This Privacy Policy explains how PropScoute Pte. Ltd. (“PropScoute”, “we”, “us”) collects, uses, shares, and protects personal information when you use our website, mobile applications, and related services. We take privacy seriously and aim to be transparent about what data we hold and why. If you have questions, contact our Data Protection Officer at privacy@propscoute.com.
01 Who we are
PropScoute Pte. Ltd. is a Singapore-incorporated company operating a cross-border property search and listing platform across Singapore, Malaysia, Japan, Indonesia, Australia, and Vietnam. For the purposes of applicable data protection laws — including Singapore’s Personal Data Protection Act (PDPA), the EU/UK General Data Protection Regulation (GDPR), Indonesia’s Personal Data Protection Law (UU PDP), and similar regimes — PropScoute is the data controller for the personal data described in this policy.
You can reach our Data Protection Officer (DPO) at:
- Email: privacy@propscoute.com
- Postal: PropScoute Pte. Ltd., Attn: DPO, Singapore
02 Data we collect
We only collect data that we genuinely need to deliver, secure, and improve the PropScoute service. The categories below describe what we may collect; not every item applies to every user.
Information you provide
- Account details: name, email, phone number, password, profile photo, country of residence.
- Search and listing data: saved searches, shortlisted properties, enquiry messages to agents/developers, budget and preferences.
- Verification details (for premium agents and developers): business registration, licence numbers, identification documents.
- Payment information (for paid services): billing name, address, partial card details. Full card numbers are handled by our PCI-DSS compliant payment processors and are never stored on PropScoute servers.
- Correspondence: messages and attachments you send through our forms, chat, or support channels.
Information collected automatically
- Device and connection: IP address, browser type and version, operating system, device identifiers.
- Usage data: pages viewed, listings clicked, time on page, referrer URL, approximate location based on IP.
- Cookies and similar technologies: see our Cookie Settings page for the full list.
Information from third parties
- Single sign-on (SSO): if you sign in with Google, Apple, or LinkedIn, we receive basic profile information you authorise that provider to share.
- Public sources: property records, developer information, and similar data from official registries and publishers.
- Marketing partners: aggregated audience insights, where you have consented to receive marketing.
03 How we use your data
We use personal data for the following purposes:
- Provide the service — create your account, deliver search results, route enquiries to agents, process payments, and send transactional emails (booking confirmations, password resets).
- Personalise your experience — remember your currency, language, recently viewed listings, and recommend properties relevant to your saved preferences.
- Communicate — respond to support requests, send service updates, and (with your consent) send marketing emails about new launches, market reports, and offers. You can unsubscribe from marketing at any time via the link in every email.
- Secure the platform — detect and prevent fraud, abuse, and unauthorised access; investigate violations of our Acceptable Use Policy.
- Analyse and improve — measure how features are used and develop new ones. Where possible, we work with aggregated or anonymised data.
- Meet legal obligations — comply with anti-money-laundering rules, tax reporting requirements, and lawful requests from authorities.
04 Legal basis for processing
Where the GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:
| Activity | Legal basis |
|---|---|
| Creating and managing your account, processing transactions | Performance of a contract |
| Sending marketing emails, setting non-essential cookies | Your consent (which you can withdraw at any time) |
| Improving the platform, preventing fraud, securing our systems | Our legitimate interests, balanced against your rights |
| Tax reporting, anti-money-laundering checks, responding to legal process | Compliance with legal obligations |
For users in Singapore, processing is governed by the PDPA — generally on the basis of your consent (express or implied) or another lawful basis under the Act.
06 How long we keep data
We keep personal data only as long as we need it for the purposes described above, or as required by law. Typical retention periods include:
- Account data — for as long as your account is active, plus up to 24 months after closure for fraud prevention and dispute handling.
- Enquiry messages — up to 36 months from the date of last interaction.
- Payment and tax records — at least 7 years to satisfy financial and regulatory requirements in our jurisdictions of operation.
- Marketing data — until you unsubscribe, and a suppression record thereafter so we honour your choice.
- Server logs — typically 30 to 90 days.
When we no longer need data, we delete it or anonymise it so it can no longer be linked to you.
07 Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Delete data (“right to be forgotten”) in certain circumstances.
- Restrict or object to certain processing, including direct marketing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the data protection authority in your country (e.g. Singapore PDPC, Indonesia Kominfo).
To exercise any of these rights, email privacy@propscoute.com. We may need to verify your identity before fulfilling the request, and will respond within the timeframes required by law (typically 30 days).
08 International transfers
PropScoute operates across multiple countries, and our service providers are located in various jurisdictions. This means your personal data may be transferred to, stored in, or processed in countries outside your own — including Singapore, the EU, the United States, and the markets we cover.
When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms recognised under applicable law. You can request a copy of the safeguards in place by contacting our DPO.
09 How we protect your data
We use reasonable administrative, technical, and physical safeguards to protect personal data from loss, misuse, and unauthorised access. These include:
- TLS 1.3 encryption for data in transit.
- Encryption at rest for databases and backups.
- Strict access controls, role-based permissions, and audit logging.
- Regular vulnerability scanning and third-party penetration testing.
- Employee training on privacy and security responsibilities.
No system is perfectly secure, but we work continually to reduce risks. If we ever experience a personal data breach that materially affects you, we will notify you and the relevant authorities as required by law.
10 Children’s privacy
PropScoute is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. The “Last updated” date at the top of this page shows when the policy was most recently revised. For material changes, we will notify you in advance — through a banner on the site, an email, or another reasonable means — before the changes take effect.
12 Contact us
If you have questions, concerns, or requests about your personal data, contact us:
- Privacy / DPO: privacy@propscoute.com
- General enquiries: contact@aihxa.com
- Postal: PropScoute Pte. Ltd., Attn: Data Protection Officer, Singapore
If you are not satisfied with our response, you have the right to complain to your local data protection authority. In Singapore, that is the Personal Data Protection Commission (PDPC).
Questions about this privacy policy?
Our legal team is happy to clarify anything that is unclear or to address specific concerns about your situation.
