Privacy Policy

1. What we collect

• Buyer inquiries: name, phone, email, message — shared with the agent you contact.
• Agent accounts: name, email, phone, CEA registration number, agency, profile bio.
• Listings: property details and photos you upload.
• Usage data: pages viewed, searches, saved listings (anonymous token or your account).
• Analytics: aggregated, non-identifying — to improve the product.

2. Why we collect it

• To connect property buyers with CEA-registered agents.
• To verify that agents are who they say they are (CEA register lookup).
• To send inquiry notifications and (with consent) listing alerts.
• To prevent fraud and abuse.
• To comply with Singapore tax and consumer law.

3. Who we share it with

When you submit an inquiry, we share your contact details with the receiving agent only — never with other agents, marketers, or third parties.

We use the following sub-processors:

• Supabase (database + auth) — US/EU regions, SOC 2 certified.
• Resend (transactional email) — US.
• Anthropic Claude API (AI assistance) — we send listing details to generate descriptions/scoring. We do not send buyer contact info to AI training; Claude API data is not used to train models.
• Stripe (agent payments) — handles all card data; we never see it.
• OneMap.sg (Singapore Land Authority geocoding).

4. How long we keep your data

• Inquiries — kept by the receiving agent for as long as their account is active, plus 3 years for tax records.
• Anonymous saved listings — until you clear browser storage.
• Agent accounts — deleted on request, or auto-deleted 2 years after the last sign-in.
• Listings — kept while active; archived for 1 year after deletion for fraud investigation.

5. Your rights under PDPA

You can ask us to: access the personal data we hold about you, correct inaccuracies, delete your account and data, or withdraw consent for marketing communications. Email privacy@propertysifu.com.

You can lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe we've mishandled your data.

6. Cookies & tracking

We use first-party cookies for authentication and to remember your saved listings. We do not use third-party advertising or marketing trackers.

7. Security

Data is transmitted over HTTPS and stored encrypted at rest. Passwords are hashed with bcrypt. Database access is restricted by row-level security to the owning agent or admin.

8. Changes

If we materially change this policy we'll notify agents via email at least 30 days before the change takes effect.

9. Data Protection Officer

Our DPO can be reached at dpo@propertysifu.com.