Privacy Policy

This Privacy Policy explains how Mi Casa PH collects, uses, shares, and protects your personal data when you use our website and services. We are committed to handling your information lawfully and fairly in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the issuances of the National Privacy Commission (NPC).

Last updated: June 21, 2026

1. Introduction and Scope

Mi Casa PH ("Mi Casa", "we", "us", or "our") operates an online real-estate marketplace at micasa.ph where buyers, renters, homeowners, and real-estate agents and brokers can search, compare, save, and manage property listings and enquiries across the Philippines.

This policy applies to the personal data we process through our website, lead and enquiry forms, account features, and related tools such as saved listings, the loan calculator, and value estimates. It covers home buyers and renters, homeowners, and agents and brokers who use Mi Casa.

Mi Casa is a marketplace and technology platform, not the seller, landlord, or broker for any property. Listings are supplied by agents, brokers, and homeowners, and we do not guarantee the accuracy, completeness, availability, or legality of any listing. Where this policy refers to data we control, we act as the personal information controller; where agents process the personal data of buyers who contact them, they act as separate controllers responsible for their own handling of that data.

2. Information We Collect

We collect the following categories of personal data, depending on how you use Mi Casa:

Account information: your name, email address, password (stored in hashed form by our authentication provider), account type (for example buyer or agent), and profile details such as agency name, ratings, and, for verified brokers, the PRC license details you submit for verification.
Listing and enquiry data: the details agents and homeowners publish in listings, and the information buyers and renters provide when they submit an enquiry, lead, or contact request — typically name, contact details, the property of interest, and your message. We also record listings you save and searches you run.
Tool inputs: figures you enter into features such as the loan calculator and the property you ask us to produce a value estimate for. These are used to generate the result you requested.
Usage and device data: collected automatically through analytics and monitoring services. This may include pages viewed, links and listings clicked, approximate location derived from your IP address, browser and device type, referring pages, and similar technical information. We use PostHog for product analytics, Plausible as a privacy-friendly web-analytics tool, Google Tag Manager to manage measurement tags, Vercel Analytics for traffic and site-speed measurement, and Sentry for error and performance monitoring so we can diagnose problems.
Communications: messages you send to us (for example to hello@micasa.ph) and records of enquiries you make through the platform.
Cookies and similar technologies: we and our analytics providers use cookies and similar identifiers to keep you signed in, remember preferences, and understand how the site is used. You can manage cookies through your browser settings, though disabling some may affect how the site works.

3. How We Use Your Information

We use personal data to operate and improve the Mi Casa marketplace, including to:

Create and manage your account and authenticate you when you sign in.
Show, search, and compare listings, and let you save listings and searches.
Pass your enquiry or lead to the relevant agent, broker, or homeowner so they can respond to you.
Verify broker credentials, including checking PRC license details where you submit them.
Provide tools you request, such as the loan calculator and value estimates.
Send service messages relating to your account, enquiries, or security.
Measure usage, fix errors, maintain security, and improve our features and content.
Comply with legal obligations and enforce our terms, including detecting and preventing fraud or misuse.

4. Legal Bases for Processing

Under the Data Privacy Act of 2012, we process personal data only where a lawful basis applies. Depending on the activity, we rely on one or more of the following criteria set out in the Act:

Your consent — for example when you submit an enquiry, create an account, or agree to non-essential analytics and cookies.
Performance of a contract with you, or steps taken at your request before entering one — such as providing your account, processing your enquiry, or running a tool you ask for.
Compliance with a legal obligation to which Mi Casa is subject.
Our legitimate interests (and those of agents and other users), provided these are not overridden by your fundamental rights — for example keeping the platform secure, preventing fraud, and improving our services. Where we rely on legitimate interests, we balance them against your interests and rights.

5. Sharing and Disclosure

We do not sell your personal data. We share it only as needed to run the marketplace and as described below:

With agents and brokers you contact: when you submit an enquiry or lead, the agent, broker, or homeowner responsible for that listing receives the contact details and message you provide so they can respond. They then handle your data as a separate controller under their own privacy practices.
With service providers (processors) acting on our instructions: our backend and database provider (Convex), our hosting and analytics provider (Vercel), our email provider (Resend), and our analytics and monitoring providers (PostHog, Plausible, Google Tag Manager, and Sentry). These providers process data only to deliver services to us and are bound by confidentiality and data-protection obligations.
For legal reasons: where disclosure is required to comply with the law, a lawful request from a public authority, or to establish, exercise, or defend legal claims, or to protect the rights, safety, and security of users, the public, or Mi Casa.
In a business transfer: if Mi Casa is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.

6. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy, or for as long as required to meet legal, regulatory, tax, accounting, or dispute-resolution obligations.

Account data is retained while your account is active and for a reasonable period afterwards. Enquiry and lead records are retained so agents can follow up and so we can resolve disputes. When data is no longer needed, we securely delete, anonymise, or otherwise dispose of it. You can ask us to delete your account and associated data as described in the rights section below, subject to any retention we are legally required to apply.

7. Security

We implement organisational, physical, and technical measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or misuse, in keeping with the security requirements of the Data Privacy Act.

These measures include encryption in transit, secure authentication with hashed passwords, access controls limiting who can view personal data, and reputable infrastructure and monitoring providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach occurs that is likely to put your rights and freedoms at risk, we will notify the National Privacy Commission and affected individuals as required by law.

8. Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights, which you can exercise by contacting us:

Right to be informed about how your personal data is collected and processed.
Right to access the personal data we hold about you and information about how it is processed.
Right to correct (rectify) inaccurate or outdated personal data.
Right to object to processing, including for direct marketing or where processing is based on consent or legitimate interests.
Right to erasure or blocking — to have your data removed or withheld from our systems in the circumstances allowed by law.
Right to data portability — to obtain and reuse a copy of certain data you provided, in a commonly used electronic format, where applicable.
Right to damages for harm suffered due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
Right to lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

9. International Transfers

Some of the providers we use to run Mi Casa are based or host data outside the Philippines, primarily in the United States. For example, PostHog (us.posthog.com), Vercel, and Sentry, along with our database provider Convex and email provider Resend, may process data on infrastructure located abroad.

This means your personal data may be transferred to and processed in countries other than the Philippines. Where this happens, Mi Casa remains accountable for that data in line with the accountability principle of the Data Privacy Act, and we use contractual and other reasonable safeguards to require these providers to protect your data to a standard consistent with this policy and the Act.

10. Children

Mi Casa is intended for adults transacting in or researching Philippine real estate and is not directed at children under 18. We do not knowingly collect personal data from minors.

If you believe a child has provided us with personal data, please contact us at hello@micasa.ph and we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, provide additional notice.

We encourage you to review this page periodically. Your continued use of Mi Casa after an update takes effect means you acknowledge the revised policy.

12. How to Contact Us and Exercise Your Rights

To ask a question about this policy, exercise any of your rights, or raise a privacy concern, contact us at hello@micasa.ph. We will respond within a reasonable period and may need to verify your identity before acting on a request.

Postal address: [Business address — to be added].

If you are not satisfied with how we handle your concern, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the body responsible for enforcing the Data Privacy Act of 2012.