Privacy Policy

Effective July 4, 2026

Burrow ("Burrow", "we", "us", or "our") is a boarding house management and listing service operated by RottenData Labs, registered as ROTTENDATALABS SOFTWARE DEVELOPMENT SERVICES, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI). We are committed to protecting your personal information and handling it responsibly. This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

By using Burrow, you acknowledge that you have read and understood this Policy.

Roles for tenant data. When a boarding house operator uses Burrow to manage their property, that operator is the personal information controller of their tenants' data. The operator determines what tenant information is collected and for what purpose. Burrow acts as the operator's personal information processor, storing and securing that information on the operator's behalf. If you are a tenant and wish to review, correct, or delete your record, please contact your boarding house operator first. You may also contact us and we will coordinate with them.

1. Information We Collect

1.1 Visitors to the public website

Areas you nominate on our list of locations to expand to.
Information you provide when you request access as an operator, including your name, email address, phone number, and boarding house name and location.
Standard technical information such as your IP address, browser type, and pages visited, which we retain for security and service operation.

1.2 Boarding house operators (our customers)

Account and contact details, your boarding house profile, and login credentials. Passwords are stored only as one-way cryptographic hashes and are never kept in readable form.
Billing and subscription records.
Listing content you choose to publish, including any photographs you upload.

1.3 Tenants (boarders)

Operators create and manage tenant records within their own boarding house. These records may include:

Full name and nickname, sex, and date of birth.
Mobile number, which is optional and used for rent reminders and account notices.
Room assignment, move-in date, rent, deposits, and payment history.
Login credentials for the tenant self-service portal, with passwords stored as hashes.

2. How We Use Information

To operate the service, including rent billing, receipts, payment tracking, occupancy management, and the tenant portal.
To send account and rent notices within the application and, where enabled, by SMS or email.
To publish a boarding house's public listing on the Burrow map, only while the operator holds an active paid subscription and only for the details the operator chooses to make public.
To secure the service, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use tenant data for advertising.

3. Information Shown Publicly

A public boarding house listing may display the property name, location, description, rates, amenities, photographs, and the number of available bed spaces. It does not display the names or personal details of individual tenants. Tenant records are visible only to the operator and to the tenant through their own login.

4. SMS and Messaging

If an operator enables SMS reminders, a tenant's mobile number is shared with our messaging provider solely for the purpose of delivering that message. Standard carrier rates may apply. A tenant may ask their operator to stop SMS messages at any time.

5. Disclosure to Third Parties

We share personal information only with service providers who help us operate Burrow, such as our hosting provider, our email delivery provider, and, where enabled, our SMS gateway, and only to the extent necessary to provide the service. We may also disclose information where required by law or where reasonably necessary to protect our users or the service.

6. Data Retention

We retain tenant and operator records for as long as the relevant account is active. Operators may archive or remove tenant records at their discretion. When an operator closes their account, we retain data only for as long as necessary to meet legal, tax, or dispute-resolution requirements, after which it is deleted or anonymized.

7. Security

We protect personal information using encrypted connections (HTTPS), hashed passwords, access controls, separation of each boarding house's database, screening of uploaded files, and regular backups. No system can be guaranteed completely secure. In the event of a personal data breach that poses a real risk to affected individuals, we will take reasonable steps to notify the affected users and the National Privacy Commission as required by law.

8. Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to be informed, to access your personal data, to correct inaccurate information, to object to or withdraw consent for certain processing, to have your data erased or blocked, to data portability, to be indemnified for damages, and to lodge a complaint with the National Privacy Commission. To exercise these rights, please contact your boarding house operator for tenant records, or contact us using the details below.

9. Children

Burrow is intended for use by boarding house operators and their adult tenants. Where a tenant is a minor, the operator is responsible for obtaining any consent required from a parent or guardian before recording the tenant's information.

10. Changes to This Policy

We may update this Policy from time to time as the service evolves. We will post the revised effective date on this page and, for significant changes, notify operators through the application.

11. Contact Us

For questions or requests concerning your personal information:

Email: privacy@burrowph.com
General support: support@burrowph.com
ROTTENDATALABS SOFTWARE DEVELOPMENT SERVICES (RottenData Labs), Philippines