Data security

Every page and API request on Nest is served over HTTPS, so data is encrypted between your device and our servers. Data is stored with our infrastructure providers, which encrypt it at rest.

• Database access rules (row-level security) make sure you can only read your own account, applications, messages and leases.
• Application documents are stored in a private folder. Only the renter who uploaded them and the landlord of that listing can open them, through short-lived links.

Nest never handles your money. Renters pay landlords directly through the landlord’s own GCash QR, so Nest never sees your e-wallet PIN or card number. Payment screenshots are stored in a private folder that only the renter and landlord can open, through short-lived links. Each payment can be confirmed only once, so only one e-receipt is ever issued for it.

Leases are signed with a one-time code sent to your email. We record a fingerprint of the exact contract text, the time, and the device that signed, so any later change to the document can be detected.

• Use a unique password, or sign in with Google.
• Nest will never ask for your password or a one-time code by phone, chat or email.
• Never pay a deposit or reservation fee before your lease is signed in Nest, and only pay the GCash QR shown in the app.

If you think you have found a vulnerability or see suspicious activity, please contact us right away. We investigate every report and will not take action against good-faith research that respects our users’ privacy.