Privacy Policy / 隐私政策

This is the Privacy Policy for the PropertyHunt beta. We may update it as the Service evolves; the current version and its effective date are always shown on this page. Where there is any inconsistency between the English and Chinese text, the English text prevails for legal purposes (the Chinese is provided for convenience). 本文为 PropertyHunt beta 隐私政策，可能随服务演进更新；最新版本与生效日期恒于本页显示。中英文若有不一致，法律上以英文为准（中文仅为便于理解）。

• Effective date / 生效日期: 3 July 2026 / 2026 年 7 月 3 日
• Governing law / 适用法律: Laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA 2010). / 马来西亚法律，包括《2010 年个人资料保护法》。

---

1. Introduction / 简介

This Privacy Policy explains how PropertyHunt ("PropertyHunt", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you use our service (the "Service"). PropertyHunt is a software tool that helps property agents operating in Kuala Lumpur and Selangor, Malaysia, collect, organise, and follow up on property listings and prospective tenants.

本隐私政策说明 PropertyHunt 在你使用本服务时如何收集、使用、披露、存储和保护个人资料。PropertyHunt 是帮助马来西亚吉隆坡与雪兰莪房地产中介收集、整理与跟进房源及潜在租客的软件工具。

This Policy is issued in accordance with the Notice and Choice Principle under the PDPA 2010.

本政策依 PDPA 2010「通知与选择原则」发布。

The product/brand name is "PropertyHunt"; the legal entity operating it is identified in Section 2. / 产品/品牌名为「PropertyHunt」，运营之法律实体见第 2 节。

---

2. Who We Are — Data Controller / 我们是谁 — 数据控制者

The party responsible for your personal data under the PDPA 2010 (the "data user" in PDPA terms) is:

依 PDPA 2010 对你的个人资料负责的一方（PDPA 术语称为「data user / 资料使用者」）为：

• Legal entity name / 法律实体名称: PropertyHunt Technologies
• Business form / 商业形式: Sole Proprietorship (独资 / Pemilikan Tunggal), registered with the Companies Commission of Malaysia (SSM). As this is a sole proprietorship, the "data user" under the PDPA 2010 is the proprietor, Lim Zhi Yen, trading as PropertyHunt Technologies. / 独资企业（于马来西亚公司委员会 SSM 注册）。因属独资，PDPA 2010 下的「资料使用者」为东主 Lim Zhi Yen，以 PropertyHunt Technologies 名义经营。
• Company / business registration number / 注册号: 202603145579 (003856905-U)
• Registered in / 注册地: Malaysia (registered with the Companies Commission of Malaysia, SSM). We do not publish a street address; for any contact please use the email below / in Section 14. / 马来西亚（于马来西亚公司委员会 SSM 注册）。我们不公开街道地址；一切联系请用下方／第 14 节邮箱。
• Contact email for privacy matters / 隐私事务联系邮箱: privacy@propertyhunt.my
• Privacy contact / 隐私查询联系人: Lim Zhi Yen (proprietor). During the beta there is no formally-appointed DPO; the proprietor personally handles privacy queries. / Lim Zhi Yen（东主）。Beta 期间未正式委任 DPO，由东主本人处理隐私查询。

---

3. What Personal Data We Collect / 我们收集哪些个人资料

The categories differ depending on whether you are an agent (our registered user), a property owner whose listing details we collect from public sources, or a prospective tenant.

类别因主体不同而异：中介（注册用户）、业主（房源信息从公开来源采集）、潜在租客。

3.1 Agent account data / 中介账号资料

Information you provide when you register and use an agent account:

• Name / 姓名
• Email address / 电邮地址
• Phone number / 电话号码
• Login credentials (stored hashed/secured) / 登录凭证（加密存储）
• Account and subscription details / 账号与订阅资料

PropertyHunt does not require you to be a licensed/registered real-estate negotiator or agent in order to register, and does not collect or store a professional licence/registration number (REN/REA/BVEAP). / PropertyHunt 不要求你为持牌/注册房地产中介方可注册，也不收集或存储执业资格编号（REN/REA/BVEAP）。

