Privacy Policy

1.1 Staycoco Tech Pte Ltd ("StayCoCo", "we", "our", or "us") is committed to protecting the privacy and personal data of our users in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore.

1.2 This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the StayCoCo platform.

1.3 By using the Platform and accepting these Terms, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

2.1 In accordance with the PDPA, we have appointed a Data Protection Officer ("DPO") to oversee our data protection practices. If you have any questions, concerns, or requests regarding your personal data, you may contact our DPO at:

3.1 We may collect the following categories of personal data:

(a) Data provided by your Property Manager:

• Full name
• Mobile phone number
• Email address
• Unit/property details and lease information

(b) Data collected when you use the Platform:

• Account login credentials
• Payment transaction records and history
• Communications and messages sent through the Platform
• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, timestamps)
• IP address and approximate location
• Cookies and similar tracking technologies

(c) Data you provide directly:

• Profile information you choose to add or update
• Feedback, complaints, or support requests
• Any other information you voluntarily provide

4.1 We collect, use, and disclose your personal data for the following purposes:

1. (a) Account creation, verification, and management;
2. (b) Processing and facilitating rental payments on behalf of your Property Manager;
3. (c) Issuing payment reminders, receipts, invoices, and confirmations;
4. (d) Communicating with you regarding your tenancy and use of the Platform;
5. (e) Providing customer support and responding to your queries;
6. (f) Improving, maintaining, and securing the Platform;
7. (g) Analysing usage patterns to improve user experience and develop new features;
8. (h) Complying with applicable laws, regulations, and legal processes;
9. (i) Detecting, preventing, and addressing fraud, security issues, or technical problems; and
10. (j) Any other purposes that are reasonably related to the above and for which you have provided consent.

4.2 We will not use your personal data for purposes beyond those stated above without first obtaining your consent, unless permitted or required by law.

5.1 We may disclose your personal data to the following parties:

1. (a) Your Property Manager, for the purposes of tenancy management and rental payment administration;
2. (b) Third-party payment processors, for the purpose of facilitating payment transactions;
3. (c) Cloud hosting and IT service providers, for the purpose of operating and maintaining the Platform;
4. (d) Professional advisors (e.g., legal, accounting), as necessary for business operations;
5. (e) Government agencies and regulatory authorities, as required by law; and
6. (f) Any other party with your prior consent.

5.2 Where we disclose your personal data to third parties, we will ensure, through contractual arrangements, that such parties are bound by obligations to protect your personal data to a standard comparable to the protection afforded under the PDPA.

6.1 Your personal data may be stored or processed on servers located outside of Singapore (e.g., cloud infrastructure providers). Where such transfers occur, we will take reasonable steps to ensure that your personal data receives a standard of protection comparable to that under the PDPA.

7.1 We will retain your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.

7.2 When your personal data is no longer needed, we will dispose of it in a manner that prevents unauthorised access or disclosure.

8.1 We implement reasonable security arrangements to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:

1. (a) Encryption of data in transit and at rest;
2. (b) Access controls and authentication mechanisms;
3. (c) Regular security assessments and monitoring; and
4. (d) Staff training on data protection practices.

9.1 You have the right to:

1. (a) Request access to your personal data held by StayCoCo;
2. (b) Request correction of any inaccurate or incomplete personal data; and
3. (c) Request information about the ways in which your personal data has been used or disclosed within the past year.

9.2 To make an access or correction request, please contact our Data Protection Officer. We will respond to your request within thirty (30) days. A reasonable fee may be charged for processing access requests.

10.1 You may withdraw your consent for the collection, use, or disclosure of your personal data at any time by contacting our Data Protection Officer.

10.2 Upon receiving your withdrawal of consent, we will inform you of the likely consequences of such withdrawal. Please note that withdrawal of consent may result in your inability to use certain features of the Platform or the Platform itself.

10.3 Withdrawal of consent does not affect the lawfulness of any processing carried out prior to such withdrawal, nor does it affect processing based on other lawful grounds under the PDPA.

11.1 The Platform uses cookies and similar tracking technologies to enhance your user experience, analyse usage patterns, and improve our services.

11.2 You may configure your browser settings to reject cookies. However, doing so may affect the functionality of the Platform.

12.1 In the event of a data breach that is likely to result in significant harm to you, or is of a significant scale, StayCoCo will notify the Personal Data Protection Commission ("PDPC") and affected individuals as soon as practicable, in accordance with the PDPA.

13.1 StayCoCo will not send marketing messages to Singapore telephone numbers registered on the Do Not Call ("DNC") Registry, unless you have given us clear and unambiguous consent to do so. Service-related communications (e.g., payment reminders, account notifications) are not considered marketing messages.

14.1 We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. We will notify you of any material changes via the Platform or by email.

14.2 Your continued use of the Platform after such notification constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact: