Privacy Policy (PDPA 2012)

Last updated: 2026 · Personal Data Protection Act 2012 (PDPC)

1. Data we collect

• Account: email, password (stored with bcrypt hash), optional name and phone.
• Identity verification: document and selfie, stored with restricted access and available only to moderation.
• Ads: texts and images submitted by the advertiser (image metadata/EXIF is removed automatically).
• Browsing: strictly necessary cookies (session and age verification).

2. Purpose and legal basis

We process data to operate the platform, moderate content, comply with legal obligations and prevent fraud and unlawful acts, based on your consent and the Personal Data Protection Act 2012 (PDPA).

3. Consent to image and data

By posting, the advertiser consents to the processing and public display of the images and declares they have the authorisation of the persons portrayed. Consent may be withdrawn at any time through the removal channel.

4. Your rights

You have the right to access and correct your personal data, and to withdraw consent, through our removal/contact channel, in line with the PDPA. You may also lodge a complaint with the Personal Data Protection Commission (PDPC).

5. Sharing and retention

We do not sell your data. We may share information with the authorities where required by law. Verification data is kept only for as long as necessary to meet legal obligations and is then deleted.

6. Security

We use HTTPS, password hashing (bcrypt), attempt limiting, input sanitisation, image metadata removal and periodic backups.

7. Data contact

For privacy matters, contact us through the contact channel.

Initial template. Review it with legal counsel in Singapore before going into production.