Privacy Policy

We collect information you provide directly, including:

• Account data — name, email address, phone number, date of birth, gender, country, and state when you register.
• Profile data — profile photo, biography, and any other optional information you add.
• Listing data — tenancy records, reviews, and ratings you create or submit.
• Communications — messages sent via our contact form.

We also collect data automatically:

• Usage data — pages visited, search queries, and feature interactions.
• Device data — browser type, operating system, and IP address.

• To create and manage your account.
• To facilitate the tenancy review and reputation system.
• To verify your identity and phone number via SMS.
• To respond to support requests and contact form submissions.
• To send transactional emails (e.g. email verification, password resets).
• To improve our platform and understand how users interact with it.
• To comply with applicable laws and regulations in Malaysia.

We do not sell your personal data. We may share it only in these circumstances:

• Service providers — third-party services that help us operate tenansea (e.g. Supabase for database storage, Firebase for authentication, Resend for transactional email). These providers are bound by data processing agreements.
• Legal requirements — if required by law, court order, or government authority in Malaysia.
• Business transfer — if tenansea is acquired or merged, user data may be transferred to the new entity.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or where we have a legitimate interest (e.g. fraud prevention).

Reviews and tenancy records you have submitted may remain on the platform in anonymised form after account deletion.

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect your ability to sign in.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), server-side authentication via Firebase Admin SDK, and row-level security on our database. No system is completely secure — please use a strong password and keep your credentials private.

Under applicable Malaysian law (PDPA 2010) and, where relevant, GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention obligations).
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at tenansea@gmail.com.

tenansea is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has registered, please contact us and we will promptly remove their account.

We may update this policy from time to time. We will notify registered users of material changes by email or through a notice on the platform. Continued use of tenansea after changes take effect constitutes acceptance of the updated policy.

If you have any questions about this privacy policy, please contact us:

Email: tenansea@gmail.com
Website: tenansea.com/contact