3.2 Property owner data / 业主资料

PropertyHunt collects information about property owners from publicly accessible listing platforms (such as Mudah) so that agents can act on owner-direct listings. We collect:

• The owner's name, where the owner has published it on the listing. / 业主姓名（业主在房源上公开时）。
• The owner's contact phone number, where published. / 业主联系电话（公开时）。
• Listing attributes associated with the owner: property location/area, building name, property type, bedrooms, price, and the listing description text. / 与业主相关的房源属性：地址/区域、楼盘名、房型、房间数、价格、房源描述文本。

We do not collect owner email addresses or social-media handles. / 我们不采集业主电邮或社媒账号。

⚠️ Important / 重要： This owner data is collected from public sources and is not provided to us directly by the owner. Owners have themselves published their contact details on those platforms while actively offering their property for rent; we process this data only for the directly-related purpose of surfacing that owner-direct listing to agents, and we act on manual access/correction/removal requests (Section 11). ⚠️ 此业主资料来自公开来源、非业主直接提供。业主在这些平台上出租房产时已自行公开联系方式；我们仅为直接相关目的（向中介呈现该业主直盘）而处理，并按请求人工受理访问/更正/移除（第 11 节）。

3.3 Prospective tenant data / 潜在租客资料

Tenant information is entered by the agent into the Service (there is no tenant-facing self-registration). It may include:

• Name / 姓名
• Contact details (phone) / 联系方式（电话）
• Rental requirements and preferences (budget, preferred areas, property type, bedrooms, etc.) / 租房需求与偏好（预算、意向区域、房型、房间数等）

Because tenant data is entered by the agent who has the relationship with the tenant, the agent is responsible for having an appropriate basis (e.g. the tenant's consent) to enter it — see the Terms of Service. 因租客资料由与租客有关系的中介录入，中介须负责具备录入的适当基础（如租客同意）——见服务条款。

3.4 Automatically collected technical data / 自动收集的技术数据

• Log data (IP address, access times) and device/browser information generated as you use the Service. / 日志数据（IP、访问时间）与设备/浏览器信息。

Cookies & analytics: We do not use third-party analytics, advertising, or tracking cookies (no Google Analytics, no advertising pixels). We use only essential cookies required for authentication/session, set by our authentication provider. / Cookie 与分析： 我们不使用第三方分析、广告或追踪 cookie；仅使用认证/会话所必需的基础 cookie（由认证服务商设置）。

3.5 Sensitive personal data / 敏感个人资料

We do not collect sensitive personal data as defined under the PDPA 2010 (e.g. physical or mental health, religious or political beliefs, commission of offences, biometric data).

我们不收集 PDPA 2010 定义的敏感个人资料（如身心健康、宗教/政治立场、犯罪记录、生物特征）。

---

4. How We Collect Personal Data / 我们如何收集个人资料

1. Directly from you — when an agent registers or enters information into the Service. / 直接从你处——中介注册或录入信息时。
2. From publicly accessible platforms — owner and listing details from public platforms such as Mudah. / 从公开平台——Mudah 等公开平台的业主与房源信息。
3. Automatically — technical data generated as you interact with the Service. / 自动生成——交互时产生的技术数据。

---

5. Why We Use Your Personal Data / 我们为何使用你的个人资料

• To provide the core Service: collecting, organising, and displaying property listings to agents. / 提供核心服务。
• To help agents follow up on listings and prospective tenants. / 帮助跟进房源与租客。
• To match listings with prospective tenants' stated requirements. / 房源与租客需求配对。
• To create and manage agent accounts and subscriptions. / 创建与管理账号及订阅。
• To maintain the security, integrity, and proper functioning of the Service. / 维护安全、完整与正常运行。
• To comply with legal obligations. / 遵守法律义务。

