For filing with the National Privacy Commission
Privacy Policy
Helium Marketing Corporation (HMC)
doing business as ODO / OwnerDirect.online
| Document | Privacy Policy (public notice) — Vehicles door |
|---|---|
| Version / date | 2026-09-07 · Effective 7 September 2026 · Last updated 7 September 2026 |
| Live URL (controlling copy) | https://ownerdirect.online/privacy |
| This filing copy | https://ownerdirect.online/privacy-policy-npc.html |
| Personal Information Controller | Helium Marketing Corporation (HMC), Philippines |
| Brand / platform | ODO — OwnerDirect.online |
| Office address | Tandoc, San Carlos City, Pangasinan, beside Helium Fuels |
| Voice | 0936 411 5239 |
| Privacy requests | privacy@ownerdirect.ph |
| Data Protection Officer | dpo@hmcmarketing.tech |
| Product support | support@ownerdirect.ph |
| ODO Telegram (app-down backup) | 0917 107 4906 — official ODO line only; not a seller number |
| NPC registration | In progress |
| SEC / TIN (if required on the form) | ________________________________ |
Purpose of this copy. This PDF/print is a true copy of the Privacy Policy posted at https://ownerdirect.online/privacy as of 7 September 2026. It is prepared for submission to the National Privacy Commission in connection with the registration of Helium Marketing Corporation as a Personal Information Controller. The live web page remains the controlling public notice. If the two ever differ, the live page wins and a new filing copy should be printed.
Scope of the live door. Vehicles only. No buyer–seller contact. No bank or law-office escrow. Property and RideVerified are not this door. HMC / ODO never owns the units listed.
Not legal advice. Not an NPC certificate. Complaints: www.privacy.gov.ph · info@privacy.gov.ph
1. Who We Are
ODO (OwnerDirect.online) is operated by Helium Marketing Corporation (HMC), Philippines.
ODO is a verification and mediated-close service for vehicles. We host the list, the viewing, and the close at Tandoc. We are not a commission broker, not a bank, and not an escrow custodian. HMC / ODO never owns the units listed here.
For data privacy, HMC / ODO is the Personal Information Controller (PIC) for data collected on OwnerDirect.online.
Contact for privacy requests: privacy@ownerdirect.ph
Data Protection Officer: dpo@hmcmarketing.tech
Support: support@ownerdirect.ph
Office: Tandoc, San Carlos City, beside Helium Fuels · 0936 411 5239
ODO Telegram (backup if the app is down): 0917 107 4906 — message ODO only. Not a seller number.
Platform: https://ownerdirect.online
NPC registration: in progress.
2. What This Policy Covers
This policy matches the live public door only.
Live today
- This public door is Vehicles only (motorcycle, tricycle, car, SUV, pickup, truck, commercial, luxury). Property is not listed here.
- Roles: buyer, seller (owner or SPA), admin. RideVerified is a separate product.
- You create an account with email and password. Government ID is verified before poke, list, or price tap.
- ID may be a Google Drive link or a photo you upload to ODO. Admin reviews it and stamps verified.
- Buyers poke to request a view. ODO hosts the viewing at Tandoc. Seller sees interest count only — not your name or number.
- After a physical viewing: 3 amount-only price taps. Seller Agrees or Not. No chat. No buyer–seller contact.
- Facilitation DP, remaining balance, parking after complimentary weeks, and optional test drive ₱500 are paid in person at the Tandoc office. Admin stamps the deal. We do not take the unit price online.
- If the app is down, the same process runs at the Tandoc desk. Telegram 0917 107 4906 is backup only until the system goes back. We do not collect your Telegram on sign-up. You reach ODO first.
Not live on this door — do not treat as current practice
- Property listings, LRA certify, CTC unlock, and paid owner-contact reveal are not offered on this public door.
- No bank or law-office escrow. We do not hold the purchase price and do not process overseas wires for a sale.
- No OFW-first product on this door. Loan-checker and provider consult PayMongo flows may still exist in the codebase for other lanes; they are not the Vehicles close path.
