Privacy

Privacy policy

What personal data Wilsprop collects, why, who sees it, and what you can ask us to do with it.

Last updated 27 September 2026 · Covers wilsprop.com, agent.wilsprop.com (Wilsprop Pro) and design.wilsprop.com (Design Studio).

We don't sell your personal data, and our pages carry no advertising trackers and set no cookies.
If you are renting or buying, your phone number is never shown publicly or to agents. Agents reach you through messages in the app.
We don't ask for your NRIC to create an account.
The Transition Planner keeps NRIC, income and CPF figures on your own device. If you turn on cloud sync, the plans are encrypted with your passphrase before they leave your browser, and we cannot read them.
You can ask to see, correct or delete your data at any time — see your rights.

Who we are
What we collect and why
Agents' records about their clients
Cookies and browser storage
Who we share it with
Processing outside Singapore
How long we keep it
How we protect it
Your rights
Emails and messages we send
Age, changes and contact

1. Who we are

Wilsprop is run by an individual based in Singapore and is not yet a registered company — when it is, this section will name the company and its UEN. "Wilsprop", "we" and "us" in this policy mean whoever runs it. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

Our Data Protection Officer can be reached at enquiry@wilsprop.com.

2. What we collect and why

What

When

Why

Account detailsEmail address, name, password; listings and searches you save while signed in

When you create an account, or save something

To run your account and sign you in. Your password is stored only as a one-way hash by our sign-in provider — no one at Wilsprop can see it.

Google sign-inName, email address and profile picture from your Google account

When you choose "Continue with Google"

Same as above. We do not receive your Google password, and we get no access to your Gmail, contacts or files.

Phone number

When you sign up, or verify your number by WhatsApp to see an agent's contact details

To secure your account and stop contact details being scraped. We store the verified number and a one-way hash of each code — never the code itself. Codes expire after 10 minutes.

Agent profileName and agency as registered with CEA, CEA registration number, photo, bio, areas, languages, website, ratings, reviews and response time

When you register as an agent

To check your licence against the CEA Public Register and show people who they are dealing with. This profile is public, except your phone number: that is shown only to signed-in users who have verified their own number, and each time it is shown, you can see who asked.

ListingsProperty details, address, price and photos

When you list a property

To publish the listing — listings are public. We record a fingerprint of each listing photo and mark it as belonging to the listing, so copies used elsewhere can be detected.

Enquiries, messages and reviews

When you enquire about a listing, message another user or review an agent

To deliver them. The person you contact sees your name and message. Reviews appear on the agent's public profile. Our trust-and-safety team can read messages when investigating a report of fraud or abuse.

Tenancy and property recordsRental applications, agreements, rent and payment records, condition reports and their photos, maintenance requests, invitations

When you use the rental and property-management tools, or someone invites you to them by email

To run those tools for the people in the tenancy. They are visible to the parties involved, not publicly. Condition-report photos are kept in private storage.

PaymentsPlan, credit balance and purchase history

When you buy credits or a plan

Billing. Card details go directly to Stripe, our payment processor, and never reach us.

AI featuresWhat you type to the AI concierge; photos you send to the AI Photo Studio or Design Studio

When you use them

Sent to our AI provider to produce the answer or image. We don't keep your concierge conversation — it lives in your browser tab and is gone when you close it. Designs you make in the Design Studio are saved to your account, visible only to you.

Address searchesAddresses and postcodes you type

When you search by location

Sent, through our server, to OneMap (Singapore Land Authority) to find where the address is.

Usage eventsPages visited, searches, listings viewed and steps in an enquiry

Automatically, as you use the site

To see what works and fix what doesn't. They carry a random ID that lasts only for that browser session and is not linked to your account.

Trust-and-safety recordsReports, account flags and moderation decisions

When a report is made or an account is reviewed

To keep the marketplace safe and to show what was decided, and why, if it is questioned later.

Technical logsIP address, browser type, time of request

Automatically, by our hosting providers

Security and keeping the service running.

