Privacy Policy

We only collect what the marketplace needs to work:

• Account details: your email address and password (stored scrambled by our sign-in provider; we can never see it). If you continue with Google, we receive your name, email address and Google profile photo.
• Profile: the name, university and profile photo you choose to show.
• Listings: item photos, title, description, price or swap wish, category, condition, size, university, meet-up spot, and the Facebook and Instagram usernames you add so buyers can message you. When you paste a Facebook, Messenger or Instagram link, our server opens it once to find your username; we keep only the username, not the link.
• Activity: listings you save, reviews you give or receive (rating, comment, your first name and the item title), and reports you file about a listing.
• Subscription payments: the screenshot of your GCash or GoTyme payment you upload, the amount, and the dates your request was sent, approved and expires.
• Technical data: your browser keeps a sign-in session so you stay logged in. Our hosting providers keep short-lived server logs (such as IP address and browser type) for security. We do not use advertising trackers or sell-your-data analytics.

• To create and secure your account and keep you signed in.
• To publish your listings and let buyers contact you by Messenger, Instagram or email.
• To show your seller profile, ratings and reviews so students can trade with confidence.
• To review reports and remove scams or inappropriate listings.
• To verify subscription payments and unlock the features you paid for.
• To fix problems and prevent abuse of the service.

We process your information based on your consent, which you give when you sign up and post, and because it is necessary to provide the service you asked for (Section 12 of RA 10173). You can withdraw your consent at any time by deleting your listings or asking us to delete your account.

• Anyone, including search engines: your listings and their photos, your seller name, profile photo and university, your meet-up spot, your ratings and reviews, and the Facebook or Instagram username on your listings.
• Only signed-in students: the email address shown on a listing so buyers can reach you.
• Only you (and the site administrator): your saved listings, the reports you file, and your payment screenshots.

Please don’t put phone numbers, home addresses or other sensitive details in listing descriptions. Meet in public places on campus.

We never sell your personal information. We share it only with services that run the site for us:

• Supabase stores the database, sign-in accounts and photos.
• Vercel hosts the website.
• Google handles sign-in if you choose “Continue with Google”.
• Facebook, Messenger and Instagram receive the request when a buyer taps a message button, or when our server looks up a link you pasted.

These providers may store data on servers outside the Philippines. They are bound by their own privacy and security commitments, and we use them only for the purposes above. We may also disclose information when the law requires it, for example to comply with a lawful order.

• Listings marked sold or swapped, with their photos, are deleted automatically 7 days later. Listings you delete are removed right away.
• Your account, profile, reviews and saved listings are kept until you ask us to delete your account.
• Payment records are kept while your account is active so we can answer questions about a payment.
• When you ask us to delete your account, we delete or anonymize your personal information.

All traffic uses HTTPS. The database only lets each student read and change their own private records. Payment screenshots sit in a private storage area that only you and the administrator can open, and passwords are stored scrambled. No system is perfectly secure, so if we ever learn of a breach that puts your information at risk, we will notify you and the NPC as the law requires.

Under the Data Privacy Act, you have the right to:

• Be informed about how your data is collected and used (this policy).
• Access the personal information we hold about you.
• Correct wrong or outdated information. You can edit your profile and listings yourself.
• Object to processing, or withdraw your consent.
• Erase or block your information: delete your listings or ask us to delete your account.
• Data portability: get a copy of your data in a common electronic format.
• Claim damages if you are harmed by inaccurate, unlawfully obtained or misused data.
• File a complaint with the National Privacy Commission.

To use any of these rights, email us at topedarell13@gmail.com. We will reply within 15 days.

BukiMart is meant for college students. If you are under 18, please use it only with the permission of a parent or guardian. If you believe a minor gave us information without that permission, contact us and we will delete it.

We may update this policy as the site changes. The date at the top shows the latest version. If a change affects how your information is used, we will let you know on the site before it takes effect.

For privacy questions, requests or complaints, email topedarell13@gmail.com. You can also reach the National Privacy Commission at privacy.gov.ph.