Lawful bases: agent data is processed on the basis of the agent's consent (given at registration) and performance of our contract with the agent; tenant data is processed to carry out the agent's property-agency activity; owner data collected from public platforms is processed for the directly-related purpose of surfacing owner-direct listings to agents (Section 3.2 / Section 11). 合法基础： 中介资料依同意（注册时）与履行合同；租客资料用于中介正当业务；公开平台业主资料为直接相关目的（向中介呈现业主直盘）而处理（第 3.2／11 节）。

We do not sell your personal data. / 我们不出售你的个人资料。

---

6. Disclosure of Personal Data / 个人资料的披露

We may disclose personal data to:

• Agents using the Service — listing and tenant data is made visible to the relevant agent for whom the Service operates. / 使用本服务的中介。
• Third-party service providers (sub-processors) who host or process data on our behalf (listed below). / 第三方服务提供商（sub-processor，见下）。
• Authorities — where required by law, court order, or lawful request. / 政府/执法机关（法律要求下）。

Our sub-processors and what they process / 我们的 sub-processor 及其处理内容:

Some of these providers process data outside Malaysia — see Section 7. / 部分提供商在马来西亚境外处理数据——见第 7 节。

---

7. Data Storage and International Transfer / 数据存储与跨境传输

Your personal data is stored and processed on infrastructure operated by our sub-processors, located in more than one country:

你的个人资料存储与处理在我们 sub-processor 运营的、位于多个国家的基础设施上：

• Stored at rest in Singapore — our database, authentication, and file storage (Supabase) are hosted in the Singapore (ap-southeast-1) region. / 静态存储在新加坡——数据库/认证/存储（Supabase）位于新加坡（ap-southeast-1）。
• Processed in the United States — application hosting and request processing (Vercel) run in the United States (us-east-1 / iad1) region, so data is transmitted to and processed in the US. / 在美国处理——应用托管与请求处理（Vercel）位于美国（us-east-1 / iad1），数据会传输至美国并在美国处理。
• Processed in Finland (EU) — the listing-ingest worker (Hetzner) that processes owner listing data runs in Finland (Helsinki, EU). / 在芬兰（EU）处理——处理业主房源数据的采集 worker（Hetzner）位于芬兰（赫尔辛基，EU）。
• Email forwarding (ImprovMX) — inbound emails sent to privacy@ / support@ are relayed by our email-forwarding provider ImprovMX. ImprovMX does not publish its datacenter region in its documentation, so the precise processing location is not known to us. / 进站邮件转发（ImprovMX）——发到 privacy@／support@ 的邮件由 ImprovMX 中转；其文档未公布机房区域，故确切处理地点我们尚不确定。

This means your personal data is transferred outside Malaysia — to Singapore (storage), the United States (processing/hosting), and Finland / EU (background worker processing). We disclose this so you are informed of the cross-border transfer.

即你的个人资料会传输至马来西亚境外——新加坡（存储）、美国（处理/托管）、芬兰/EU（后台 worker 处理）。我们如实披露此跨境传输以使你知情。

---

8. Data Retention / 数据保留

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

我们仅在实现收集目的所必需期间内，或法律要求期间内，保留个人资料。

Retention periods by category / 各类数据保留期限:

• Agent account data / 中介账号资料: retained while the account is active; deleted within 90 days of account closure, except records we are required to keep by law (e.g. billing/tax records retained for the period required under Malaysian law). / 账号有效期间保留；注销后 90 天内删除，法律要求保留者除外（如账单/税务记录按马来西亚法律要求年限保留）。
• Tenant / Client data / 租客资料: retained while the agent keeps the record; deleted when the agent deletes it, or within 90 days of the agent's account closure. / 中介保留期间保留；中介删除即删，或账号注销后 90 天内删除。
• Owner / listing data (public platforms) / 业主房源资料（公开平台）: the owner's contact details are purged when the listing has not been seen on the source platform for more than 90 days (staleness tracked via first-seen / last-scraped timestamps). / 房源在来源平台连续超过 90 天未再出现时清除业主联系方式（以 first-seen/last-scraped 时间戳判定时效）。
• Log data / 日志数据: rotated and deleted within 90 days. / 90 天内轮替删除。

