Privacy policy
Last updated 10 August 2026
The short version. Buyers give us a name, email and phone number. Pawnshops give us that plus their branch address, map location and photos of the items they list. Listings, shop details and shop contact numbers are public — that is the point of the site. Everything else is not. Subscription payments are handled by PayMongo on their own secure page, so we never see or hold your card or wallet details. You can ask for a copy of your data or delete your account at any time from your account page.
Who is responsible
Prenda is operated from Davao City, Philippines. For any question about your data, or to make a request about it — including a copy of it, a correction, or deletion — write to dan.navarez@prenda.ph.
What we collect, and why
| What | Why | Public? |
|---|---|---|
| Name | To address you, and to name the contact person for a shop | Shop contact person: yes. Buyers: no |
| Email address | To sign you in and to send account emails | No |
| Phone number | So a shop can reach a buyer, and a buyer a shop | Shop numbers: yes. Buyers: no |
| Shop address and map location | So buyers can find the branch and get directions | Yes |
| Item photos and descriptions | To show the item for sale, and — when the shop chooses to post them — on Prenda's Facebook Page and Instagram | Yes |
| Pawn ticket number | So staff can find the item at the counter | Yes — see below |
| Saved items | To show your saved list | No |
| Status history of a listing | A record of when an item was reserved or sold | No — shop and admin only |
A note on pawn ticket numbers.Listings show the ticket number so you can quote it in store. That number also appears on the original pawner’s ticket. Pawnshops should consider whether they are comfortable publishing it before listing an item.
Who else receives it
We use these services to run the site, and your data passes through them. All of them process data outside the Philippines.
- Supabase — database, sign-in, and photo storage. Holds essentially everything above.
- Vercel — hosting. Sees requests and IP addresses.
- Google Maps — the store locator and the map pin used when a shop registers. Google receives your IP address when a map loads, and receives a shop’s typed address when it is converted to map coordinates.
- Google Analytics — only if you agreed to it. See below.
- Sentry — error reports, if enabled, so we can find out when something breaks.
- PayMongo— subscription payments, for pawnshop owners only. Buyers never pay anything through Prenda. When a shop subscribes we send PayMongo the shop name and the owner’s email so they can issue a receipt; the card or e-wallet details are entered on PayMongo’s own page and never reach us. We receive back only that the payment succeeded, the amount, and which method was used.
- Cloudflare — nightly backups. A copy of the database and of the listing photos is stored in a private Cloudflare bucket, so a problem at Supabase cannot take both the site and its only backup. The copy includes your name, email and phone number. It is not public, and nothing about it is used for anything other than restoring the site.
- Meta (Facebook and Instagram)— only when a shop chooses to publish its listings to Prenda’s Page. Meta then receives those photos, the caption, and the shop’s name and city, and keeps its own copy under its own terms — one that outlives deleting the listing here. See the terms of use.
We do not sell your data, and nobody buys advertising from us or targets ads at you using it. The one thing that is promotion is a shop publishing its own listings to Prenda’s Facebook Page — its own decision, from its own dashboard.
Analytics and cookies
Cookies that keep you signed in are essential — without them the site cannot know it is you, so there is nothing to switch off short of not logging in.
Google Analytics is different: it is optional, it is off until you agree, and you are asked before it loads. If you say no, nothing analytics-related runs. You can change your mind by clearing this site’s data in your browser, which brings the question back.
How long we keep it
Account details are kept while your account exists. Listings and their status history are kept while the shop’s account exists, because a shop needs its own sales record. Deleting your account removes your profile, your shop, its listings and its uploaded photos.
One deliberate exception: the record that a listing changed status is kept even if the listing itself is deleted, with the item’s title and ticket number, so a sales record cannot be quietly erased. It is visible only to that shop and to an administrator.
Your choices
- Get a copy. Download everything we hold about you from your account page.
- Correct it. Edit your details on the same page.
- Delete it. Delete your account from the same page. This cannot be undone.
Security
Access is enforced in the database itself, not only in the app, so one shop cannot read or change another shop’s listings. Privileged actions are recorded in a log that cannot be edited or deleted. We do not store card or wallet details — they are entered on PayMongo’s page, and we receive only the fact of payment, the amount, and which method was used.
Still to be confirmed. Prenda is a new and small service. This page describes honestly what the software actually does, but it has not been reviewed by a lawyer. Obligations under the Philippine Data Privacy Act (RA 10173) and the National Privacy Commission — including whether a Data Protection Officer must be appointed and whether the service must be registered — need to be confirmed with someone qualified before Prenda holds a meaningful amount of personal data. Nothing here should be read as a legal conclusion that we comply.
See also our terms of use.