Privacy Policy

myBoardHub Technologies, Inc. (“myBoardHub”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website www.myboardhub.com, our applications, and the services we offer (collectively, the “Platform”).

This policy is designed to comply with the Philippine Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations.

By using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Platform.

Personal Information Controller:

myBoardHub Technologies, Inc.
Iligan City, Philippines
Email: privacy@myboardhub.com

Data Protection Officer:

Email: dpo@myboardhub.com

This policy applies to:

• Tenants and students who create accounts and book accommodations
• Boarding House Owners (BHOs) who list properties on the Platform
• Parents and guardians who access tenant information through linked accounts
• Website visitors who browse without creating an account

4.1 Information you provide directly

• Account information: Full name, email, password (hashed), contact number, date of birth
• For tenants: University or school, student ID image (for verification), gender, emergency contact, parent/guardian contact
• For BHOs: Business name, property addresses, property details, bank account or GCash details for payouts, business registration documents (if provided)
• Payment information: Processed by our payment partner Xendit; we do not store card numbers. We may retain payment references, last four digits of cards, and payment method type.
• Communications: Support chat transcripts, emails to us, reviews and messages exchanged on the Platform

4.2 Information we collect automatically

• Device and technical data: IP address, browser type, operating system, device identifier, referring URL
• Usage data: Pages visited, clicks, session duration, features used
• Location data: With your permission, your approximate location for proximity-based search; property locations (latitude/longitude) for mapping

4.3 Information from third parties

• Google OAuth: If you register or log in via Google, we receive your name, email, and profile photo as permitted by your Google settings
• Payment providers: Confirmation of transactions from Xendit
• Identity verification: OCR-extracted details from the student ID you upload

4.4 Sensitive Personal Information

Some information we collect qualifies as Sensitive Personal Information under the Data Privacy Act, including images of your government-issued or school-issued ID and, where provided, information about your age or gender. We process this only with your consent and for the specific purposes stated in Section 5.

We use your information for the following purposes:

We share your information only as described below:

• With other Platform users: Tenants see BHO contact info once a reservation is made; BHOs see tenant name, university, and student ID image for verification; parents/guardians see tenant reservation details if linked
• With service providers who help us operate: Xendit (payments), Resend (email), Supabase (database/hosting), Cloudflare (storage, DNS, edge), Mapbox (mapping), Tesseract (OCR — runs locally; no data sent to third parties)
• With law enforcement and regulators when legally required — NPC, BIR, AMLC, courts, and other authorities as compelled by valid legal process
• In corporate transactions — in connection with a merger, acquisition, or sale of assets, with appropriate safeguards

We do not sell your personal information.

Some of our service providers (Supabase, Cloudflare, Resend, Xendit) may process your data outside the Philippines. We rely on standard contractual protections and the commitments of these providers to maintain adequate safeguards consistent with the Data Privacy Act.

• Active accounts: Retained while your account is active, plus 5 years after account closure for tax and regulatory purposes
• Financial records: 10 years (Philippine tax law)
• Student ID images: Retained only as long as needed for verification plus 1 year, unless required for investigation of fraud
• Marketing consent records: Until withdrawn plus 2 years
• Website analytics data: 24 months, typically aggregated

After the applicable retention period, data is deleted or de-identified.

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about the processing of your data
• Access the data we hold about you
• Object to certain processing (e.g., marketing)
• Rectify inaccurate or outdated information
• Erase or block your data in certain circumstances
• Data portability — receive your data in a commonly used format
• File a complaint with the National Privacy Commission
• Damages if you suffer harm from unlawful processing

To exercise any of these rights, email privacy@myboardhub.com with the subject line “Data Subject Request”. We will acknowledge your request within 72 hours and resolve it within 30 days.

We implement organizational, physical, and technical safeguards including:

• Encryption in transit (HTTPS/TLS) and at rest
• Role-based access control with least-privilege principle
• Password hashing (bcrypt)
• Session management via Redis with secure HTTP-only tokens
• Audit logs for access to sensitive data
• Annual security reviews
• Background checks and training for personnel with access to personal data

No method of transmission or storage is 100% secure. We take reasonable measures to protect your data but cannot guarantee absolute security. We encourage you to use strong passwords and keep your credentials private.

We use cookies and similar technologies for:

• Strictly necessary: Session management and authentication
• Preferences: Language settings, saved filters
• Analytics: Aggregated usage statistics

You can control cookies through your browser settings. See our separate Cookie Policy for details. We do not use third-party advertising cookies or cross-site tracking.

The Platform is intended for users 18 years of age or older. Students under 18 may use the Platform only with the consent of a parent or guardian. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Material changes will be notified via email or through a prominent notice on the Platform at least 14 days before taking effect. Your continued use of myBoardHub after changes are posted constitutes acceptance of the updated policy.

Questions or concerns about this Privacy Policy?

• Email: privacy@myboardhub.com
• Data Protection Officer: dpo@myboardhub.com
• Mail: Iligan City, Philippines

You may file a complaint with the NPC if you believe your data privacy rights have been violated: