Privacy notice

Last updated September 23, 2026

This explains what MagpaUpa does with personal information. As the landlord, you decide what to collect about your tenants and why. MagpaUpa processes it on your behalf to run the service.

What is collected

• Your account: name, email, password (stored only as a hash), and what you do in the app.
• Your business: properties, units, lease terms and payment details you ask to show on billing statements.
• Your tenants: names, contact details, and whatever else you enter — civil status, a government ID number, a scan of an ID, emergency contacts, a parent or guardian for a minor.
• Records of use: sign-ins, changes to records, and when a tenant ID scan is opened.
• Signing records: when a document was opened and signed, and the IP address and device it was signed from. This is kept as evidence of who signed.
• Your subscription payments: the plan, amount, method and reference number, and any proof of payment you upload.
• Emails sent through the service: who each went to, its subject, and whether it was delivered.
• Referrals: which account invited which, so both can be given their free month.
• Messages you send us from Help: what you wrote, the page you were on, any screenshot you attach, and your name and email so we can reply. Deleted with your account.
• Messages about a listing: the name, email or mobile number, move-in date and message someone sends from a listing’s page, kept for that landlord to reply. Nothing is sent to the address a renter types in.
• Reports about a listing: what was reported, and an email address if the person reporting leaves one.
• Where you came from when you created your account: the website that sent you (its name only), the first page you visited here, and any campaign tags on the link. Your browser holds this only until the tab is closed, and it is kept with your account only if you sign up.
• Error reports: when something breaks, the page it happened on, the error message, and which account was signed in. The request itself is not captured — nothing typed into a form — and the part of a web address after the question mark is removed.

Cookies and analytics

Signing in uses the cookies needed to keep you signed in and to protect the sign-in forms. There are no advertising cookies.

On the public pages — the homepage, the blog, and sign-up — we use Google Analytics to count visits and see which guides are read, but only if you choose Accept in the banner. Until you do, Google’s script is not loaded at all. If you accept, Google sets its own cookies and receives your IP address, browser and device, and the pages you visit. We have turned off its advertising features. You can change your mind at any time with Cookie settings at the foot of any page, which also deletes those cookies. Google Analytics never runs inside the app, the tenant portal, or on signing and billing-statement links. The blog’s share buttons are plain links that load nothing until they are clicked.

How it is used

To run the service you asked for: generating contracts, issuing billing statements and receipts, sending reminders and magic links, showing your tenants their own records, and keeping an audit trail. It is not sold, and it is not used for advertising.

Who else sees it

• People you invite to your account, according to the role you give them.
• A tenant, for their own records, through the tenant portal.
• Service providers that run the software: hosting, the database, file storage and the email service. They act on instructions and keep it confidential.
• Google, for analytics on the public pages — only for visitors who accept it.
• Anyone, for a listing you publish: its photos and details, while it is live. Never the street address or the unit number, and photos have their location data removed before they are stored.
• Anyone the law requires, when we are obliged to disclose.

How it is protected

Traffic is encrypted. Passwords are hashed, never stored in readable form. Uploads such as ID scans are kept in private storage and opened only through short-lived links, and each view is logged. Every organization’s records are separated at the database level, not by remembering to filter.

How long it is kept

For as long as your account exists, and afterwards only as long as needed for records the law requires you to keep. Error reports are deleted after 30 days. You can delete tenant ID scans yourself at any time. You can also delete the whole account from Settings → Your account. The deletion is carried out after seven days, and until then one button cancels it. Download your records from the same page first — deletion removes your properties, tenants, leases, contracts, billing statements, payments and uploaded files for good.

Your tenants’ rights

Under Philippine data privacy law, a tenant may ask to see, correct or delete their personal information, and to object to its use. A tenant can see what is held about them, and download a copy, themselves. The Your information page in their portal lists their details as recorded and every record kept about them, except the landlord’s own notes on the tenancy. From the same page they can send you a request to correct or remove something. Those requests come to you, their landlord. You decide, and act on them in the app. MagpaUpa will help where a request concerns how the software stores the information.

Your responsibilities as a landlord

Collect only what you actually need, tell your tenants why you are collecting it, and keep it accurate. The lease contracts MagpaUpa generates ask for the tenant’s consent to this use.