Privacy Policy
This Privacy Policy explains how PropXAI("we", "our", or "us") collects, uses, and protects your personal data when you use our platform at https://propxai.ai. We are committed to your privacy and handle all data responsibly and transparently.
1. Who We Are
PropXAI is an AI-powered platform that helps Singapore property agents manage leads, generate content, and engage with potential buyers and renters through AI chatbots on web, WhatsApp, and Telegram.
For any privacy-related questions, contact us at lawpropxai@gmail.com.
2. What Personal Data We Collect
We collect two categories of personal data:
A. Property Agents (our registered users)
- Full name and email address (via account registration)
- Agency name and phone number (optional, entered in profile settings)
- Professional bio (optional)
- Property listings you add to the platform
- AI-generated content you create (captions, posts, listings)
- Usage data (message count, content count, login timestamps)
B. Leads (visitors who chat with your agent's AI bot)
- Name (if shared voluntarily during conversation)
- Phone number (if shared voluntarily during conversation)
- Email address (if shared voluntarily during conversation)
- Property preferences: budget, property type, location, timeline
- Full conversation history with the AI bot
- Channel identifier (WhatsApp number or Telegram chat ID)
- Lead score (hot / warm / cold) assigned by AI analysis
3. Why We Collect It and How It's Used
| Data | Purpose |
|---|---|
| Agent name, email, phone | Account creation, authentication, agent profile displayed to leads |
| Property listings | Shown to leads in AI chat conversations to match their needs |
| Lead name, phone, email | Stored in agent's CRM so the agent can follow up with interested buyers |
| Conversation history | Used by AI to provide contextual, coherent responses; stored for agent review |
| Lead preferences & score | Helps agents prioritise follow-ups based on lead quality (hot/warm/cold) |
| Usage counters | Enforcing plan quotas (Free vs Pro) and billing purposes |
| Login timestamp | Security auditing and account activity tracking |
We do not use your data for advertising, profiling unrelated to our service, or any automated decision-making that produces legal effects on you.
4. Third-Party Services (Infrastructure Only)
We use trusted third-party infrastructure providers to operate our platform. We do not sell, rent, trade, or share your personal data with any third party for their own use. These providers act solely as data processors on our behalf:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase (supabase.com) | Database and authentication hosting | All stored data — hosted on AWS in Singapore region |
| Anthropic (anthropic.com) | AI language model (Claude) powering chat responses | Conversation messages sent for AI processing — not stored by Anthropic |
| Twilio (twilio.com) | WhatsApp message delivery | WhatsApp phone numbers and message content for WhatsApp conversations |
| Meta / Facebook | WhatsApp Business API (for agents connecting their own number) | WhatsApp Business account credentials and phone numbers |
| Telegram | Telegram Bot API for message delivery | Telegram chat IDs and message content for Telegram conversations |
| Vercel (vercel.com) | Web hosting and deployment infrastructure | Request logs (IP addresses, timestamps) — standard web server logs |
All providers are bound by their own data processing agreements and applicable data protection laws. We do not authorise any provider to use your data for purposes beyond delivering our service.
5. How Long We Retain Your Data
| Data type | Retention period |
|---|---|
| Agent account data | For as long as your account is active, plus 30 days after deletion request |
| Lead profiles and conversations | Retained as long as the agent account is active; deleted when account is deleted |
| AI-generated content | Retained until deleted by the agent, or when account is deleted |
| Property listings | Retained until deleted by the agent, or when account is deleted |
| Usage / quota counters | Rolling 30-day window; historical data deleted after 90 days |
| WhatsApp / Telegram session data | Retained for the duration of the active conversation session |
| Server logs (Vercel) | Up to 30 days, per Vercel's standard log retention policy |
When an account is deleted, all associated data — including leads, conversations, content, and properties — is permanently removed from our systems within 30 days.
6. Your Rights
You have full rights over your personal data. We honour all of the following:
- →Right to Access: You may request a copy of all personal data we hold about you at any time.
- →Right to Deletion: You have the right to delete your account and all associated data. You can do this directly from your account settings, or by contacting us. Data is permanently removed within 30 days.
- →Right to Rectification: You can update your profile information directly in the Settings page at any time.
- →Right to Data Portability: You may request an export of your leads, properties, and content in a machine-readable format (CSV/JSON).
- →Right to Object: You may object to any processing of your data that you do not agree with. Contact us and we will respond within 14 days.
- →Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at lawpropxai@gmail.com. We will respond within 14 business days.
7. Data Security
We take data security seriously. All data is encrypted in transit (TLS/HTTPS) and at rest. Access to production data is restricted to authorised personnel only. We use Supabase Row Level Security (RLS) to ensure agents can only access their own data. Authentication is handled via Supabase Auth with secure session tokens.
In the event of a data breach that affects your personal data, we will notify affected users within 72 hours of becoming aware of it.
8. Cookies
We use only essential session cookies required to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required as we do not use non-essential cookies.
9. Children's Privacy
PropXAI is intended for use by property professionals and adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify registered agents via email for material changes. Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or concerns: