Privacy policy

Nest (“Nest”, “we”, “us”) operates an online rental platform that connects renters and landlords in the Philippines. We act as the personal information controller for the data described here, and we follow the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

• Account details: your name, email address, phone number, role (renter or landlord) and profile photo. If you sign in with Google we receive your name, email and photo from Google.
• Listings: for landlords, the property address, map location, photos, video tours, price, terms and availability you add.
• Applications: for renters, the details you submit when applying, such as employment, income, rental history, occupants, pets, and supporting documents like IDs or payslips.
• Messages: chats between renters and landlords in the Nest inbox.
• Leases: the contract text, your typed name, the time you signed, and the IP address and browser used to sign, which we keep as evidence of the signature.
• Payments: renters pay landlords directly, so we never see your e-wallet or card credentials. We keep the amount, status, GCash reference number and any payment screenshot you upload, plus the e-receipts we issue. Landlords give us the GCash QR code, account name and number they want renters to pay.
• Technical data: basic logs such as IP address, device and browser type, used to keep the service secure and working.

• To run your account and show your listings or applications to the right people.
• To let landlords review applications for their own listings, and to let both sides chat, sign leases and complete move-in payments.
• To record payments between renters and landlords and issue e-receipts to both.
• To send service emails and notifications (for example, “your application was approved”).
• To review listings, prevent fraud and keep Nest safe.
• To comply with legal obligations, such as tax and anti-money-laundering record keeping.

We do not sell your personal data, and we do not use it for third-party advertising.

Other users: when you apply, the landlord of that listing sees your application and documents. When you list, renters see your listing and first name. Lease and payment details are shared between the two parties to that lease.

Service providers who process data for us under contract:

• Supabase: database, sign-in and file storage
• Vercel: website hosting
• Google (Gmail) and Resend: transactional email
• Google: optional “Continue with Google” sign-in
• MapTiler and OpenStreetMap: maps and address search

Authorities, when required by law or to protect the rights and safety of our users.

We keep your account data while your account is active. Signed leases and payment records are kept for as long as the law requires (generally up to ten years for financial records). Application documents are kept only as long as needed to process the application and resolve any dispute, unless the law requires otherwise.

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, and to claim damages. You can also file a complaint with the National Privacy Commission.

To use any of these rights, contact us. We may ask you to confirm your identity first.

We use encryption in transit, database access rules, and private storage for sensitive documents. Read more on our data security page.

We will update this page when our practices change and, for significant changes, let you know by email or in the app.