Privacy policy

Who we are

PropAIro is a web app for Singapore property agents. It is run by JWD & AKD ERA (“we”). Questions about this policy or your data: propairosg@gmail.com.

What the app keeps about agents

When you sign up or use the app, we keep:

• your name, mobile number and Associate Code;
• the profile details you add: full name, email, CEA registration number, agency name and licence number;
• your profile photo, if you add one on My profile: a small square copy (800 × 800 pixels) of the picture you choose, cropped and shrunk on your own device before it is uploaded;
• your password, stored only as a one-way scrambled form (a hash) that nobody can read back;
• a record of sign-ins and account changes (for example password resets), for security;
• problem reports you send with the “!” button: what you typed, the page's address, your device and browser, the app version and the page's last error. Never what's on your screen;
• counts of failed sign-in attempts, to stop password guessing. These are kept against one-way hashed versions of the mobile number and the connection's IP address (never the number or address itself) and are deleted after two days without activity.

This is stored in a Cloudflare database (D1) located in the Asia-Pacific region, and used only to run the app: signing you in, filling your details into documents, and letting super users manage accounts. Super users can see agents' account details, but never their passwords or anyone's clients. Only you can change your details (on My profile); a super user can change only your mobile number, because it's what you sign in with.

Your profile photo is kept in Cloudflare's private file storage (R2), also in the Asia-Pacific region. It is used only to put your photo on the birthday and festive greeting images that you choose to send to your clients. Only you and super users can see it in the app; it is never public, and it isn't shared with anyone else. You can change or remove it at any time on My profile, and removing it deletes the file.

Your clients' details

Client details (names, mobile numbers, NRIC/FIN numbers, dates of birth, addresses and similar) stay in your own Google Sheet, in your own Google account. The app reads and writes that sheet for you while you use it, but does not keep a copy of client details in its database or logs, and does not keep filled documents after you download them. The same goes for your leads, which stay in your own Lead Sheet. Super users' division lists (My Division) are kept the same way: the Downlines Info Report you upload is read in your own browser and its members go straight into your own Division Sheet; the app keeps no copy of the file or of the members' details. The image you add in Division Outreach is resized in your browser and goes only into the email sent to you; the app keeps no copy of it. For your daily list, the app keeps only a scrambled code for each of the day's leads (a one-way hash of their mobile number, not the number) and what you recorded – for example “called – no answer”.

You remain responsible for your clients' data under Singapore's Personal Data Protection Act (PDPA), including having their consent and only collecting NRIC/FIN numbers where it is allowed.

How PropAIro is used (usage counts)

To improve PropAIro, we keep counts of how the app is used, collected all the time and kept for as long as PropAIro runs: for example, how many daily progress updates, morning emails, client invitations, taps on the WhatsApp buttons in Blast List, Festive Outreach and Division Outreach emails, Project Updates texts (and how many were opened in WhatsApp), Daily Social Posts shared and filled forms there are, and how many people have an account. Super users see these counts as totals for everyone together – not per agent – with graphs, and can download them.

The WhatsApp buttons in Blast List, Festive Outreach and Division Outreach emails, and Open in WhatsApp on Project Updates, open WhatsApp through propairo.com for a moment so the tap can be counted. Nothing about the person or the message is kept.

Google account access

If you choose “Connect Google”, the app asks Google for permission to:

• see your Google account email address, to show which account is connected;
• open and edit only the Google Sheets you pick in Google's file picker, or that the app creates for you. It cannot see any other files in your Google Drive.

If you also choose “Connect Gmail” on Daily progress, the app asks for permission to send email on your behalf, from the Gmail that matches the email on your profile. It uses this only for three things: your 8 am morning email, sent to yourself; when you choose “Blast List”, an email to yourself listing the leads you ticked, each with a WhatsApp button (the app never messages your leads – you do, by tapping each button); and, when you choose “Invite clients”, one invitation email to each client you tick (up to 25 at a time). Nothing is sent that you haven't asked for. It cannot read, search or delete your email. You can turn the morning email off or disconnect Gmail on Daily progress, or remove the permission by disconnecting Google.

We use this access only to show, add, edit and delete clients in your Client Sheet, leads in your Lead Sheet and (for super users) division members in your Division Sheet, to fill your documents, to send you your morning email and blast lists, and to send the client invitations you choose (the clients' emails are read from your Client Sheet at the moment you send; the app keeps no copy). Documents are filled in your own browser: the app sends your browser the details for the forms you choose, and keeps no copy. We do not sell Google user data, use it for advertising, share it with anyone else, or use it to train AI models. PropAIro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The access key Google gives the app is stored encrypted and used only by the app's server. You can disconnect Google on your My profile page at any time, or remove the app's access in your Google account settings. When you disconnect, or your account is deactivated or deleted, the stored key is deleted.

Cookies

The app sets one cookie, to keep you signed in. There are no advertising or tracking cookies and no analytics.

Who else handles data

The app runs on Cloudflare, which serves it from data centres close to each visitor, and stores agent accounts in Cloudflare's database in the Asia-Pacific region. Cloudflare processes this data only to provide these services to us. Cloudflare also keeps short-lived technical logs (such as IP addresses, pages requested and errors) for security and troubleshooting; these never include your clients' details. Client details are held by Google in your own Google account.

When you choose a new password, the app checks it against Have I Been Pwned's list of passwords exposed in data breaches. Only the first five characters of a one-way hashed version of the password are sent; the password itself never leaves the app. After several wrong sign-in attempts, the app may ask you to complete Cloudflare Turnstile, a check that you are a person, which Cloudflare runs without advertising cookies.

Security

All traffic uses HTTPS. Passwords and the Access Code are stored as one-way hashes, Google access keys are encrypted, and NRIC/FIN numbers are masked in lists (for example S****567D).

How long we keep it

Your account details are kept while your account exists. When a super user deletes your account, your details, profile photo and Google access key are deleted; the security record of past actions is kept without your name. Greeting artworks uploaded by super users (which hold no personal data) are deleted automatically two years after they were uploaded. Usage counts (totals for everyone, with no personal or client data) are kept for as long as PropAIro runs.

Your choices

• Update your profile details, or add, change or remove your profile photo, on the Profile page.
• Disconnect Google at any time on your My profile page.
• Ask us for a copy of your account data, to correct it, or to delete your account: propairosg@gmail.com.

Changes

If we change this policy, we will update this page and the date at the top.