Privacy Policy

Soofair is property-management software at soofair.com, built for landlords, tenants, and brokers. It is currently in free early access and is operated by its founder. This policy explains what information we collect, why, and the choices you have. It is written to align with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Account information: your name and email address, plus your password — stored only as a salted hash using an industry-standard algorithm (bcrypt-style). We never keep or see your plaintext password.

Property and tenancy records you enter: properties, units, tenants, leases, and payment records, along with any proof-of-payment images and documents you upload.

Inquiry and viewing messages exchanged between landlords, tenants, and brokers through the platform.

Basic server logs, such as request timestamps and IP addresses, kept for security and troubleshooting.

Soofair sets a single signed session token (JWT) in a secure, HTTP-only cookie to keep you logged in. That is the only cookie we rely on — we use no advertising trackers and no third-party analytics cookies.

To provide the service: keeping your rental records, coordinating inquiries and viewings, and sending service emails such as account notices.

To secure your account and prevent misuse of the platform.

We do not sell your personal information, and we do not show third-party advertising.

Soofair runs on a small set of infrastructure providers: Vercel (application hosting; server functions run in the Singapore region), Neon (our Postgres database, hosted in Singapore), Vercel Blob (storage for uploaded files and images), Resend (transactional email, processed in the United States), and GoDaddy (domain and email services).

This means your data may be processed outside the Philippines — primarily in Singapore, with email delivery in the United States. We share with these providers only what is needed to run the service.

Under the Data Privacy Act you have the right to access, correct, and delete your personal data, to object to certain processing, and to data portability.

To be upfront: there is no self-serve “delete my account” button yet. To delete your account and data, email hello@soofair.com and we will complete the deletion within 30 days. You can request an export of your data at the same address.

We keep your data for as long as your account is active, so your records are there when you need them. When you request deletion, we remove your account and its data within 30 days as described above.

We may update this policy as the product evolves. Material changes will be reflected here with a new “Last updated” date. Questions or requests? Email hello@soofair.com.