3. Agents' records about their clients

Agents can keep records about their own clients in Wilsprop Pro and the agent portal — for example a client's name, contact details, household, budget, what they are looking for, and affordability figures. For those records the agent is the organisation responsible under the PDPA, and we process them on the agent's behalf. If you are an agent's client and want to see or correct what they hold, ask your agent first; we will help them respond.

4. Cookies and browser storage

Our pages set no cookies. We use your browser's own storage to keep you signed in, remember your light or dark theme, hold listings you have saved, compared or recently viewed, and keep Transition Planner plans on your device. The random ID used for usage events sits in session storage and disappears when you close the tab.

Some things are loaded from other providers, and they see your IP address when your browser fetches from them: Google Fonts, and the jsDelivr and unpkg code libraries. Stripe's checkout pages and Google's sign-in page are their own sites, run under their own privacy policies.

We do not sell personal data, and we do not share it with advertisers. We share it only:

With other users, as described above — for example the agent you enquire with, or the other party to your tenancy.
With the service providers that run Wilsprop, only for the job listed:

Provider

What for, and what they receive

Supabase

Database, sign-in and file storage — the account and app data described above.

Netlify

Hosts wilsprop.com and agent.wilsprop.com and runs our address lookup — page requests and the addresses you search.

Cloudflare

Hosts the Design Studio — its page requests.

Google

"Continue with Google" and web fonts — sign-in details if you use it; your IP address for fonts.

OpenRouterand the AI model providers it routes to

AI concierge, Photo Studio and Design Studio — the text and photos you send to those features.

Resend

Sends our emails — your email address and the notification.

Twilio

Sends WhatsApp verification codes — your phone number and the code.

Stripe

Payments — your payment and billing details.

OneMap (Singapore Land Authority)

Address lookup and map tiles — the addresses you search and the map areas you view.

data.gov.sg

CEA Public Register checks — the CEA registration number being verified.

When the law requires it, or where needed to prevent fraud or protect someone's safety.
If Wilsprop is sold or merged, with the new owner, who must keep to this policy.

6. Processing outside Singapore

Our main database, at Supabase, is hosted in Japan (Tokyo). Several of the other providers store or process data elsewhere outside Singapore, for example in the United States. Each is bound by its terms and data processing agreement to protect the data to a standard comparable to the PDPA, and to use it only to provide its service to us.

7. How long we keep it

Account data — while your account is open. To close your account, email enquiry@wilsprop.com from the address you signed up with. We then delete or anonymise its personal data within 30 days, except what we must keep longer: payment records, which the law requires us to keep for five years, and anything needed for a fraud or safety investigation that is still open.
Verification codes — expire after 10 minutes and cannot be used after that.
Usage events — these carry no account or name, so they can't be traced back to you. We keep them to compare how the site is used over time.
Technical logs — for as long as our hosting providers keep them.

8. How we protect it

Everything travels over HTTPS.
Access rules inside the database decide which rows each account can read, so a signed-in user sees their own data, not everyone's.
Passwords and verification codes are stored only as one-way hashes.
Transition Planner cloud sync is encrypted in your browser (AES-256-GCM, with a key made from your passphrase) before upload. We cannot read it — and cannot recover it if you forget the passphrase.
If a data breach is likely to cause significant harm, we will notify the Personal Data Protection Commission and the people affected, as the PDPA requires.

9. Your rights

See your data — what we hold about you, and how it has been used or disclosed in the past year.
Correct it if it is wrong.
Withdraw consent for us to use it. We will explain what that means first — we cannot run an account without an email address, for example.
Close your account and have your data deleted, subject to what we must keep by law.

Email enquiry@wilsprop.com. We may need to confirm it is really you, and we aim to reply within 30 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission.

10. Emails and messages we send

We send service messages: account emails, and notifications about enquiries, messages and activity on your listings or tenancies. WhatsApp is used only to send the verification codes you ask for. We will ask before sending you marketing, and we respect Singapore's Do Not Call Registry.

11. Age, changes and contact

Wilsprop is for adults. We do not knowingly collect personal data from anyone under 18.

If we change this policy we will update this page and the date at the top, and point out significant changes on the site or by email.

Questions about this policy, or about your data: enquiry@wilsprop.com.