Privacy notice

• Account details: your name and email address, and your password (stored only as a one-way hash).
• Professional profile details (optional): the details you choose to add, such as brokerage, website, social pages and a PRC licence number.
• Listing details: what you submit about a property, and the photos you upload. Location data (EXIF and GPS) is removed from photos.
• Inquiry details: the sender's name, email, optional mobile number and message, with the time consent was given.
• Security and spam records: a one-way hash of your IP address (not the address itself), used for rate limits and anti-spam checks.

• Public: listings; the owner's first name; the professional profile details the lister chose to publish. Login email addresses are never shown publicly.
• Inquiries: only the listing's owner or professional can read an inquiry sent about their listing. Our staff can see that an email notice was sent, but not the message.
• General requests: only our staff can read them. They are not sent to any professional.
• Email delivery records: staff can see the recipient address, subject and delivery status. Message bodies for sign-in links are erased once the link is sent or expires.

To run listings and inquiries, send sign-in and password emails, keep accounts secure, and prevent spam and abuse. [Lawful bases under the Data Privacy Act of 2012 to be confirmed by counsel.]

• Undelivered sign-in and password links are kept for no more than about one hour, then erased.
• Rate-limit records are removed after two days.
• Inquiries, general requests and account records are kept until a deletion process is in place. [Retention periods to be decided by Roy Sunpayco and confirmed by counsel.]

You can ask us to access, correct or delete your personal information. Account deletion is not yet available in the app, so requests are handled by our team. [Request channel and response timeframe to be confirmed before launch.]

Passwords are hashed. Sign-in sessions end when you sign out or reset your password. Undelivered email links are stored encrypted while they wait to be sent. No system is perfectly secure, so please use a strong, unique password.

[How we will tell users about changes to this notice — to be confirmed.]