๐Ÿ›ก๏ธ Compliant with the Data Privacy Act of 2012 โ€” Republic Act 10173

Privacy Policy

Last updated: June 26, 2026 ยท Effective: June 26, 2026

ODO is built on trust โ€” especially for OFWs who cannot be physically present during property transactions. This Privacy Policy explains exactly what data we collect, why we collect it, who sees it, and how we protect it. We wrote this in plain language so you understand it without needing a lawyer.

1. Who We Are

ODO (OwnerDirect.online) is a property trust platform operated by Helium Marketing Corporation, registered in the Philippines. ODO connects property owners, OFW buyers, and service providers through a structured, verified, and auditable transaction platform.

For data privacy purposes, ODO is the Personal Information Controller (PIC) responsible for your personal data collected through this platform.

Contact: Email: edc.helium@gmail.com Platform: OwnerDirect.online

2. What Personal Data We Collect

We collect only the data necessary to operate the platform and protect all parties in a transaction.

Account data: Full name, email address, mobile number, country of residence, role (buyer, seller, creator, or provider).

Identity verification: Government-issued ID (for sellers and providers), proof of ownership documents (TCT, tax declaration), OR/CR for vehicle listings.

Property data: Property location, title details, encumbrance status, zonal valuation, tax records submitted by the listing owner.

Transaction data: Escrow instruction records, payment references, document submission timestamps, audit trail entries.

Communication data: Messages sent through the platform, VERA conversation logs (used to improve the assistant โ€” no personally identifiable data is stored in AI logs).

Device data: IP address, browser type, session timestamps โ€” collected automatically for security and fraud prevention.

We do not collect: Bank account numbers, credit card numbers, or remittance account credentials. All payments are processed through third-party escrow custodians or partner banks.

3. Why We Collect Your Data (Legal Basis)

ODO collects and processes your personal data under the following legal bases as defined by the Data Privacy Act of 2012:

Contract performance: To provide the services you signed up for โ€” listings, verification, escrow coordination, and transaction audit trails.

Legal obligation: To comply with Anti-Money Laundering Act (AMLA) requirements for property transactions and BSP-regulated escrow operations.

Legitimate interest: To protect all parties in a transaction from fraud, title disputes, and bad-faith actors. Every data point collected serves a verifiable protection purpose.

Consent: For optional features โ€” VERA intelligence alerts, Pilipinas Kung Mahal content updates, referral tracking. You may withdraw consent at any time.

We do not sell your personal data. We do not share it with third parties for marketing purposes.

4. How We Use Your Data

Account management: To create and maintain your ODO account and role-based access.

Listing verification: To check submitted documents against LRA, BIR, and other public records. Verification results are displayed as trust badges โ€” raw documents are never shared publicly.

Transaction coordination: To coordinate escrow instructions between buyer, seller, escrow custodian (law office), and ODO. Every instruction is logged with timestamps.

VERA assistance: To provide contextual property guidance, tax computation, and reminders. VERA does not retain personally identifiable data beyond the active session.

Referral tracking: To track which transactions were sourced through a Creator, Relative, or Friend referral link and compute earnings accurately.

Security and fraud prevention: To detect unusual activity, verify identity, and protect all platform users.

Communication: To send you transaction updates, document request notifications, escrow status changes, and VERA reminders. You control notification preferences.

5. Who We Share Your Data With

ODO shares your data only when necessary to complete a transaction or comply with law.

Escrow custodians (law offices): Receive buyer and seller identity documents and escrow instructions to process property title transfers. Bound by attorney-client privilege and this Privacy Policy.

Partner banks (Phase 2): EastWest Bank and other bank partners receive only the data required to process OFW loan applications โ€” with your explicit consent at the time of application.

LRA / BIR / Registry of Deeds: Public records are checked against your submitted documents for verification. ODO does not submit your personal data to these agencies โ€” we query public records only.

Insurance partners: If you opt in to insurance at transaction close, VERA connects you to an accredited insurer. Your contact details are shared only with your consent.

We do not share data with: Real estate agents, marketing companies, data brokers, or any third party not directly involved in your transaction.

6. How Long We Keep Your Data

Account data: Retained for the duration of your account and for 5 years after account closure, as required by Philippine tax and property law.

