Privacy Policy

1. Data we collect

• Account data: name, email, phone, PSGC location, profile photo.
• KYC data (sensitive personal information): a government-issued ID image and a live selfie, used for identity verification and face-match.
• Activity data: listings, chat messages, bids, orders, reviews, reports you file or that are filed against you.
• Payment-verification data: subscription receipt screenshots you upload for manual review.

2. Why we collect it (purpose)

• Operating your account, listings, chat, auctions, and subscription.
• KYC/fraud prevention: your ID and selfie are used only to verify you are a real, identified person before you can transact, and as evidence if a dispute is escalated to barangay or court proceedings.
• Safety moderation (reports, blocks, bans).
• Legal compliance and responding to lawful requests.

3. Who can see what

Other users only ever see your public profile and the “✓ KYC-verified” badge — never your ID image or selfie. Your raw ID/selfie images are stored in an encrypted, access-restricted bucket visible only to the platform owner’s KYC review role, and are released to third parties only in response to a lawful request from an authority (e.g. a barangay or court order).

4. Retention

We retain KYC images for as long as your account is active, and for a limited period after account closure (to support fraud investigations and evidence requests already in motion), after which they are deleted. Chat/listing/report logs are retained longer, in de-identified form where practical, to support the Evidence Export feature and legal compliance.

5. Your rights under RA 10173

You may request access to, correction of, or deletion of your personal data, and may withdraw KYC consent (which will limit your ability to transact). Contact carlomigueldy@gmail.com to exercise these rights.

6. Consent

By completing KYC, you explicitly consent to us processing your ID and selfie for the purposes stated in §2 — fraud prevention and evidence for lawful proceedings where necessary. This consent screen is shown before you upload anything.

7. Breach notification

In the event of a data breach affecting your personal information, we will notify affected users and the National Privacy Commission as required by RA 10173 and its implementing rules.

8. NPC registration

Given that Backten processes sensitive personal information (KYC), NPC registration is being evaluated by the owner as the platform scales past validation volume.

9. Contact

Privacy questions or requests: carlomigueldy@gmail.com.