Privacy Policy

1. What SifuProperty collects

• Buyer inquiries: name, phone, email, message — shared with the agent you contact.
• Agent accounts: name, email, phone, CEA registration number, agency, profile bio.
• Identity verification (agents): when you verify with Singpass, SifuProperty receives your Government-verified full name and NRIC/FIN. We store your verified name and a one-way Singpass reference only — we do not store your raw NRIC/FIN. If you verify manually instead, we collect the identity document(s) you submit (e.g. CEA registration card and a photo ID) for review.
• Listings: property details and photos you upload.
• Usage data: pages viewed, searches, saved listings (anonymous token or your account).
• Analytics: aggregated, non-identifying — to improve the product.

2. Why SifuProperty collects it

• To connect property buyers with CEA-registered agents.
• To verify that agents are who they say they are — via Singpass identity verification and a CEA register lookup, matching the Government-verified name to the CEA-registered name.
• To send inquiry notifications and (with consent) listing alerts.
• To prevent fraud and abuse, including impersonation of an agent using a publicly-available CEA number.
• To comply with Singapore tax and consumer law.

Agent identity verification uses Singpass (Login with Singpass). With your consent at sign-up, SifuProperty receives your Government-verified name and NRIC/FIN solely to confirm you are the CEA-registered agent — your verified name is matched against the CEA public register. Singpass is not the only option: agents who prefer not to use Singpass may instead verify manually by submitting their CEA registration and a photo identity document for review by our team.

3. Who it is shared with

When you submit an inquiry, SifuProperty shares your contact details with the receiving agent only — never with other agents, marketers, or third parties.

SifuProperty uses the following sub-processors:

• Supabase (database + auth) — US/EU regions, SOC 2 certified.
• Resend (transactional email) — US.
• Anthropic Claude API (AI assistance) — listing details are sent to generate descriptions/scoring. Buyer contact info is not sent for AI training; Claude API data is not used to train models.
• Stripe (payments) — handles all card data for agent subscriptions and for services-marketplace payments, escrow and payouts to vendors (via Stripe Connect); SifuProperty never sees your card details.
• OneMap.sg (Singapore Land Authority geocoding).

4. How long your data is kept

• Inquiries — kept by the receiving agent for as long as their account is active, plus 3 years for tax records.
• Anonymous saved listings — until you clear browser storage.
• Agent accounts — deleted on request, or auto-deleted 2 years after the last sign-in.
• Listings — kept while active; archived for 1 year after deletion for fraud investigation.

5. Your rights under PDPA

You can ask SifuProperty to: access the personal data held about you, correct inaccuracies, delete your account and data, or withdraw consent for marketing communications. Email privacy@sifuproperty.com.

You can lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your data has been mishandled.

6. Cookies & tracking

SifuProperty uses first-party cookies for authentication and to remember your saved listings. SifuProperty does not use third-party advertising or marketing trackers. Where an agent adds an introduction video to their profile, it is embedded through YouTube’s privacy-enhanced player (youtube-nocookie.com), which may set cookies on your device only if you press play.

7. Security

Data is transmitted over HTTPS and stored encrypted at rest. Passwords are hashed with bcrypt. Database access is restricted by row-level security to the owning agent or admin.

8. Changes

If this policy materially changes, SifuProperty will notify agents via email at least 30 days before the change takes effect.

9. Data Protection Officer

SifuProperty’s DPO can be reached at dpo@sifuproperty.com.