Privacy Policy

1. Who operates FairComparisons

FairComparisons ("we", "us", "our") is operated by Fair Comparisons Netherlands, which is established in the Netherlands. We are the controller of the personal data described in this policy, except where Section 2(i) says we act on an agent's behalf.

Because we are established in the Netherlands, the EU General Data Protection Regulation ("GDPR") applies to all of our processing, including the data of people in Singapore. Because we process personal data of individuals in Singapore, we also comply with Singapore's Personal Data Protection Act 2012 ("PDPA"). Where the two differ, we follow the stricter rule.

Data Protection Officer: you can reach our Data Protection Officer at hello@fair-comparisons.com with "Data protection" in the subject line.

2. What personal data we collect, where it comes from, and why

FairComparisons compares CEA-registered property agents in Singapore using public records, and offers tools to sellers and agents. For each category below we say where the data comes from and the legal basis we rely on.

3. Purposes for collecting and using personal data

We collect and use personal data to:

• Display agent profiles and comparison information to help consumers choose a property agent
• Calculate and display the AgentScore for each registered agent
• Collect, match and publish reviews of agents
• Build shortlists for sellers and landlords and pass their requests to the agents they choose
• Process "Claim your profile" requests from agents who wish to verify and manage their profile
• Provide and manage agent tools and paid tool subscriptions (Inbox, Planner, Grow)
• Send service emails, and email updates to people who have opted in
• Respond to enquiries, correction requests, and complaints
• Prevent abuse and keep the platform secure
• Improve our platform and services

4. When agents claim their profile

When a property agent uses our "Claim your profile" feature, they provide us with their email address and, optionally, their phone number. We use this information to:

• Verify that the person claiming the profile is the registered agent
• Communicate about their profile, their tools and our services
• Process and manage a paid tool subscription, if applicable

When an agent accepts our agent terms we keep a record of the acceptance, including the date, the terms version, the IP address and the browser used, as evidence of the agreement. Legal basis: performing our contract with the agent (GDPR Article 6(1)(b)) and our legitimate interest in being able to prove what was agreed.

You may ask us at any time to remove the contact details you gave us. That does not remove the public-record data on your profile; see Section 9 for how to object to that.

4b. Email subscriptions

When you subscribe to our email updates via the forms on our website, you voluntarily provide us with your email address. We collect and use this information to:

• Send you property market updates, agent ranking changes, and new data analyses
• Notify you about new features on our platform
• Improve our understanding of which content is most useful to our audience

We also store the page you subscribed from and, where applicable, the district or area context. This allows us to send you relevant updates rather than generic emails.

Consent: By checking the consent box and submitting your email, you consent to receiving emails from FairComparisons.

Unsubscribe: Every email we send includes an unsubscribe link. You can also email us at hello@fair-comparisons.com to request removal. We will process unsubscribe requests within 5 business days.

Opens and clicks: our emails are sent through our email provider, which records whether an email was delivered, opened and clicked. We use this only to check that our emails arrive and to see which ones are useful.

Data retention: We retain your email address and subscription preferences for as long as your subscription is active. After you unsubscribe, we retain a hashed record of your email for up to 12 months to prevent accidental re-subscription, then delete it permanently.

4c. Google user data (agent calendar connection)

Agents who have claimed their profile can optionally connect their Google Calendar so that viewing appointments they confirm on FairComparisons are added to their own calendar. This section describes exactly what Google user data we access when an agent chooses to connect, and what we do with it.

What Google user data we access: when you connect, Google asks for your consent to share the following with us:

• Your Google account email address, which we display in your dashboard so you can see which account is connected.
• Permission to create events on your calendar (the "calendar.events" scope). We use this permission only to add viewing appointments that you confirm, containing the property label, the confirmed date and time, and the attendee's name. We never read, list, edit or delete your existing calendar events, and we never access any other content of your calendar.

To keep the connection working we store the OAuth tokens Google issues to us, together with your connected email address, in our database.

How we protect this data: we apply the following safeguards to Google user data and other sensitive data we hold:

• Encryption in transit: all connections to our website, between our servers and between our servers and our database use HTTPS/TLS. OAuth tokens are never transmitted over unencrypted connections and never appear in URLs.
• Encryption at rest: the database that holds OAuth tokens encrypts all stored data at rest.
• Access controls: tokens are held in a database table that is locked down by default (row-level security with no public access policies). It cannot be read through our public API; only our server can access it, using credentials that are never present in the browser or in client-side code.
• Data minimisation: we request the narrowest Google permission that makes the feature work, we only ever create calendar events, and we store no calendar content from your Google account.
• No exposure in logs: token values are never written to application logs.
• Prompt deletion: disconnecting deletes our stored tokens immediately and revokes our access with Google at the same time.
• Incident response: if we become aware of a data breach affecting your personal data, we will assess it and notify affected users and, where required, the Personal Data Protection Commission, in line with our obligations under the PDPA. Security concerns can be reported to hello@fair-comparisons.com.

With whom we share, transfer or disclose Google user data: no one. We do not sell Google user data, we do not share it with advertisers, data brokers or any other third party, and we do not transfer it to anyone else. It is processed only by the infrastructure providers that host our application and database (Vercel and Supabase), acting as data processors on our behalf, and never for their own purposes.