Note (honest) / 说明（如实）: these are the periods we commit to. During the beta, the owner-data purge is carried out on a manual / periodic basis (an automated purge job is a planned improvement), so the published periods are ones we can meet. / 上述为我们承诺的期限；beta 期业主资料过期清除目前以人工/周期方式执行（自动清除为计划中的改进）。

---

9. Security / 安全措施

We take practical steps to protect personal data from loss, misuse, unauthorised access, modification, or disclosure, in line with the Security Principle under the PDPA 2010. At a general level, these include: encryption of data in transit (HTTPS), access controls and per-account data isolation, credentials stored in hashed/secured form, and managed-infrastructure safeguards.

我们依 PDPA 2010「安全原则」采取切实措施保护个人资料。概括包括：传输加密（HTTPS）、访问控制与按账号数据隔离、登录凭证加密存储、托管基础设施保障。

This section is deliberately general and does not disclose specific technical configurations. / 本节有意概括，不披露具体技术配置。

---

10. Your Rights / 你的权利

Under the PDPA 2010, you have the right to access your personal data, correct inaccurate/incomplete/misleading/out-of-date data, withdraw consent (where processing is consent-based), and limit processing in certain circumstances.

依 PDPA 2010，你有权访问、更正、撤回同意（同意为基础时）、在某些情形限制处理你的个人资料。

How to exercise / 如何行使:

• Agents can view and edit their own account data within the Service (Settings). / 中介可在服务内（Settings）查看与编辑自身账号资料。
• Owners and tenants (non-registered) may contact us at the email in Section 14 to request access, correction, removal, or to object to processing; we handle such requests manually and respond within the timeframe required by law. / 业主与租客（非注册）可经第 14 节邮箱请求访问/更正/移除/反对处理；我们人工受理并在法律要求期限内回复。

---

11. Owners and Tenants Whose Data We Hold / 我们持有其资料的业主与租客

Where we hold the personal data of a property owner (collected from public platforms) or a prospective tenant, that individual may contact us (Section 14) to access, correct, or request removal of their personal data, or to object to its processing. We handle these requests manually and will action removal where appropriate.

对于我们持有的业主（自公开平台采集）或租客的个人资料，该个人可联系我们（第 14 节）访问/更正/要求移除/反对处理。我们人工受理，适当时执行移除。

Note on contact / 关于联系: PropertyHunt itself does not automatically contact owners or tenants. Owner contact details are surfaced to the agent, who decides whether and how to contact the owner using their own tools (e.g. phone/WhatsApp). The Service does not currently operate an automated do-not-contact suppression mechanism; removal/objection requests are handled manually as described above. 关于联系： PropertyHunt 本身不自动联系业主或租客。业主联系方式呈现给中介，由中介自行决定是否及如何用自己的工具（电话/WhatsApp）联系。本服务目前不运行自动「拒绝联系」抑制机制；移除/反对请求按上述人工受理。

---

12. Children's Data / 未成年人资料

The Service is intended for use by property agents and is not directed at children. Users must be at least 18 years old.

本服务面向房地产中介、不面向未成年人；用户须年满 18 岁。

---

13. Changes to This Policy / 政策变更

We may update this Privacy Policy from time to time. The current version and its effective date will be posted within the Service. Material changes will be notified by email to registered agents and posted within the Service; minor changes will be posted within the Service only.

我们可能不时更新本政策。最新版本与生效日期将在服务内公布。重大变更经邮件通知已注册中介 + 站内公布；小改仅站内公布。

---

14. Contact Us / 联系我们

For any questions, requests, or complaints regarding this Privacy Policy or your personal data, contact:

如对本隐私政策或你的个人资料有任何疑问、请求或投诉，请联系：

• Email / 电邮: privacy@propertyhunt.my
• Location / 所在地: Malaysia. We do not publish a street mailing address; please contact us via the email above. / 马来西亚。我们不公开街道邮寄地址，请用上方邮箱联系。

You also have the right to lodge a complaint with the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP) of Malaysia.

你亦有权向马来西亚个人资料保护专员（JPDP）提出投诉。