Privacy

Who we are

Flatworth is run by NAVARO Pte Ltd, Singapore. Questions about your data go to hello@flatworth.com. The data protection contact is the same address.

The free check, before you sign in

Collects nothing about you. The flat you check is sent to our server to compute the figures and is not stored against any person. Our host records ordinary server logs (IP address, browser type, time) for security and rate-limiting, kept for a short period.

When you sign in

We ask for your email address and send it a one-time code. We store the email address, the time you signed in and, if you accept the terms at checkout, the time you accepted them. We store no password. Signing in keeps you signed in for 30 days through a cookie that carries only a signed session reference. We use the address to send the code, your reports and, if you buy Flat Watch, the monthly update and block alerts. We do not send marketing email unless you ask for it.

When you buy a report

Payment is taken by Stripe on its own pages. Stripe holds your card details; we never see them. We receive from Stripe the amount paid, the last part of the payment reference and your email address, and we store those with the flat the report is about, the report itself and its re-runs, so that we can show you the report, honour the range promise and answer a dispute. Purchase records are kept for seven years, the period Singapore's tax and accounting rules require.

Flat Watch

A Flat Watch stores the flat you are watching against your email address so that we can email you each month and when a sale or rental in your block registers. Every email carries a link that stops the watch at once.

MOP Alert

The free MOP Alert asks for your email address, your block's postal code and, if you give them, the month your purchase completed, whether your flat has a ten-year MOP, and its flat type. We use them only to send the emails you asked for: three months before your MOP, in your MOP month, and when the first flat in your block resells. Nothing is sent until you confirm by the link we email you. We keep a record of when you asked for, confirmed and stopped the alert, with the words you agreed to. The alert creates no account and your address is not added to any newsletter. Every email carries a link that stops the alert at once.

Who processes data for us

Cloudflare (hosting and the database, in the Asia-Pacific region), Stripe (payments), Resend (email delivery). Customer.io, our email platform, receives your email address, your consent choices and what you do on Flatworth, to send the emails you agreed to. Customer.io holds that data in the United States, under a data processing agreement that requires it to protect it to a standard comparable to Singapore law. Each acts on our instructions under its own data-processing terms. We do not sell personal data and we do not share it with anyone else, except where the law requires it.

What we keep and for how long

Sign-in records for as long as your account is active and for twelve months after your last sign-in. Purchase records and reports for seven years. A MOP Alert until 90 days after its last email or after you stop it; a request you never confirm, with its record, 14 days; the record of what you agreed to, twelve months after the alert ends. Server logs for a short rolling period. Cookies: the session cookie for 30 days, the admin cookie for 12 hours; no advertising or tracking cookies. We use Cloudflare's privacy-preserving analytics, which sets no cookie and does not identify you.

Your rights

Under the PDPA you may ask what personal data we hold about you and how it has been used, ask us to correct it, and withdraw consent. Email hello@flatworth.com from the address you signed in with. We answer within 30 days. Withdrawing consent stops sign-in, reports and watches; purchase records are kept for the statutory period even after that. Complaints not resolved with us can be taken to the Personal Data Protection Commission of Singapore.

Changes

If this notice changes in a way that affects you, we say so on this page and, for material changes, by email to signed-in users.