Limited use:our use of Google user data is limited to providing and improving the calendar feature described above. We do not use Google user data for advertising of any kind (including targeted, personalised or retargeted advertising), we do not sell it or transfer it to data brokers or information resellers, we do not use it to determine credit-worthiness or for lending purposes, and we do not use it to build user profiles. FairComparisons' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

Retention and deletion:we keep the OAuth tokens and connected email address only while your calendar connection is active. Selecting "Disconnect" in your dashboard deletes our stored tokens immediately and revokes our access with Google. You can also revoke access at any time from your Google Account security settings, or email hello@fair-comparisons.com to have the data deleted. Events already added to your calendar belong to you and are unaffected by disconnection.

4d. Microsoft Outlook calendar connection

Agents can instead connect a Microsoft Outlook calendar for the same purpose. Microsoft does not offer a create-only permission, so the connection grants read and write access to the calendar ("Calendars.ReadWrite") plus the account's email address. We use it only to add the viewing appointments an agent confirms. We do not read, list, change or delete other events. The safeguards, retention and deletion described for Google in Section 4c apply in the same way.

5. Paid subscriptions (agent tools)

Agents may subscribe to one or more paid tools: Inbox (S$39/month), Planner (S$39/month), Grow (S$19/month), or all three together for S$69/month. A subscription buys the use of these tools and nothing else. It never affects an agent's position, ranking or AgentScore, and it places no mark on any page a member of the public sees. Payment processing is handled by Stripe. We do not store credit card numbers; Stripe processes and stores payment information under its own privacy policy. We retain subscription records (which tools, start date, billing status) for as long as the subscription is active and afterwards for as long as accounting law requires.

6. Website visitors, analytics and cookies

Our own analytics:when you visit a page we record the page, the referring page, your browser's user-agent string and a random visit identifier that your browser keeps in local storage and that resets after a period of inactivity. We do not store your IP address with these records, and we filter out known bots.

Google Analytics:our public pages use Google Analytics 4 to measure how the site is used. It sets cookies in your browser, and Google processes the data on our behalf. It is not loaded in the agent dashboard, the admin area or embedded widgets. You can block it with your browser's cookie settings or Google's opt-out add-on, and the site keeps working.

Abuse prevention: to stop spam and automated abuse, our forms and APIs apply rate limits keyed on your IP address. Seller requests and reviews also store a one-way hash of the IP address. These are not linked to a profile or used for anything else.

Sign-in: agents who sign in get a cookie that keeps them signed in. It is necessary for the dashboard to work.

7. Who we share personal data with

We do not sell personal data. We share it only with:

• The agents you choose: a seller's request, a booking, or a review goes to the agent it concerns
• Vercel (website hosting) and Supabase (database)
• Resend (email delivery)
• Stripe (payments, for agents who subscribe)
• Anthropic (AI-drafted replies, only when an agent asks for one)
• Google (Analytics, and Calendar for agents who connect it) and Microsoft (Outlook calendar, for agents who connect it)

These providers process data on our instructions. Some of them store or process data outside Singapore and outside the European Economic Area, including in the United States. Where they do, we rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework under the GDPR, and on comparable protection as Section 26 of the PDPA requires.

8. How long we keep personal data

• Public-record agent data (CEA): kept and updated while the agent holds a CEA registration, and for up to 12 months after deregistration, then deleted.
• Agents' business contact details: kept while the profile is on our site, unless the agent asks us to delete them.
• Claim and subscription data: kept while the agent uses our platform, and accounting records for 7 years as Dutch law requires.
• Reviews: kept while published, or until the reviewer asks for removal.
• Seller requests and bookings: kept while the request or booking is active and afterwards only as long as needed to deal with follow-up questions, disputes and our records. You can ask for deletion at any time.
• Agents' tool content: kept while the agent keeps it in their account, and deleted when they delete it or close their account.
• Email subscription data: kept while the subscription is active. After unsubscribe, a hashed record is kept for up to 12 months, then permanently deleted.

9. Your rights

Whoever you are, agent, seller, landlord, reviewer or visitor, you can ask us to:

• Access the personal data we hold about you and receive a copy (GDPR Articles 15 and 20; PDPA Section 21)
• Correct data that is wrong or incomplete (GDPR Article 16; PDPA Section 22). Where a record comes from CEA, we check it against the source and fix our copy; the source itself is corrected by CEA.
• Delete your data, or restrict how we use it (GDPR Articles 17 and 18)
• Withdraw consent you gave us, at any time, without affecting what we did before

Your right to object (GDPR Article 21): where we rely on our legitimate interests, including for the public agent profiles and the AgentScore, you can object to that processing on grounds relating to your particular situation. We will then stop, unless we can show compelling legitimate grounds that override your interests, rights and freedoms. We assess every objection individually and tell you the outcome. Where we keep the public-record facts, we can still hide your profile from search and remove any contact details.

We respond within one month (GDPR) and within 30 days for access and correction requests under the PDPA.

10. Do Not Call Registry

FairComparisons does not send marketing messages by phone call, SMS, fax or messaging app, and does not use any phone number for marketing. If an agent gives us their phone number through the Claim flow, we use it only for account verification and service messages. We therefore do not check the Do Not Call Registry, as we do not send the messages it covers.

Should we introduce marketing messages to phone numbers in the future, we will obtain proper consent and comply with the Do Not Call provisions of the PDPA before doing so.

11. Children

FairComparisons is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the latest revision was made. We encourage you to review this policy periodically.

13. Contact and complaints

For any question about this policy, to exercise your rights, or to make a complaint, contact our Data Protection Officer:

If you are not satisfied with our response, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, to the data protection authority where you live or work, or to Singapore's Personal Data Protection Commission at www.pdpc.gov.sg.