Privacy Policy
Last updated: 20 February 2026
1. Introduction
pj.sg ("we", "us", "our") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
2. Data We Collect
Account Data: Name, email address, phone number (optional), and password hash for registered users. Agent Data: CEA registration number, agency name, agency license, specializations, districts served, bio, and WhatsApp number for agent profiles. Usage Data: Chat messages, search queries, pages visited, and AI interaction logs for service improvement. Transaction Data: Subscription and payment information processed by Stripe. We do not store credit card numbers. Property Data: Listing details, photos, and descriptions submitted by agents.
3. How We Use Your Data
We use your data to: - Provide and improve the Service (AI search, valuations, listings) - Process agent subscriptions and payments - Send service-related communications - Generate anonymized analytics and market insights - Comply with legal obligations We do NOT sell your personal data to third parties.
4. AI and Chat Data
Chat messages are stored to maintain conversation history and improve AI responses. Messages may be used to train and improve our AI models in anonymized form. You can delete your chat history at any time from your account settings.
5. Data Sharing
We share data only with: - Stripe (payment processing) - Ollama/AI infrastructure (query processing โ hosted on our own servers, data does not leave Singapore) - Government data sources (we receive, not send, data from data.gov.sg, URA, HDB) Agent contact information (name, agency, WhatsApp) is displayed on their listings as part of the Service.
6. Data Security
We implement appropriate security measures including: - Passwords hashed with bcrypt - JWT tokens with expiration and refresh rotation - HTTPS/SSL encryption for all traffic - Rate limiting on API endpoints - Docker containers running as non-root users - Redis token blacklisting for logout All data is hosted on servers located in Singapore.
7. Data Retention
We retain your personal data for the following periods: Account Data: Retained for 3 years after your last login, or until you request deletion. This includes your profile information, preferences, and authentication data. Chat Messages: Retained for 12 months from the date of creation, then automatically deleted. You may delete chat history earlier via your account settings. Listing Data: Retained for 2 years after a listing is deleted or expired. This includes property details, photos, and descriptions. Contact Enquiries: Retained for 1 year to maintain communication history and improve service quality. Transaction Data: Public government data (HDB, URA) is retained indefinitely as reference data. Payment records are retained for 7 years per IRAS tax requirements. Analytics Data: Retained for 26 months (Google Analytics standard), then automatically deleted. Server Logs: Retained for 90 days for security and debugging purposes, then automatically deleted. Deletion Procedures: You may request deletion of your account and associated data at any time by contacting privacy@pj.sg. We will process your request within 30 days and confirm completion via email. Some data may be retained longer if required by law or for legal proceedings.
8. Your Rights
Under the PDPA, you have the right to: - Access your personal data held by us - Correct inaccurate personal data - Withdraw consent for data processing - Request deletion of your account and data To exercise these rights, contact us at privacy@pj.sg.
9. Cookies
We use localStorage (not cookies) to store authentication tokens (JWT access and refresh tokens). No third-party tracking cookies are used. We do not use advertising trackers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related inquiries, contact: Data Protection Officer pj.sg Email: privacy@pj.sg