Property Information: Boarding house details, room listings, pricing, photos, amenities (for BHOs)
  • Payment Information: Payment details processed securely through Xendit (we do not store card numbers)
  • Communications: Messages sent through the platform channels and chat features
  • Location Data: Boarding house addresses and coordinates for map-based search
2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the myBoardHub platform
  • Process reservations and facilitate payments between tenants and BHOs
  • Verify student identities through OCR processing of student IDs
  • Send transactional emails (reservation confirmations, payment receipts, account verification)
  • Enable communication between tenants and boarding house owners
  • Display boarding house locations on maps for search and discovery
  • Generate anonymous analytics to improve our service
  • Enforce our Terms of Service and protect against fraud
3. Information Sharing

We share your information only in the following circumstances:

  • Between Users: Tenant profiles are shared with BHOs upon reservation; BHO contact info is shared with confirmed tenants
  • Payment Processing: Payment data is shared with Xendit to process transactions
  • Service Providers: We use Supabase (database), Cloudflare R2 (file storage), Resend (email), and Mapbox (maps) to operate our platform
  • Legal Requirements: When required by law, regulation, or legal process

We do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

  • Database hosted on Supabase with encryption at rest
  • Files stored on Cloudflare R2 with secure access controls
  • Sessions managed with Redis and secure HTTP-only cookies
  • Passwords hashed using bcrypt
  • All data transmitted over HTTPS/TLS

While we take reasonable measures to protect your data, no system is 100% secure. We encourage you to use strong passwords and keep your credentials private.

5. Your Rights

You have the right to:

  • Access and download your personal data
  • Update or correct inaccurate information
  • Delete your account and associated data
  • Opt out of non-essential communications
  • Request information about how your data is used

To exercise these rights, contact us at privacy@myboardhub.com.

6. Cookies and Tracking

We use essential cookies for authentication and session management. These are necessary for the platform to function and cannot be disabled. We do not use third-party advertising cookies or cross-site tracking.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Payment records are retained as required by Philippine tax and commerce regulations. You may request account deletion at any time, after which we will remove your data within 30 days, except where retention is legally required.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on the platform. Your continued use of myBoardHub after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us at privacy@myboardhub.com.