Legal

Privacy Policy

Last updated: 7 October 2026

This policy explains how Propertylab Technology Sdn Bhd (1547842-D / 202401001992) ("PropertyLab", "we", "us") handles personal data when you use the PropertyLab app, visit our websites, join our events or deal with our team. We process personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data we collect

What you give us

• Contact details: your name, phone number and email address, when you sign up, register for an event or webinar, fill in a form on our website or contact us.
• Sign-in details: the email address or phone number we send your one-time sign-in code to (by email, SMS or WhatsApp).
• Financial information: your answers in the Wealth Plan, such as income, monthly commitments and the properties you plan to buy, and loan details you save for properties you own.
• Credit report information: if you add a WhoPay report link, we read your income, commitments, debt-service ratio and credit rating from that CCRIS report to fill in your plan.
• Your analyses and saved items: Location Analyses (the address, price and size you enter), saved layouts and projects, enquiries, bookings and purchases you make through us.
• AI conversations: the questions you ask our AI tools, their answers, and any plan or analysis you choose to share with them.
• Messages and calls: what you send us on WhatsApp, LINE, SMS or email, and our phone calls with you. Calls may be recorded and transcribed. Some calls are made by an AI voice agent, which says that it is an AI.
• Payments: when you pay us, the amount, date, reference and payer name. Card payments are handled by our payment providers; we do not receive or store your full card number.
• Learning progress: which lessons you have completed and how you arrange your Home screen.

What we collect automatically

• Technical data: IP address, device and browser type, pages visited and time of access, to run the service and keep it secure.
• Cookies on our websites: to keep you signed in and to remember your market, language and currency.
• Advertising measurement on our websites: we use the Meta Pixel and Meta's Conversions API to measure our ads on Facebook and Instagram. When you visit a page or register, Meta receives that event with your IP address and browser details, and for a registration, your email, phone number and first name in hashed (scrambled) form.

What we receive from others

• The details you submit in a Facebook or Instagram lead form for one of our ads.
• Your details from someone who refers you to us.

The PropertyLab app does not use your device's location, does not show advertising, does not track you across other companies' apps or websites, and contains no third-party analytics.

2. How we use it

• To sign you in and keep your account secure.
• To calculate and show your property analyses, wealth plan and projections.
• To answer your questions with our AI tools.
• To provide the courses, lessons and events included with your membership.
• To respond when you contact us, and to arrange viewings, bookings and the Property Concierge service you ask for.
• To send you event reminders and information about our services by WhatsApp, SMS, email or phone. You can ask us to stop at any time (see section 6).
• To process payments and keep accounting records.
• To measure and improve our advertising.
• To meet our legal obligations and protect our service and users.

3. Who we share it with

• Service providers who run parts of the service for us, and only for that purpose:
  • cloud hosting and file storage (Google Cloud);
  • AI providers that generate answers and analyses (Google Gemini, Anthropic Claude, OpenAI and DeepSeek). We send them only what is needed for the task;
  • messaging and calls (WhatsApp by Meta, LINE, Twilio, SMS360 and Retell AI);
  • email delivery, and Zoom for webinars;
  • maps (Mapbox and Google Maps), which receive the map area being shown and your IP address, not your account details;
  • payments (Stripe, Payex and Touch 'n Go eWallet).
• Meta (Facebook and Instagram), for advertising measurement as described in section 1.
• WhoPay, only when you give us a WhoPay report link, to retrieve that report.
• Property developers and real estate agents, only the details needed, when you ask us to help you buy, book, sell, rent or manage a property.
• Authorities, when the law requires it.

We do not sell your personal data.

4. Transfers outside Malaysia

Some of the providers above store or process data outside Malaysia. We transfer personal data only as the PDPA allows, and only to providers that are bound to protect it.

5. Storage, security and retention

Data is sent to us over encrypted connections. In the app, your sign-in session is kept in your device's secure storage (the Keychain on iPhone and iPad). We keep your data while your account is active, and afterwards only for as long as we need it for the purposes in this policy or as the law requires, for example for tax and accounting records.

6. Your choices and rights

Under the PDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or out of date;
• stop sending you marketing, or otherwise limit how we use your data;
• withdraw your consent, or delete your account and its data.

Email us at hello@propertylab.tech. We reply to a request for a copy of your data within 21 days, as the PDPA requires. You can also stop sharing your plan with the AI Coach at any time, and remove saved analyses and conversations in the app.

Giving us your name, phone number and email address is needed to create an account and to use our services. Everything else is optional, but without it some features (for example, a wealth plan) will not work.

7. Children

PropertyLab is meant for adults making property decisions. We do not knowingly collect data from anyone under 18.

8. Changes to this policy

If we change this policy, we will update the date at the top of this page and, for significant changes, tell you in the app or by email.

9. Contact us

For any question or complaint about your personal data: