Privacy Policy

Moventa is an online platform operated from the Philippines. Its operator is the personal information controller for everything described in this policy — the party that decides what is collected, why, and how it is handled.

For any privacy question, correction, or complaint, reach us through our Contact page — it is the fastest route, and it creates a ticket we can track.

Information you give us directly.

• Account details — your email address, username, display name, password (stored only as a secure one-way hash, never as text we can read), and optionally your phone number and profile photo.
• Realtor profile — your bio, licence number, agency, years of experience, specialties, service area, cover photo, and social links. Anything you put in your profile is publicly visible, including your licence number.
• Property listings — titles, descriptions, prices, locations, property details, and photos you upload. These are public.
• Messages — the content of conversations you have with other users, and any images you attach.
• Lead information — when you contact a realtor, that realtor receives your name, email address, and phone number if you provided one, and can keep private notes about the conversation in their own CRM.
• Payment information — for Moventa Pro, the GCash reference number you enter and the receipt screenshot you upload. We never see or store your card details, and there is no stored payment instrument on your account.
• Support and reports — anything you write in a support ticket, a contact form, an abuse report, or an appeal, including attachments.

Information we collect automatically.

• Your IP address, recorded with security-relevant actions, with listing and profile views, and in our server logs. See section 7 for how we use it.
• Your browser type and version (the "user agent"), recorded alongside security-relevant actions and in server logs.
• Usage events — which pages you visit and which actions you take, so we can see where people get stuck. These records contain no IP address, and web addresses are stored without their query strings.
• Public page visits — when you view one of our public pages (the home page, listings, realtor profiles, and our information pages) we record which page it was, so we can see which parts of the site people find useful. Alongside it we record the kind of device you used (desktop, mobile or tablet), the family of your browser and operating system (for example "Chrome" and "Android"), the website you came from, and any campaign label in the link you followed.
• What those visit records never contain: your IP address, the full identifying text your browser sends about itself, your name, your account, or the query string of any address. We keep the general category, not the detail — "a mobile Chrome visitor on Android" describes a very large number of people, which is the point. We do not record visits to pages you need an account to see, such as your dashboard, your messages, or your billing pages.
• Public page visits reported to Meta. Separately from our own records above, our public pages carry the Meta Pixel so we can measure whether our advertising on Facebook and Instagram works. Where our own records deliberately hold no IP address, what the pixel sends to Meta does: the address of the public page, your IP address, your browser's user-agent string, and a random identifier Meta stores in your browser as the _fbp cookie. It runs only on public pages — never on your dashboard, messages, CRM or billing pages — and we never send Meta your name, your email address, your account, or anything you have typed into Moventa. Section 8 covers Meta as a service provider; the Cookie Policy lists the cookies and how to stop them.
• Trust signals — recommendations and endorsements you give or receive, and how quickly you reply to messages, which together produce a public activity score.

We do not collect your precise location, we do not use device fingerprinting, and we do not buy personal information about you from anyone.

If you choose to sign in to Moventa with your Google account, Google confirms your identity to us and provides your name and verified email address. We use these to create or access your Moventa account and to contact you about your account. We do not request or receive access to Gmail, Google Drive, your contacts, or any other Google data, and Moventa never receives your Google password. You can instead register and sign in with an email address and password.

You should also know the reverse: the Google sign-in button is loaded from Google's own servers, so Google can see that you visited a page containing it — such as our sign-in and registration pages — including your IP address and browser, whether or not you use the button.

We use your information to:

• create and operate your account, and verify your email address;
• publish the profile and listings you choose to publish;
• deliver messages between you and other users;
• process Moventa Pro payments and keep the financial records we are required to keep;
• send you the notifications described in section 6;
• calculate the public activity score shown on realtor profiles, from recommendations, endorsements, profile completeness, and response times;
• investigate reports of fraud, scams, impersonation, harassment, and other abuse, and take action on accounts and listings that break our Terms of Service;
• protect the platform from automated abuse, spam, and attacks;
• understand how the product is used, so we can improve it;
• comply with legal obligations and respond to lawful requests.

We do not sell your personal information.

We do advertise Moventa, and we measure whether that advertising works. That is the only purpose the Meta Pixel on our public pages serves: telling us that someone who saw one of our adverts came to look at Moventa, and letting us show our adverts again to people who have visited our public pages. It does not run on any page you need an account to see, and it is not used to decide what Moventa shows you — no listing, no realtor, and no price on this site is affected by it. Sections 2 and 8 say what Meta receives; the Cookie Policy says how to stop it.

Moventa uses very little of this. In full, it is:

• One cookie of our own — moventa_ref, set only if you arrive through someone's referral link, so we can credit that person if you later subscribe. It lasts 30 days and contains nothing but the referral code.
• Up to two cookies set by the Meta Pixel on our public pages — _fbp, a random identifier for your browser, and _fbc, set only if you arrived by clicking one of our adverts. Both last 90 days. They are written by Meta's script rather than by us, we do not read them, and they are the only advertising cookies on this site. The Cookie Policy explains how to block them.
• Browser local storage — holds your sign-in tokens so you stay signed in, and your light/dark theme preference. Signing out removes the tokens.
• Browser session storage — holds a random, anonymous identifier used to group usage events from a single visit. It is not linked to your name or email, and it is discarded when you close the tab.
• A visit marker in local storage — a random value that lets us tell one person opening three tabs apart from three different people. It is replaced with a new random value every 24 hours, so it cannot be used to follow you from one day to the next. It is not derived from anything about you or your device, it is never sent anywhere except to us, and clearing your browser storage removes it.

Apart from the two Meta Pixel cookies above, there are no advertising or third-party tracking cookies on this site, and we use no analytics cookies at all — our own usage measurement does not need one. Our full cookie disclosure is on the Cookie Policy page.

Some email is necessary to operate your account and cannot be switched off while your account exists: email verification, password resets, security notices, billing and payment confirmations, moderation and appeal decisions, support replies, and account-deletion notices.

Everything else is optional and can be turned on or off at any time in your notification preferences: message notifications, lead notifications, billing reminders, referral campaign updates, product updates, our newsletter, and marketing. Product updates, the newsletter, and marketing are off unless you turn them on — we do not treat the absence of a choice as consent.

Optional email carries a one-click unsubscribe link. If you unsubscribe, we record that against your email address so it keeps working even if you later change your account settings. Deleting your account stops all Moventa email except the messages that let you restore it.

By default, message notification emails tell you that you have a message but do not quote its contents, because email can be read by anyone with access to your inbox. You can change that in your preferences.

We record IP addresses with security-relevant actions, with listing and profile views, and in our server logs. We use them to apply rate limits, to detect duplicate or fraudulent accounts in our referral programme, and to investigate abuse.

We also use IP addresses to block access. If our systems detect automated abuse — for example, a very high volume of requests, or a hidden link that only automated scrapers follow — the originating IP address may be blocked temporarily, normally for one hour. Automatic blocks always expire. If you believe you have been blocked in error, please contact us.

Other users. Your profile and listings are public. If you message a realtor, or a realtor messages you, each of you can see the other's name, profile photo, and email address, and a realtor who receives an enquiry from you also receives your phone number if your account has one.

Moventa staff. Our administrators can access account records, payment records, reports and appeals, support tickets, and — where necessary to investigate a report of abuse or a safety concern — the contents of conversations.

Service providers. We use a small number of companies to run Moventa. They process information on our behalf, for the purposes below and no others:

• Cloudinary — stores and delivers every image uploaded to Moventa, including profile photos, listing photos, message attachments, support attachments, and payment receipt screenshots.
• Render — hosts our application servers, our database, and our cache. Our database is hosted in Singapore. Our server logs are held here.
• Vercel — hosts and delivers this website.
• Hostinger — sends our email.
• Google — provides the optional Google sign-in described in section 3.
• Sentry — receives technical error reports when something breaks. These are configured to exclude your IP address, email, name, cookies, request contents, and web address query strings; the only identifier included is your internal account ID.

Meta, which is not in that list, and why. Every company above handles information only on our instructions. Meta Platforms — Facebook and Instagram — is different, and we would rather say so plainly than file it alongside them. When you visit one of our public pages, the Meta Pixel described in sections 2 and 4 tells Meta the address of that page together with your IP address, your browser's user-agent string and the _fbp identifier. Meta then handles that information under its own policies and for its own purposes as well as ours, which means we cannot promise you what it is used for beyond our own purpose of measuring our advertising. What we can tell you is the boundary: the pixel is on public pages only, it never runs on a page you need an account to see, and we never send Meta your name, your email address, your account, or anything you have typed into Moventa. Meta's own terms for this are its Privacy Policy, and the Cookie Policy explains how to stop it.

Legal and safety. We may disclose information where we are legally required to, or where it is necessary to investigate fraud or protect someone's safety.

We do not sell your personal information to anyone.

Some of the companies named in section 8 process information outside the Philippines. Our database is hosted in Singapore; Cloudinary, Sentry, Google, Vercel, and Meta operate from or across other countries, including the United States. This means your information may be transferred to and stored in countries whose data protection laws differ from Philippine law. We remain responsible for the information we hold, and we require our service providers to process it only for the purposes we set. Meta is the exception described in section 8: it also uses what the pixel sends for its own purposes, under its own policies, and the transfer to it happens directly from your browser.

The main periods are:

• Your account and profile — while your account is open. When you delete it, we keep it recoverable for 30 days, then permanently remove or anonymise it.
• Security records — 365 days, then automatically deleted.
• Usage events — 180 days, then automatically deleted.
• Public page visits — 90 days for the individual visit records, then automatically deleted. We keep the daily totals built from them for up to three years, so that we can compare one year against another; those totals are counts only and identify nobody.
• Listing and profile view records — 90 days, then automatically deleted. These are the records described in section 7 that carry an IP address.
• Payment and billing records, including GCash reference numbers and receipt screenshots — retained after account deletion so that we can meet financial record-keeping obligations. The exact period is currently under review with our advisers; we will state it here once it is settled.
• Messages you have sent — remain visible to the person you sent them to even after you delete your account, because they are part of that person's record of the conversation. Your name is removed from your account.
• Unsubscribe records — kept indefinitely, so that an unsubscribe is not undone by a later change.

Some records — reports of abuse, appeals, and moderation decisions — are kept while they remain relevant to protecting the platform.

One period is not ours to state. What the Meta Pixel sends is held by Meta under Meta's own retention policies, not ours, and we are not going to publish a figure we cannot enforce. The two cookies it sets in your browser last 90 days, and you can delete them at any time — see the Cookie Policy.

Under Philippine data privacy law you have the right to:

• Be informed about how your information is handled — that is what this page is for.
• Access your information, and get a copy of it. You can see and edit most of it directly in your profile, and you can download a full copy — account, profile, listings, conversations, leads, referrals, billing history and preferences — from Privacy & Data at any time. Other people appear in it by display name only. If something you need is not in the download, ask us through the Contact page.
• Correct inaccurate information. You can edit your name, phone number, photo, and all profile fields yourself. Your email address cannot currently be changed from your profile — please contact us and we will change it for you.
• Object to or withdraw consent for optional email, at any time, in your notification preferences.
• Erasure — delete your account at any time from Privacy & Data. That page tells you exactly what is deleted and what is kept before you confirm, and gives you 30 days to change your mind. Some records, described in section 10, are kept for legal or safety reasons.
• Complain — see section 13.

We do not charge for these requests. We may need to confirm your identity before acting on one.

Concretely:

• all traffic to Moventa is encrypted in transit (HTTPS, enforced);
• passwords are stored only as salted one-way hashes, and repeated failed sign-in attempts temporarily lock an account;
• access to your data is checked on every request against the account making it, and administrative access is restricted to administrator accounts;
• sensitive values — passwords, tokens, and similar — are stripped from our logs and error reports;
• uploaded files are validated by content, not just by file name.

No system is perfectly secure. If we discover a breach that puts your rights at serious risk, we will notify you and the National Privacy Commission as required by law.

If you are unhappy with how we have handled your information, please tell us first through the Contact page so we have a chance to put it right. If you are not satisfied with our response, you may complain to the National Privacy Commission of the Philippines.

Moventa is intended for adults transacting in property. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has created an account, please tell us and we will remove it.

If we change this policy, we will update the date at the top of this page. If a change materially affects your rights, we will make a reasonable effort to tell you in the product before it takes effect.