Privacy Notice
Version 2026-10-20-qa
Who manages your information
The RentWise AI capstone project team administers this academic platform. Direct privacy requests to contact@rentwise.cc. This notice covers information submitted to the website; it does not cover separate arrangements made directly with a rental owner.
Registration and identity checks
We collect your name, email, phone number, birthdate, account role, password hash, ID document, and selfie. Birthdate is used to check the 18+ account requirement. ID and selfie are used for administrator identity review. Registration records store the date and version of your Terms acceptance, Privacy Notice acknowledgement, and identity-processing consent.
Your birthdate, ID, selfie, and owner supporting-document files are not displayed publicly or shared with owners for browsing analytics. Authorized administrators review verification documents. Owner documents may include a permit, clearance, or proof of authority relevant to identity or rental authority. The public owner profile may show whether a business permit was submitted and reviewed, without publishing the document itself. This status is not a guarantee of licensing, ownership, safety, or legal recourse.
Documents are stored in the website's nonpublic verification directory. Identity processing requires the separate registration consent. If you do not consent, you may browse public listings without creating a verified account.
Platform activity
We store listings, reviews, messages, saved searches, favorites, views, simulated reservations and payments, approval records, and security logs as needed for their related features and investigations. Logs can include IP addresses and browser information. Reviews are visible to people browsing listings. Messages are available to conversation participants through the application. Authorized platform administrators manage the underlying system and data.
Optional sharing and personalization
Account Privacy settings control the available profile-sharing, owner-activity sharing, personalization, and match-notification options. Activity sharing with owners starts disabled for new accounts. Optional permissions are separate from the required identity-processing consent. Changing a setting affects the corresponding feature; it does not automatically erase every previously stored record.
Named viewer activity
Named viewer activity has a separate, off-by-default consent switch. If enabled, the relevant listing owner can see your full name, listing-view dates and view count for views made while consent was enabled. Owners do not receive your email, phone number, birthdate, ID documents or IP address through this table. Prior anonymous views are not retrospectively identified. Turning the switch off hides named activity immediately and clears its sharing markers, so enabling it again does not restore older named entries.
Local chat moderation
Messages are checked on the server against a local English/Filipino profanity list before storage or delivery. Some common obfuscations are checked. The filter can miss abusive language or reject an innocent use of a word; revise the message or contact support if necessary. Messages are not sent to an external AI service for this check. A rejected draft is temporarily retained in your session so you can edit it, but is not added to the conversation.
Service providers
The contact form uses your signed-in account's verified email as the reply address and sends your subject and message to the project support inbox. The form does not accept a different sender address. Rate-limit records contain your account ID, a hashed network address and request time, not the message body; records older than 30 days are cleared on subsequent submissions. Hashed network lock keys are retained to enforce request limits. Email copies remain in the support inbox and with its delivery provider until removed under their respective retention procedures.
The hosting and database providers store platform records. Resend processes account email delivery and contact emails. Google Maps provides maps. OpenAI receives search or listing text and review comments used for language and recommendation features. PayPal Sandbox processes simulated checkout information. These external services may process information outside the Philippines under their own terms. Birthdates, identity documents, and selfies are not intentionally included in AI analysis requests. Do not put private identity or payment details in public reviews or search text.
Retention and privacy requests
Account and verification records remain stored while the account is maintained, subject to review of necessity and applicable obligations. Contact the team to request access, correction, deletion, restriction, or withdrawal of consent. Requests are reviewed manually; deletion is not an automated feature. Withdrawal may prevent continued use of a verified account. Some records may need to be retained for legitimate security investigations or legal obligations, with the reason explained when responding to a request.
No automatic expiry schedule for identity uploads is currently implemented. This notice does not promise automatic deletion. The operating team must approve a retention schedule and establish a deletion procedure before using the platform beyond the academic demonstration.
Your choices and concerns
You may request information about how your data is used and raise concerns with the project team or the National Privacy Commission. We may need proportionate identity checks before disclosing or changing private records. Do not send another copy of a sensitive ID by ordinary email unless an appropriate verification procedure has been arranged.