- We do not automatically file your data with HPG, LTO, or other government offices. NAC and HPG Motor Vehicle Clearance remain HPG’s documents.
3. What We Actually Collect
We collect only what this door needs.
Account & profile
- Email and password (Supabase Auth)
- Display name; role (buyer, seller/creator, or admin)
- Country is stored as Philippines on this door; PH province if you enter it
- Optional waitlist: name, email, province, and whether you are listing or looking (no OFW flag)
Identity (gate for poke, list, and price tap)
- A Google Drive link to a government ID, or a photo you upload to ODO private storage
- Admin stores the link or file path and an id_verified flag
- Admin reviewers open that file or link to approve or reject. The other side never sees your ID.
Listings — Vehicles
- Headline, make, model, year, body class, province/city, public selling price
- Floor and ceiling (private — buyers never see them)
- Photos (ODO storage and/or Drive links)
- OR/CR, SPA if SPA, optional NAC — Drive link or ODO upload. These stay off the public card.
- Plate and name on OR/CR for matching. Encumbered, rebuilt, surplus, or mismatch units cannot list.
Deals & office
- Pokes (buyer id + listing — seller sees a count only)
- Viewing slot times and viewed stamp
- Price taps: peso amount, Agree or Not. No free text.
- Deal status, public tracker code, office payment stamps, optional receipt refs
- Terms acceptances may record signature name, IP, and browser for evidence
Payments
- In-person cash/deposit at Tandoc: we store that payment happened, amount class, and timestamps — not card numbers
- PayMongo, if used on leftover property or consult checkouts: we store references, amounts, purpose, and status. We do not store full card numbers. Vehicle facilitation DP is office cash only.
Assistant (Fido)
- Messages you send in-product and page context used to answer
- Operational logs for product quality — not sold for ads
Technical
- Session / auth cookies
- odo_vertical (this door is vehicles)
- IP and basic device/browser signals via Vercel / Supabase for security
- Rate-limit signals (IP) if Redis is configured
We do not intentionally collect: your Telegram handle, bank login credentials, full card PAN/CVV, remittance PINs, or biometrics.
4. Why We Collect It (Legal Bases)
Contract — to run your account, ID verification, listings, viewing, price taps, and office close.
Legitimate interests — trust and fraud prevention (ID review, matching card, abuse prevention), product security, and improving Fido answers.
Consent — waitlist, optional loan-checker follow-up if you use that form, and any sharing beyond a flow you started.
Legal obligation — where Philippine law requires retention of payment/accounting records for fees we actually collect.
We do not sell personal data. We do not sell listing contact data to agents. Buyer and seller stay anonymous to each other.
5. How We Use It
- Create and secure your account
- Verify identity before poke, list, or price tap
- Publish vehicle listings after a matching card (OR/CR vs ID)
- Host viewing at Tandoc and stamp viewed
- Relay amount-only price taps; stamp an agreed price on the deal (app, desk, or Telegram backup)
- Collect published office fees and pay the seller the same day as full payment (net)
- Admin moderation and support
- Abuse response — including reports that someone asked you to pay off-app or skip the mediated close
- If the app is down: continue values-only on official ODO Telegram 0917 107 4906 until the system goes back
6. Who Sees Your Data
Inside ODO
- You — your profile and your content
- The other party — never your phone, email, Telegram, or ID. Seller sees poke count and peso amounts. Buyer sees the public unit and peso amounts. At DoS the seller sees the buyer name because the deed requires it — that is at the office, not on the public list.
- ODO admins — ID files/links, listings, deals, and payment stamps needed to operate trust and support
Processors / infrastructure
- Supabase — database, auth, storage (typically Singapore / ap-southeast-1)
- Vercel — website hosting
- Resend — transactional email (hello@ownerdirect.ph)
- PayMongo — only if an in-app checkout still runs (not vehicle DP)
- OpenAI — Fido when enabled
- Google — if you host ID/docs on Drive; Google’s terms apply to your Drive files. If you upload to ODO, files sit in private Supabase storage.
- Google Cloud Vision — match assist on some document photos (not authenticity)
- Upstash Redis — optional rate limits
Not current practice
- No escrow law office or partner bank receives your ID or funds through ODO
- We do not automatically submit your personal data to HPG or LTO
- We do not put buyer and seller in one Telegram group
- We do not share data with marketing list brokers or commission agents
7. Anonymity on This Door
Buyer and seller stay anonymous to each other in the app.
- Listings show selling price, make, model, year, and NAC (No Alarm Certificate) when on file. No owner number.
- Pokes show the seller a count only.
- Price taps are peso amounts only.
- Telegram backup uses official ODO Telegram 0917 107 4906. One thread with you, one with the other side. Never a group. You message ODO — we do not harvest your Telegram on intake.
- Closed DoS at DP fills the buyer name because HPG requires that deed. That is an office paper, not a public contact reveal.
8. Cookies & Similar Tech
Essential only for the product to work:
- Auth / session cookies (Supabase)
- odo_vertical — this door is vehicles
- Preference / theme if present
No advertising pixels are required for core ODO use. If we add analytics later, we will update this policy.
9. Retention
- Account & profile — while your account is open, then as needed for support/disputes
- Listings, photos, and vehicle papers — while listed or as needed for dispute history after unpublish
- Deals, price taps, and office payment stamps — as needed for the close and accounting
- ID links and uploaded ID files — while verification is needed; you may replace them
- Terms evidence (including IP) — with the deal/account evidence pack
- Fido logs — only as long as needed for safety and quality, then deleted or aggregated
You may request erasure under RA 10173 from Settings or privacy@ownerdirect.ph. A person reviews every request. This is not instant. Some payment and audit rows may be kept where law requires. We do not operate escrow, so we do not keep escrow-close files.
10. Your Rights (RA 10173)
You may request: information, access, correction, erasure, objection, and portability, and you may complain to the National Privacy Commission (www.privacy.gov.ph).
Email: privacy@ownerdirect.ph — we aim to respond within 15 business days. Signed-in users can also start a deletion request from Settings.
11. Security (Honest Current State)
- HTTPS / TLS in transit
- Supabase Auth for accounts
- Role checks in app code
- Row Level Security (RLS) on tables — still evolving; admin tools use elevated keys only on the server
- Vehicle public APIs strip owner contact, floor, ceiling, and paper URLs
- ID and OR/CR uploads prefer private storage; Drive links depend on how you share them (“anyone with the link” is convenient but increases exposure)
No system is perfect. Report suspected abuse to privacy@ownerdirect.ph or 0936 411 5239.
12. Children
ODO is for adults (18+) engaging in vehicle transactions. Terms require legal capacity. We do not knowingly create accounts for persons under 18.
13. Changes
We will update this page when collection or processors change in a material way — including if the Property lane is turned back on. Until then, older pages that mention OFW-first unlock, LRA certify, or escrow custodians do not describe this public door. Last updated date below will change.
14. Contact
Privacy / data requests: privacy@ownerdirect.ph
Data Protection Officer: dpo@hmcmarketing.tech
Product support: support@ownerdirect.ph
Office: Tandoc / Helium Fuels · 0936 411 5239
ODO Telegram (app-down backup only): 0917 107 4906
Operator: Helium Marketing Corporation — OwnerDirect.online (ODO)
National Privacy Commission: www.privacy.gov.ph · info@privacy.gov.ph
PIC declaration (for NPC filing)
I certify that:
- Helium Marketing Corporation is the Personal Information Controller for personal data collected on OwnerDirect.online (ODO).
- This document is a true copy of the Privacy Policy published at https://ownerdirect.online/privacy as of 7 September 2026 (version 2026-09-07).
- The description of collection, use, sharing, retention, security, and data-subject rights in this copy matches that live notice.
- NPC registration of the PIC is in progress.
Leave blanks empty if not yet appointed. Do not invent names or registration numbers on this sheet.
Authorized signatory — name / title
Signature / date
Data Protection Officer — name
Signature / date
© 2026 Helium Marketing Corporation · ODO OwnerDirect.online · Vehicles door · RA 10173