Privacy Notice

PropLink (getproplink.com) is operated by GOHAT Studio. It gives real estate agents a personal property website, lead forms, a WhatsApp inbox and related tools. This notice is issued under Malaysia's Personal Data Protection Act 2010 (PDPA).

For agents who sign up, PropLink decides how their account data is used. For the buyers and tenants who contact an agent, the agent decides how that data is used and PropLink processes it on the agent's behalf.

Agents: name, email, phone and WhatsApp numbers, REN number, agency name and logo, profile and cover photos, listings and their photos, login codes and sessions, settings, and billing status. Card details are handled by Stripe; PropLink never sees or stores them. API keys and WhatsApp credentials that agents enter are stored encrypted.

Buyers, tenants and other visitors: details sent through an agent's forms (such as name, phone, email and answers), WhatsApp messages exchanged with the agent, and basic page-visit statistics. Network addresses are used briefly to block spam and abuse.

To run the service: show agents' pages, pass enquiries to the right agent, send login codes and notifications, send and receive WhatsApp messages through the agent's own WhatsApp Business account, process subscriptions, prevent abuse, and fix problems. We do not sell personal data and do not use it for advertising.

Only with the services that run PropLink, and only for the purposes above: Supabase (database and file storage), Vercel (hosting), Cloudflare (domain and website delivery), Stripe (payments), Resend (email), Meta / WhatsApp (messages, using the agent's own account), and OpenAI when an agent uses AI features with their own OpenAI key. Some of these services store data outside Malaysia; we use them because they protect data to a standard comparable to the PDPA. We also disclose data when the law requires it.

Account data is kept while the account is active. When an agent deletes their account (Settings › Account), their public page goes offline immediately and everything is permanently deleted after 30 days, including listings, photos, leads, contacts and conversations. Logging in during those 30 days cancels the deletion. Payment records are kept by Stripe as required by tax law. Technical logs are removed automatically.

You can ask to see, correct or delete your personal data, or withdraw consent. Agents can edit or delete most data themselves in Settings. If you are a buyer or tenant who contacted an agent, you may also contact that agent directly. Email hello@getproplink.com and we will reply within 21 days.

Data is sent over encrypted connections, sensitive credentials are encrypted at rest, and access is limited to what each part of the service needs. If a data breach is likely to cause harm, we will notify the authorities and the people affected as the law requires.

When this notice changes, we update the date above. Important changes will be announced to agents by email or in the app.

PropLink (getproplink.com) dikendalikan oleh GOHAT Studio. PropLink bagi ejen hartanah laman web hartanah sendiri, borang pertanyaan, inbox WhatsApp dan alat lain. Notis ni dikeluarkan di bawah Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia.

Untuk ejen yang daftar, PropLink tentukan macam mana data akaun digunakan. Untuk pembeli dan penyewa yang hubungi ejen, ejen yang tentukan macam mana data tu digunakan, dan PropLink proses data tu bagi pihak ejen.

Ejen: nama, emel, nombor telefon dan WhatsApp, nombor REN, nama dan logo agensi, gambar profil dan gambar muka depan, listing dan gambarnya, kod log masuk dan sesi, tetapan, dan status bayaran. Maklumat kad diuruskan oleh Stripe; PropLink tak nampak dan tak simpan maklumat kad. API key dan maklumat WhatsApp yang ejen masukkan disimpan dalam bentuk yang disulitkan.

Pembeli, penyewa dan pelawat lain: maklumat yang dihantar melalui borang ejen (macam nama, telefon, emel dan jawapan), mesej WhatsApp dengan ejen, dan statistik asas lawatan laman. Alamat rangkaian digunakan sekejap untuk sekat spam dan penyalahgunaan.

Untuk jalankan perkhidmatan: paparkan laman ejen, hantar pertanyaan kepada ejen yang betul, hantar kod log masuk dan notifikasi, hantar dan terima mesej WhatsApp melalui akaun WhatsApp Business ejen sendiri, proses langganan, cegah penyalahgunaan dan betulkan masalah. Kami tak jual data peribadi dan tak guna data untuk iklan.

Hanya dengan perkhidmatan yang menjalankan PropLink, dan hanya untuk tujuan di atas: Supabase (pangkalan data dan simpanan fail), Vercel (hosting), Cloudflare (domain dan penghantaran laman web), Stripe (bayaran), Resend (emel), Meta / WhatsApp (mesej, guna akaun ejen sendiri), dan OpenAI bila ejen guna ciri AI dengan OpenAI key sendiri. Sebahagian perkhidmatan ni simpan data di luar Malaysia; kami guna perkhidmatan ni sebab perlindungan data mereka setanding dengan PDPA. Kami juga dedahkan data kalau undang-undang memerlukan.

Data akaun disimpan selagi akaun aktif. Bila ejen padam akaun (Settings › Account), laman awam terus ditutup dan semua data dipadam terus selepas 30 hari, termasuk listing, gambar, lead, kenalan dan perbualan. Log masuk dalam tempoh 30 hari tu akan batalkan pemadaman. Rekod bayaran disimpan oleh Stripe seperti yang diwajibkan oleh undang-undang cukai. Log teknikal dipadam secara automatik.

Pengguna boleh minta untuk tengok, betulkan atau padam data peribadi, atau tarik balik persetujuan. Ejen boleh ubah atau padam kebanyakan data sendiri dalam Settings. Pembeli atau penyewa yang pernah hubungi ejen juga boleh terus hubungi ejen tu. Emel hello@getproplink.com dan kami akan balas dalam masa 21 hari.

Data dihantar melalui sambungan yang disulitkan, maklumat sensitif disimpan dalam bentuk yang disulitkan, dan akses dihadkan kepada apa yang diperlukan je. Kalau ada kebocoran data yang mungkin mendatangkan mudarat, kami akan maklumkan kepada pihak berkuasa dan orang yang terlibat seperti yang diwajibkan oleh undang-undang.

Bila notis ni berubah, tarikh di atas akan dikemas kini. Perubahan penting akan dimaklumkan kepada ejen melalui emel atau dalam aplikasi.