Privacy
Privacy Policy
This policy explains what personal data Sewasy processes when you use the marketplace, why, when it is disclosed and how long it is kept.
Draft for Sewasy's launch period.
What we process
Advertiser information
Name or display name, email, phone number, advertiser type (Owner Direct or Registered Agent) and, for agents, the REN number and agency name you supply, plus the date your advertiser record was created and your listing history.
Listings and photos
Property details, rent, deposits and other terms, the private street address and the photographs you upload. Photo metadata such as GPS location is removed when photos are processed.
Enquiries and viewing requests
Your name, email, phone, message and the viewing date and time you request.
Reports and support requests
The reason and details of a listing report, and the name, email, topic and message you send through the contact form.
Renter profile, saved searches and notifications
If you choose to use them: display name, email, phone, preferred areas and maximum rent; the searches you save; and the notifications we generate for you (for example about a viewing request or a saved search).
Saved homes
Stored only in your browser's local storage on your device. Sewasy's servers don't receive the list of homes you save.
Technical and security data
Request information such as IP address, browser type and time, used to run and protect the service. Rate limiting stores only one-way hashes of IP-based keys for short periods. An internal activity (audit) log records actions such as listing approvals and status changes.
Why we use it
- To operate the marketplace and provide listings.
- To route enquiries and viewing requests to the right advertiser, and replies back to renters.
- To moderate listings and handle reports and complaints.
- For security and fraud prevention, including rate limiting and duplicate detection.
- To answer support requests.
- To run saved searches and send you notifications.
- To comply with legal obligations.
We don't sell personal data and we don't use it for third-party advertising.
When your information is disclosed
- Public listings show the advertiser's display name, advertiser type and, for agents, the REN number and agency supplied. Advertisers' email and phone number are not shown publicly, and the street address is kept private — maps show the approximate area only.
- When you send an enquiry or viewing request, your name, email, phone, message and requested time are shared with the advertiser of that listing so they can reply. This is necessary for the service to work.
- Listing reports are seen by Sewasy's moderation team and are not shared with the advertiser together with your details.
- Service providers that host and run Sewasy process data on our behalf (see below).
- We may disclose information where required by law or to authorities investigating fraud or other unlawful activity.
Where data is stored
Sewasy runs on Cloudflare. Listing, account and request data is stored in Cloudflare's database service, and photos in Cloudflare's private object storage; photos are served through Sewasy. Data may be processed outside Malaysia by these providers.
Maps are displayed with OpenStreetMap map tiles, which your browser loads from OpenStreetMap's servers.
How long we keep data
- Advertiser records and listings: while the account is in use, and afterwards for as long as needed for moderation, dispute and fraud-prevention records and for any period required by applicable law — including Malaysian requirements on keeping records of suppliers on an online marketplace.
- Enquiries, viewing requests, reports and support requests: as long as needed to handle them and keep a record of the outcome.
- Rate-limit records: only for the short time window they apply to.
- You can ask us to delete your data; we will do so except for records we are required or entitled to keep.
Your rights
Under Malaysia's Personal Data Protection Act 2010 you can ask to access or correct your personal data, withdraw consent or limit how it is processed, and ask questions or complain about how we handle it. Send your request through our contact form (topic: General question). We may need to confirm your identity and will respond within the time required by law. Advertisers can also update their profile in the dashboard.
Changes to this policy
We'll update this page when the way we handle personal data changes — for example when full accounts are introduced.