Privacy Policy - MOPScout

1. Introduction

MOPScout ("we", "us", "our") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act (PDPA). This Privacy Policy explains how we collect, use, disclose, and protect your information.

2. Data We Collect

Personal Information:

Email address (from OAuth providers)
Full name (optional, for agents)
Phone number (encrypted, for homeowners requesting agent contact)
User role (Homeowner or Agent)

Usage Data:

Map views and property searches
IP address and device information
Browser type and operating system

Payment Information:

Processed by Stripe (we do NOT store credit card details)
We only store Stripe customer ID for subscription management

3. How We Use Your Data

Service Provision: To provide and maintain the MOPScout service
Account Management: To manage your account and subscription
Communication: To send service-related notifications
Lead Matching: To connect homeowners with real estate agents
Analytics: To improve our service (anonymized data only)

4. Data Sharing & Disclosure

We do NOT sell your personal information. We only share data in the following cases:

Agent-Homeowner Connections: When you request agent contact, your encrypted phone number is shared with the claiming agent
Service Providers: Supabase (database), Stripe (payments), Vercel (hosting)
Legal Requirements: When required by Singapore law

5. Data Storage & Security

Location: Data is stored in Singapore (Supabase Singapore region)
Encryption: Phone numbers are encrypted using industry-standard encryption
Access Control: Strict access controls and Row Level Security (RLS)
HTTPS: All data transmission is encrypted via HTTPS

6. Your PDPA Rights

You have the right to:

✅ Access: View your personal data (Settings page)
✅ Correction: Update your information (Settings page)
✅ Portability: Export your data (CSV export for Pro users)
✅ Erasure (Right to be Forgotten): Delete your account permanently (Settings → Delete Account)
✅ Withdraw Consent: Cancel subscription or delete account anytime
✅ Object to Processing: Contact us to stop specific data processing

7. Data Retention

Active Accounts: Data retained while account is active
Deleted Accounts: Data permanently deleted within 30 days
Legal Compliance: Some data may be retained for legal/tax purposes (7 years max)

8. Cookies & Tracking

We use essential cookies for authentication and session management. No third-party advertising cookies are used.

9. Children's Privacy

MOPScout is not intended for users under 18 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

11. Contact Us (Data Protection Officer)

For questions about this Privacy Policy or to exercise your PDPA rights:

Email: privacy@mopscout.sg

Data Protection Officer: dpo@mopscout.sg