Privacy Policy

1. Introduction

Plusinv (“we”, “our”, or “us”) is committed to protecting your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

2. Information We Collect

For Business Owners (Tenants)

• Full name and contact information (email, phone number)
• Business name, address, and registration details
• Bank account or payment details for receiving payments
• Equipment listings including descriptions and images
• Usage data and platform activity logs

For Customers

• Name and email address
• Contact number
• Booking history and rental details
• Delivery address (if applicable)
• Payment transaction records (not full card details)

Automatically Collected Information

• IP addresses and browser type
• Pages visited and time spent on the platform
• Device information and operating system
• Cookies and session data

3. How We Use Your Information

We use your personal data to:

• Provide and operate the Plusinv platform
• Process account registrations and verify business identities
• Facilitate bookings between rental businesses and customers
• Process payments and send transaction confirmations
• Send important service notifications (booking confirmations, account updates)
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Improve our services based on usage patterns

4. Data Sharing

We do not sell your personal data. We may share your information with:

• Payment Processors: PayMongo processes payments. Their privacy policy governs how they handle your payment data.
• Email Service Provider: We use Resend to send transactional emails.
• Cloud Infrastructure: Our services run on Neon (database), Vercel (web), and Railway (API), all of which have their own data protection practices.
• Between Tenants and Customers: When a customer books through a tenant's storefront, relevant booking information is shared with that tenant.
• Legal Requirements: We may disclose data when required by law or to protect our rights.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data at rest and in transit (HTTPS/TLS)
• AES-256 encryption for payment credentials stored by tenants
• Secure password hashing using bcrypt
• Role-based access controls limiting data access
• Regular security monitoring and logging

6. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Active account data: retained for the duration of the account
• Booking records: retained for 7 years for legal and tax purposes
• Payment transaction logs: retained for 5 years
• System logs: retained for 90 days

7. Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to specific processing of your personal data
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@plusinv.online.

8. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookies through your browser settings, though disabling them may affect platform functionality.

9. Children's Privacy

Plusinv is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Multi-Tenant Data Isolation

Each tenant's data is logically isolated from other tenants on the Platform. Tenant A cannot access the customer data, bookings, or business information of Tenant B. This isolation is enforced at the database and API level.

11. Contact Us

For privacy-related inquiries, data access requests, or concerns: