Privacy Policy

1. Who operates FairComparisons

FairComparisons ("we", "us", "our") is operated by FairComparisons, a comparison platform registered in the Netherlands. We are not registered in Singapore but we process personal data of individuals in Singapore and therefore comply with Singapore's Personal Data Protection Act 2012 ("PDPA") as an organisation that collects, uses and discloses personal data of individuals in Singapore.

2. What personal data we collect and display

FairComparisons is a comparison platform that aggregates publicly available information about CEA-registered property agents and agencies in Singapore. We collect and display the following categories of personal data:

3. Purposes for collecting and using personal data

We collect and use personal data to:

• Display agent profiles and comparison information to help consumers choose a property agent
• Calculate and display the AgentScore for each registered agent
• Process "Claim your profile" requests from agents who wish to verify and manage their profile
• Provide and manage paid tool subscriptions (Inbox, Planner, Grow)
• Send email updates to subscribers who have opted in (market data, ranking changes, new features)
• Respond to enquiries, correction requests, and complaints
• Improve our platform and services

4. When agents claim their profile

When a property agent uses our "Claim your profile" feature, they voluntarily provide us with their email address and, optionally, their phone number. We use this information solely to:

• Verify that the person claiming the profile is the registered agent
• Communicate about their profile and our services
• Process and manage a paid tool subscription, if applicable

By submitting a claim request, you consent to our collection and use of your contact details for these purposes. You may withdraw consent at any time by emailing us, which will result in the removal of your voluntarily provided contact details (but not the publicly sourced data on your profile).

4b. Email subscriptions

When you subscribe to our email updates via the forms on our website, you voluntarily provide us with your email address. We collect and use this information to:

• Send you property market updates, agent ranking changes, and new data analyses
• Notify you about new features on our platform
• Improve our understanding of which content is most useful to our audience

We also store the page you subscribed from and, where applicable, the district or area context. This allows us to send you relevant updates rather than generic emails.

Consent: By checking the consent box and submitting your email, you consent to receiving emails from FairComparisons.

Unsubscribe: Every email we send includes an unsubscribe link. You can also email us at hello@fair-comparisons.com to request removal. We will process unsubscribe requests within 5 business days.

Data retention: We retain your email address and subscription preferences for as long as your subscription is active. After you unsubscribe, we retain a hashed record of your email for up to 12 months to prevent accidental re-subscription, then delete it permanently.

4c. Google user data (agent calendar connection)

Agents who have claimed their profile can optionally connect their Google Calendar so that viewing appointments they confirm on FairComparisons are added to their own calendar. This section describes exactly what Google user data we access when an agent chooses to connect, and what we do with it.

What Google user data we access: when you connect, Google asks for your consent to share the following with us:

• Your Google account email address, which we display in your dashboard so you can see which account is connected.
• Permission to create events on your calendar (the "calendar.events" scope). We use this permission only to add viewing appointments that you confirm, containing the property label, the confirmed date and time, and the attendee's name. We never read, list, edit or delete your existing calendar events, and we never access any other content of your calendar.

To keep the connection working we store the OAuth tokens Google issues to us, together with your connected email address, in our database.

How we protect this data: we apply the following safeguards to Google user data and other sensitive data we hold:

• Encryption in transit: all connections to our website, between our servers and between our servers and our database use HTTPS/TLS. OAuth tokens are never transmitted over unencrypted connections and never appear in URLs.
• Encryption at rest: the database that holds OAuth tokens encrypts all stored data at rest.
• Access controls: tokens are held in a database table that is locked down by default (row-level security with no public access policies). It cannot be read through our public API; only our server can access it, using credentials that are never present in the browser or in client-side code.
• Data minimisation: we request the narrowest Google permission that makes the feature work, we only ever create calendar events, and we store no calendar content from your Google account.
• No exposure in logs: token values are never written to application logs.
• Prompt deletion: disconnecting deletes our stored tokens immediately and revokes our access with Google at the same time.
• Incident response: if we become aware of a data breach affecting your personal data, we will assess it and notify affected users and, where required, the Personal Data Protection Commission, in line with our obligations under the PDPA. Security concerns can be reported to hello@fair-comparisons.com.

With whom we share, transfer or disclose Google user data: no one. We do not sell Google user data, we do not share it with advertisers, data brokers or any other third party, and we do not transfer it to anyone else. It is processed only by the infrastructure providers that host our application and database (Vercel and Supabase), acting as data processors on our behalf, and never for their own purposes.

