Privacy policy

The short version

PropertyPocket stores the property listings you choose to save, and your account details. It does not track your browsing, does not build a profile of you, and does not sell your data or hand it to anyone. The only people who ever see it are the ones you share a list with, by name, because you chose to.

This policy describes how SG Systems PTE. LTD., a Singapore-registered company, collects and protects your information when you use PropertyPocket.

What we store

• Your account: email address, and the name you enter at sign-up. Passwords are handled by Supabase Auth and are never visible to us.
• Properties you save: the listing URL and the details shown on that page — price, rooms, area, address, images — plus anything you add yourself, such as notes, a rating, or a status.
• Your lists and which properties are in them.
• A copy of the main listing photo, if you ask us to save one, so it keeps working after the original portal removes it.
• Your plan, if you subscribe: which tier you are on and when the period ends. Payment is handled by Stripe and we never see or store card details.

What the extension does

The extension reads a page for two reasons, and only ever on your device.

When you ask it to.Opening the panel and choosing “Scan this page” reads the listing details already visible on it and shows them to you for review. Nothing is sent anywhere until you press Save.

To decide whether to show the + on the toolbar icon, on sites you have granted access to. This checks two things: the web address, and the structured data the page publishes for search engines — the same schema.org markup Google reads. It looks at the type of thing the page describes and nothing else. It reads no prices, no addresses and no page text, sends nothing to us, and keeps no record: the check happens on your device and is forgotten when you leave the page.

Until you grant access, the icon is decided from the web address alone and no page is ever read without you asking. Access is requested once, from the panel, and you can withdraw it at any time in Chrome’s extension settings.

The extension does not record the sites you visit. Browsing a portal produces no requests to us at all — the ✓ that marks something you have already saved appears only after you have scanned or saved that page, because that is the point at which you asked us to look.

Your login session is stored locally in the browser, in the extension’s own storage. It is sent only to PropertyPocket, and never to the property portal you are viewing.

Who else is involved

• Supabase hosts the database, authentication and file storage.
• OpenStreetMapprovides map tiles and address lookup. When a property is placed on the map, its address is sent to OpenStreetMap’s geocoding service to obtain coordinates. Your identity is not included.
• Stripe processes subscription payments, if you subscribe. Stripe receives your email address and card details directly; we receive only your subscription status.

We do not use analytics, advertising, or third-party tracking of any kind.

When you share a list

Sharing is the one thing that makes your data visible to somebody else, so it is worth being exact about what it does.

• People you share a list with can see every property in it, and everything written about those properties — including your notes and ratings. They cannot see any of your other lists.
• They can add properties and remove them, unless you invited them to look only.
• You can remove anyone at any time, and access ends immediately. Their notes on those properties remain, because the properties are in your account.
• An invitation is a link tied to one email address. It only works for that address, it expires after 14 days, and it can be used once.

Anything somebody adds to a list you own is stored in your account and counts towards your plan. If you delete the list or your account, it goes — including what they added.

Cookies

PropertyPocket sets cookies for one purpose: keeping you signed in. There are no analytics, advertising or tracking cookies, and nothing to opt out of — clearing them simply signs you out.

Deleting your data

You can delete any property or list from the dashboard at any time. Deleting your account removes every property, list, note and stored image belonging to it. There is no retained copy.

Data retention

We keep your information for as long as your account exists. When you delete your account it is removed, except where we are legally required to keep a record — in practice this means payment records, which Stripe and we must retain for tax and accounting purposes.

Your rights

Depending on where you live, you may request access to your information, its correction or deletion, a portable copy of it, or a restriction on how it is processed. Write to the address below and we will respond.

Data security

Data is encrypted in transit and at rest by our infrastructure providers. Access to your properties and lists is enforced by the database itself, on every request, rather than by application code — one account cannot read another’s rows even if a bug in the app asked it to.

International data transfers

SG Systems PTE. LTD. is based in Singapore, and our infrastructure providers operate in other countries. Your information may therefore be transferred to and stored outside the country you live in.

Children’s privacy

PropertyPocket is not intended for use by children under 13 years of age.

Changes to this policy

Updates are posted here with a new date at the top. Where a change materially affects what we collect or how it is used, we will tell you by email.

Regulatory compliance

SG Systems PTE. LTD. is committed to complying with applicable data protection laws, including the Singapore Personal Data Protection Act (PDPA), the European Union General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Contact

SG Systems PTE. LTD.
Singapore
Questions, a deletion request, or data protection enquiries: sebastian@sg-systems.co