Privacy Policy
Last updated October 6, 2026
Pasabuy is a marketplace where members send items with travelers (Padala), carry items in their spare baggage (Pasabuy), and buy items for others from abroad (Pabili). This policy explains what we collect, who can see it, and the choices you have. In short: we collect what the marketplace needs to work, we keep identity documents and addresses private, and we don't sell your data.
1. What we collect
Your account
- Your given, middle (optional) and last name, email address, phone number and password (stored only as a secure hash).
- Optional profile details: photo, current country and city, a short “About me”, and the contact and social links you choose to add.
Signing in with Google
- If you choose “Continue with Google”, Google shares your name, email address (and that Google has verified it) and a Google account ID with us. We use them to create or find your account and log you in.
- We do not receive your Google password, and we don't access your contacts, Gmail, Drive or anything else in your Google account.
Identity documents and address (private)
- If you complete your Traveler Profile: a photo of your passport, an identity selfie, and the date you confirmed they belong to you.
- Your permanent address.
- These are stored separately from other uploads and are never shown to other members, not even your connections. Only you and authorised Pasabuy staff can open the documents.
What you post and do
- Pasabuy trips, Padala requests (including package photos), Pabili services and orders, offers, transactions, tracking updates, reviews, connections and notifications.
- Payment records: the method you chose and any proof of payment you upload (for example a transfer receipt). Payments happen directly between members. We don't process card or bank payments and never receive card numbers.
- Guest bookings: when a traveler books a package for someone without an account, the traveler enters that person's name, phone number and delivery address.
Technical data
- Your IP address, browser type and the pages you request, as recorded in our server logs.
- Two essential cookies: a session cookie that keeps you logged in, and a security (CSRF) cookie that protects forms. We use no advertising or analytics cookies.
2. How we use it
- To run your account and the marketplace: listings, offers, transactions, tracking, payments records, reviews and notifications.
- To build trust: showing verification status (email, ID provided, Pasabuy Verified) and ratings from completed transactions.
- To keep Pasabuy safe: preventing fraud and misuse, and enforcing our Terms of Service.
- To send you service emails, such as the link to verify your email address. We don't send marketing emails.
3. Who can see what
- Everyone: your public name (for example “John C.”, or your full name if you choose), photo, current city, About me, ratings and reviews, your listings, and status-only verification chips. Identity documents, ID numbers and your address are never public.
- Connections and members you have an active transaction with: your full name, including your middle name.
- Contact details (phone and social links) follow the visibility you choose for each one (public, connections, or active transactions only) and are hidden from everyone else.
- During a transaction, both sides see what they need to complete it, such as contact details and the pickup and delivery points.
- Pabili: a provider's purchase costs and private notes are never shown to customers.
4. Sharing with others
We don't sell or rent your personal data. We share it only:
- With other members, as described above.
- With service providers that help us run Pasabuy: hosting, email delivery, and Google (for sign-in). Pages load fonts and styles from Google Fonts and jsDelivr, which receive your IP address when they serve those files. Map links open Google Maps only when you click them.
- When the law requires it, or to protect the safety of members and the public.
5. How long we keep it
- We keep your data while your account is open.
- When you replace or remove a photo, document or proof of payment, the old file is deleted.
- If you ask us to delete your account, we delete your personal data. We may keep records of completed transactions, payments and reviews where the law requires it or to resolve disputes.
6. Your choices and rights
- You can see and correct most of your data at any time in Profile & Verification, including who can see each contact detail and whether your full name is public.
- You can ask us for a copy of your data, to correct or delete it, or to stop a particular use, by emailing [email protected].
- Depending on where you live, data-protection laws such as the Philippines Data Privacy Act or Thailand's Personal Data Protection Act may give you further rights. You can also complain to your local data-protection authority.
7. Security
We use HTTPS, store passwords only as secure hashes, and keep identity documents outside the publicly served files, opened only through a permission check. No system is perfectly secure, so please use a strong password and tell us if you notice anything wrong.
8. International use
Pasabuy connects people across countries, so your data may be processed outside the country where you live, for example where our servers are located.
9. Age
Pasabuy is for people aged 18 and over. We don't knowingly collect data from children.
10. Changes
If we change this policy, we'll update the date at the top. For important changes, we'll tell you on the site or by email.
11. Contact
Questions or requests about your privacy: [email protected].