Limited use:our use of Google user data is limited to providing and improving the calendar feature described above. We do not use Google user data for advertising of any kind (including targeted, personalised or retargeted advertising), we do not sell it or transfer it to data brokers or information resellers, we do not use it to determine credit-worthiness or for lending purposes, and we do not use it to build user profiles. FairComparisons' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

Retention and deletion:we keep the OAuth tokens and connected email address only while your calendar connection is active. Selecting "Disconnect" in your dashboard deletes our stored tokens immediately and revokes our access with Google. You can also revoke access at any time from your Google Account security settings, or email hello@fair-comparisons.com to have the data deleted. Events already added to your calendar belong to you and are unaffected by disconnection.

5. Paid subscriptions (agent tools)

Agents may subscribe to one or more paid tools: Inbox (S$39/month), Planner (S$39/month), Grow (S$19/month), or all three together for S$69/month. A subscription buys the use of these tools and nothing else. It never affects an agent's position, ranking or AgentScore, and it places no mark on any page a member of the public sees. Payment processing is handled by Stripe. We do not store credit card numbers; Stripe processes and stores payment information under its own privacy policy. We retain subscription records (which tools, start date, billing status) for as long as the subscription is active and for a reasonable period afterwards for accounting purposes.

6. Website visitors and analytics

When you visit our website, we collect anonymous, aggregated analytics data including page views, referrer URLs, and general device type (desktop or mobile). We filter out bot traffic. We do not use cookies for tracking. We do not use third-party analytics services that track individual visitors. We do not collect IP addresses or any other data that could identify individual visitors.

7. Who we share personal data with

We do not sell personal data. We may share personal data with:

• Stripe (payment processor), for agents who subscribe to a paid tool
• Vercel (hosting provider), which processes web requests on our behalf
• Supabase (database provider), where agent profile data is stored

These service providers process data on our behalf and are bound by their own data protection obligations. Data may be transferred outside Singapore to the extent that these providers operate servers in other jurisdictions; such transfers are conducted in accordance with Section 26 of the PDPA.

8. How long we keep personal data

• Publicly sourced agent data (CEA, Google, listing portals): retained and updated for as long as the agent holds an active CEA registration. Data for deregistered agents may be retained for up to 12 months after deregistration, then deleted.
• Claim and subscription data: retained for the duration of the agent's active engagement with our platform, plus 7 years for accounting records as required by Dutch law.
• Email subscription data: retained for the duration of the active subscription. After unsubscribe, a hashed record is kept for up to 12 months, then permanently deleted.
• Analytics data: aggregated and anonymous; no personal data is retained.

9. Your rights under the PDPA

If you are a property agent whose data appears on FairComparisons, you have the following rights:

• Access: You may request to know what personal data we hold about you (Section 21 PDPA).
• Correction: You may request correction of any error or omission in your personal data (Section 22 PDPA). Since most data is sourced from public registers, corrections to source data should be made at the source (e.g., CEA, Google); we will update our records when the source is updated.
• Withdrawal of consent: Where you have provided personal data voluntarily (e.g., through the Claim flow), you may withdraw consent for our use of that data. We will then remove your voluntarily provided information. Note that withdrawal of consent does not apply to publicly available data collected under the Fourth Schedule exception.

Profile removal requests: If you request complete removal of your profile, we will remove all voluntarily provided data (email, phone, photo, biography). For data sourced from public registers (name, CEA number, transaction records), we will evaluate your request on a case-by-case basis. Because this data is publicly available and our use falls within the Fourth Schedule exception, we are not obligated under the PDPA to delete it. However, we will consider reasonable requests and may suppress display of your profile if there is a compelling reason to do so.

We will respond to access and correction requests within 30 days, as required by the PDPA.

10. Do Not Call Registry

FairComparisons does not send marketing messages by phone, SMS, or fax. We do not use phone numbers from the CEA register or any other source for telemarketing. If an agent provides their phone number through the Claim flow, we use it solely for account verification and service-related communications, not for marketing. We therefore do not check the Do Not Call Registry as we do not engage in the types of communications it covers.

Should we introduce marketing communications in the future, we will obtain proper consent and comply with the Do Not Call provisions in Part IX of the PDPA before doing so.

11. Children

FairComparisons is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the latest revision was made. We encourage you to review this policy periodically.

13. Contact us

For any questions about this privacy policy, to exercise your data protection rights, or to make a complaint:

If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (PDPC) at www.pdpc.gov.sg.