Privacy Policy & User Consent

Effective Date: 7 May 2026  |  Version: 1.0

1. Introduction

Welcome to RumahProp ("we", "our", "us"). RumahProp is a Software-as-a-Service (SaaS) platform that enables real estate professionals and individuals to monitor, extract, and manage property listings from public Telegram channels.

This Privacy Policy explains how we collect, use, store, share, and protect information when you use our platform. It also describes your rights under Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

By accessing or using RumahProp, you confirm that you have read, understood, and agreed to this Privacy Policy and our Terms of Service.

2. Definitions

• "Platform" means the RumahProp web application and any related services.
• "User" means any individual or entity that registers for or uses the Platform.
• "Personal Data" means any information that identifies or could identify a natural person, as defined under PDPA 2010.
• "Telegram Account" means the personal Telegram account connected by a User to the Platform.
• "Monitored Channels" means Telegram channels selected by the User to be tracked for property listings.
• "Listing Data" means property-related messages, content, and metadata extracted from Monitored Channels.

3. Information We Collect

3.1 Account Information

When you register, we collect your name, email address, password (encrypted), REN ID and optionally your company name and phone number.

3.2 Telegram Account Data

When you connect your Telegram account, we access and store:

• Your Telegram user ID and display name
• The list of Telegram channels you follow
• Authentication tokens required to maintain the connection (stored encrypted)

We do NOT access your private Telegram messages, contacts, or any data outside the channels you explicitly select for monitoring.

3.3 Listing Data from Monitored Channels

From channels you choose to monitor, we collect:

• Message text, images, and metadata (sender name, timestamp, message ID)
• Property details parsed from message content (price, location, property type, etc.)

All monitored channels are public Telegram channels. We do not access private or restricted channels.

3.4 Usage & Technical Data

We automatically collect platform usage data including IP address, browser type, device identifiers, pages visited, and session duration to improve performance and security.

4. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and maintain the Platform and your account
• To process and display property listings from your selected channels
• To authenticate your Telegram connection and maintain monitoring sessions
• To send service-related notifications and alerts you have opted into
• To detect, prevent, and investigate security incidents or abuse
• To comply with legal obligations under PDPA 2010 and other applicable laws
• To improve platform features through aggregated, anonymized analytics

We will NOT use your personal data for unsolicited marketing, profiling, or sell it to any third party.

5. Legal Basis for Processing

Under PDPA 2010, we process your personal data on the following lawful grounds:

• Consent: You have given explicit consent when connecting your Telegram account and selecting channels to monitor.
• Contract Performance: Processing is necessary to deliver the services you have subscribed to.
• Legitimate Interests: We process certain technical and security data to ensure platform integrity and prevent fraud.
• Legal Obligation: We may process data to comply with applicable Malaysian laws and regulations.

6. Telegram Integration — Specific Consent

By connecting your Telegram account to RumahProp, you explicitly consent to the following:

• RumahProp is authorized to read messages from public Telegram channels you select for monitoring.
• RumahProp will store and process messages from these channels to extract and display property listing data.
• Your Telegram session token will be stored securely in an encrypted form on RumahProp servers.
• You can disconnect your Telegram account and revoke this consent at any time from your account settings.

You confirm that you are the legitimate account holder of the Telegram account connected to RumahProp, and that you are not using the platform to monitor channels you are not authorised to access.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (e.g., cloud hosting, email services) who process data on our behalf under strict confidentiality agreements.
• Legal Requirements: If required by law, court order, or government authority in Malaysia or relevant jurisdictions.
• Business Transfers: In the event of a merger, acquisition, or asset sale, with appropriate notice to you.
• With Your Consent: We will share data with third parties only if you have given explicit consent.

8. Data Retention

We retain your personal data and listing data for as long as your account is active or as required to provide services.

• Account data is retained for the duration of your subscription plus 12 months after account closure.
• Listing Data is retained for up to 24 months or as configured in your plan settings.
• Telegram session tokens are deleted immediately upon disconnection of your Telegram account.

You may request earlier deletion of your data by contacting us at the address below.

9. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• AES-256 encryption for data at rest and TLS 1.2+ for data in transit
• Encrypted storage of all Telegram authentication tokens
• Role-based access controls limiting staff access to personal data
• Regular security audits and vulnerability assessments

While we take all reasonable precautions, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

10. Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdrawal of Consent: Withdraw consent to processing at any time (this may affect service availability).
• Data Portability: Request your data in a machine-readable format where technically feasible.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Objection: Object to processing for specific purposes such as direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days as required by PDPA 2010.

11. Cookies & Tracking Technologies

We use essential cookies to maintain your session and preferences, and optional analytics cookies to understand platform usage. You may disable non-essential cookies in your browser settings.

12. Third-Party Services & Links

Our platform integrates with Telegram and may contain links to third-party websites. We are not responsible for the privacy practices of Telegram or any third party. We encourage you to review their privacy policies before providing personal data.

13. Children's Privacy

RumahProp is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the platform at least 14 days before taking effect.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

RumahProp — Data Protection Officer
Email: [email protected]

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

This Privacy Policy is governed by the laws of Malaysia. Last updated: 7 May 2026.