Transaction records: Retained for 10 years from transaction close date โ€” required by BIR and Registry of Deeds audit standards.

Verification documents: Retained in your ODO vault for as long as your account is active. You may request deletion of non-transaction documents at any time.

VERA conversation logs: Anonymized and retained for 90 days for quality improvement. No personally identifiable data is stored beyond the active session.

When retention periods expire, data is permanently deleted or anonymized for aggregate reporting only.

7. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act 10173, you have the following rights:

Right to be informed: You have the right to know what data we collect, why we collect it, and how it is used. This Privacy Policy fulfills that obligation.

Right to access: You may request a copy of all personal data ODO holds about you at any time.

Right to rectification: If any of your data is inaccurate or incomplete, you may request a correction.

Right to erasure: You may request deletion of your personal data, subject to legal retention obligations (transaction records must be retained per Philippine law).

Right to object: You may object to processing your data for any purpose not covered by contract or legal obligation โ€” including VERA alerts, referral tracking, and marketing communications.

Right to data portability: You may request your data in a structured, machine-readable format.

Right to file a complaint: If you believe your rights have been violated, you may file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.

To exercise any of these rights, contact us at: edc.helium@gmail.com. We will respond within 15 business days.

8. How We Protect Your Data

ODO uses industry-standard technical and organizational measures to protect your personal data.

Encryption: All data transmitted to and from ODO is encrypted using TLS 1.2 or higher. Data at rest is encrypted in our Supabase (PostgreSQL) database.

Row-level security: Every database table uses row-level security (RLS) policies โ€” each user sees only the data they are authorized to access based on their role.

Access controls: ODO staff access to personal data is role-restricted and logged. No staff member has unrestricted access to the full database.

Document vault: Property documents are stored in isolated Supabase Storage buckets with access controlled by signed URLs that expire. Documents are never stored in public-accessible locations.

Escrow segregation: Funds are held by accredited third-party law offices โ€” not by ODO. ODO controls release instructions only. We never hold, touch, or move your money directly.

Incident response: In the event of a data breach, ODO will notify affected users and the National Privacy Commission within 72 hours as required by the Data Privacy Act.

9. Cookies and Session Data

ODO uses essential cookies only โ€” no advertising or tracking cookies.

Session cookies: Required for login and role-based access. Expire when you close your browser.

Security cookies: Used to detect suspicious login attempts and protect your account.

Preference cookies: Store your notification and language preferences.

We do not use: Google Analytics, Facebook Pixel, or any third-party advertising tracking tools on authenticated pages. The public landing page may use basic analytics (page views only โ€” no personal data).

You may disable cookies in your browser settings. Disabling essential cookies will prevent login and platform access.

10. OFW-Specific Data Protections

ODO was built specifically for OFWs buying property remotely. We apply additional protections for OFW users:

Relative / representative access: When you assign a local contact as your representative, they coordinate on the ground but they never receive your escrow funds or document originals. Every action they take is logged and visible to you directly.

Permission layer: Your contact details and documents are released to sellers or providers only with your explicit approval โ€” never automatically.

Overseas wire protection: ODO never requests that you wire funds directly to a seller. All funds go to an ODO-accredited law office escrow account. If anyone asks you to bypass escrow, report it immediately to edc.helium@gmail.com.

Data localization: Your personal data is stored on servers in Singapore (Supabase) โ€” a jurisdiction with strong data protection laws. ODO does not transfer your data to jurisdictions without adequate protection.

11. Changes to This Policy

ODO may update this Privacy Policy as the platform evolves โ€” particularly as we add bank partnerships, insurance integrations, and new features in Phase 2.

When we make material changes, we will: - Notify you via email at least 15 days before the change takes effect - Display a notice on the platform - Update the "Last updated" date below

Continued use of ODO after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, data requests, or complaints:

Email: edc.helium@gmail.com Platform: OwnerDirect.online Response time: Within 15 business days

For complaints not resolved by ODO directly: National Privacy Commission (NPC) Website: www.privacy.gov.ph Email: info@privacy.gov.ph Address: 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila

๐Ÿ›ก๏ธ National Privacy Commission

ODO is committed to registering with the National Privacy Commission (NPC) as a Personal Information Controller under the Data Privacy Act of 2012. Registration is in progress. For complaints, visit www.privacy.gov.ph.