BiliBenta is a classifieds and discovery service for product, service, and talent listings. Users can message one another to discuss offers and decide whether or how to proceed. This policy explains the information handled by the app and website and how to request account deletion.
Operator and privacy contact details
Account and profile information
When you register or complete your profile, the app may handle your email address, password, public screen name, first and last name (and optional middle name), gender, birth month and year, selected Philippine region/city/barangay, and profile photo. Registration asks for your full date of birth to check that you are at least 18; the birth day is used for this eligibility check and is not saved in your profile, while your birth month and year remain private profile details. Passwords are stored as one-way password hashes rather than readable text.
When a new account is registered, we record the Terms and Privacy Policy version identifiers accepted or acknowledged, whether you acknowledged the prohibited product and service rules, and the acceptance timestamp. We use this record to maintain the account and document which rules applied at registration.
Listings, messages, and activity
We handle product, service, and talent listing information, including titles, descriptions, answers, prices, skills/specialities, photos, and selected general location. We also handle messages, account settings, searches, listing views, saved or liked listings, and account-safety actions. Messages may discuss offers, price, condition, availability, and whether or how users will proceed; users may voluntarily include contact, payment, delivery, or agreement details in them. BiliBenta has no checkout or payment-card collection flow, but this does not mean messages never contain such information.
Our Terms prohibit listings for pesticides, fertilizers, and agricultural chemicals, as well as Service offers or messages that arrange medicine sourcing, procurement, ordering, purchase, pickup, transport, delivery, sale, brokerage, or dispensing. This includes Pharmacy errands and general errands or shopping services used to obtain or move medicines, even if the order, payment, or handoff occurs off BiliBenta. We may process listing content, related messages, and reports to enforce these rules and respond to safety concerns; the Terms and Safety Guide contain the full restrictions.
Support requests
If you contact support through the app or website, we process the request category, subject, message, and information linked to your account or provided for a reply so the support team can respond. The website Support form asks for your name, reply email, request category, and message. Do not include passwords, verification or reset codes, government identification, or full payment-card details.
The website support form uses Cloudflare Turnstile to reduce automated abuse. Cloudflare processes the challenge response and related technical or browser/network signals for verification. The API validates the challenge server-side. Redis uses a short-lived, server-keyed HMAC identifier to limit repeated submissions; it expires with the rate-limit window (no longer than one hour) and is not included in the support message.
Network and service information
When the app or website connects to BiliBenta, network and operational information such as IP address, request time, device/app version, and error or security logs may be processed to deliver, protect, and troubleshoot the service. The Android app requests Internet access but does not request device GPS/location permission in the version reviewed. You choose your profile location manually. General location may also be inferred from an IP address by network or advertising providers as described below.
How information is used
- Create and secure accounts, sign users in, and send verification or password-reset messages.
- Show marketplace listings, support searches by selected location, and enable conversations between users.
- Store and display profiles, listings, photos, skills, and related activity.
- Respond to support requests, prevent fraud and abuse, moderate marketplace content, and maintain security and reliability.
- Respect notification and account settings and respond to account-deletion requests.
What other users can see
Your public screen name, profile photo, bio, the general location you select for your Public profile (barangay, city, province, or region), and the content and images you choose to include in active listings can be visible to other users. A seller’s self-declared Private or Commercial label may appear on the public profile and listing details. The label is not independently verified and is not a conclusive legal classification. BiliBenta does not request or display a house number or street address on your Public profile. Private account details such as your login email, password hash, full legal name, birth month/year, and gender are not intended to be displayed publicly. Conversation participants can see messages sent to them and may copy or retain information they receive.
Service providers and sharing
We share information only as needed to operate the service, deliver communications, protect users, or comply with applicable obligations. Providers may process data under their own terms and privacy notices:
- Resend delivers account verification and password-reset email and routes messages submitted through the website support form. It receives destination and message content needed to deliver those communications.
- Cloudflare provides DNS, network delivery, the public website/API tunnel, and Turnstile bot protection. It may process request, network, and challenge metadata for delivery and security.
- Cloudflare Email Routing and Google/Gmail forward and receive messages for BiliBenta support operations. If you contact support through the website form, the request content and reply email may be processed by these providers while being delivered to and handled by the support team.
- Google Mobile Ads SDK is present for optional Android test-ad use. Test ads are disabled by default and are only requested in an Android debug build when the test-ad build flag is explicitly enabled. Google states that when used, it may automatically collect/share IP address (which may estimate general location), app interactions, diagnostic information, and device/account identifiers for advertising, analytics, and fraud prevention. The app code reviewed does not configure a production ad unit. This notice and Google Play Data safety disclosures will be updated before enabling production ads.
Limits on sharing
We do not expose private profile fields to other users as listing content. We may disclose information where required by law or when reasonably necessary to protect users, investigate abuse, enforce terms, or protect the service.
Location and advertising choices
Choose only the general location you are comfortable using for local search and listings; the app does not request GPS permission in the reviewed Android version. If a test ad is explicitly enabled, Google Mobile Ads may use network/device information described in Google’s Android data disclosure. Android users can manage advertising-ID settings in their device settings.
Retention and account deletion
There is no single fixed retention period for every record. We keep account, profile, listing, message, support, and safety information while it is needed to operate the service, handle a request or investigation, protect users, or meet applicable obligations. Inactive conversations may become eligible for cleanup after an administrator-configured threshold, but cleanup is manually initiated; reaching that threshold does not automatically delete messages. Backup copies may persist beyond removal; this notice does not promise a fixed backup deletion interval. You can submit a permanent account-deletion request in the app or through the Support form. A request becomes pending and does not immediately erase the account or listings; it is reviewed, and limited records may be retained where required or reasonably necessary for legal, safety, security, fraud-prevention, abuse-investigation, or dispute purposes.
Security
Production app/API traffic uses HTTPS. Passwords are stored as one-way hashes, and access to service systems is restricted to authorized operations. We use administrative and technical safeguards, but no internet service or storage system can be guaranteed completely secure. Protect your password and never share verification or reset codes.
Children
New account registration is limited to people who are at least 18 years old; anyone under 18 may not create an account. If you believe a person under 18 has an existing account, contact support from Help & legal.
Changes to this policy
We may update this policy when the service or its data practices change. The current version and its last-updated date will be posted here. Material changes will be communicated through the app or another appropriate channel where required.
Contact
For privacy questions or requests, use Contact support from Help & legal or choose the privacy request category in the website Support form. For account deletion, use the in-app Deactivate or delete account option or submit an account-deletion request through the website Support form.
Related: Terms & Conditions · Support