Privacy Policy

1. Who we are

Qojix is operated by QOJIX AI PTE. LTD., a company registered in Singapore (UEN 202633125H), at 7 Temasek Boulevard, #12-07, Suntec Tower One, Singapore 038987 ("Qojix", "we", "us").

Qojix is business software for licensed professionals. Its AI workers create marketing media, handle enquiries, arrange appointments and keep clients updated, on behalf of the professional who uses it. We comply with Singapore's Personal Data Protection Act 2012 (PDPA).

2. What this policy covers

This policy applies to:

• qojix.ai, our company website;
• app.qojix.ai, the console professionals sign in to;
• agent storefronts and listing pages, such as those at property.qojix.ai;
• messages and emails sent through Qojix on a professional's behalf, and emails we send ourselves.

It covers four groups of people:

• Professionals who hold a Qojix account (for example, property agents registered with the Council for Estate Agencies);
• Their clients and prospects, such as buyers or tenants who message a professional or book a viewing;
• Property owners (sellers and landlords) who receive updates about their listing;
• Visitors to our website and to storefront pages.

3. Our role

For professionals' own account data (your sign-up details, billing and settings), Qojix decides how the data is used and is responsible for it under the PDPA.

For clients' and property owners' data, Qojix processes it on behalf of the professional who uses Qojix to deal with them. In PDPA terms, Qojix acts as a data intermediary and the professional is the organisation responsible for that data. If you are a buyer, tenant, seller or landlord, the professional you dealt with is your first point of contact for requests about your data. You can also write to us and we will pass your request on and help them respond.

4. What we collect

Professionals

• Identity and licence: your name, as confirmed through Singpass Myinfo, matched against the public register of your licensing body (for property agents, the CEA register). We use Singpass to confirm who you are; we do not keep your NRIC number.
• Contact and account details: email, mobile number, your agency's name, your registration number, and your sign-in credentials.
• Billing: your plan, invoices and payment status. Card details are handled by our payment provider; Qojix does not store full card numbers.
• WhatsApp connection: the identifiers of your WhatsApp Business Account and phone number, and an access token that lets Qojix send and receive messages for that number (see section 6).
• Content you add: listing details, photos, 360° photos, floor plans, documents, message templates you write, and anything you paste or upload to import a listing.
• Your likeness, only if you choose to use it: a headshot or video clip used to create a presenter avatar, and a voice sample used to narrate videos in your voice. We record your consent before creating either, and you can delete them at any time.
• Connected accounts, only if you connect them: Google Calendar (section 7) and social media accounts you ask Qojix to post to.
• Settings and activity: the authority level you set for each AI worker, approvals you give or decline, the worker log of actions taken on your account, and how you use the console.
• Support: what you send us when you contact support, including any conversation you choose to export and share with us.

Clients and prospects who message a professional

• Phone number and WhatsApp profile name;
• messages, photos and documents exchanged with the professional's WhatsApp number;
• viewing or appointment bookings;
• information you choose to share so the professional can help you, such as purpose of purchase, budget range, timeline, whether you already own property, residency status and financing readiness;
• where you found the listing (for example, a property portal or social media);
• if the professional chooses to import it when connecting their number, up to six months of earlier one-to-one WhatsApp chat history with them. Imported history is labelled as such in the console.

Property owners

• Details of your property that your agent enters;
• your name and email, if your agent sets up weekly listing reports for you. Reports only start after you confirm by clicking the link in our first email, and every report has an unsubscribe link. Reports show activity counts only; they never include buyers' names, numbers or messages.

Visitors to storefronts and listing pages

• Anonymous page activity: page views, video plays and completions, and tour opens, together with the referring site. We use a short-lived, daily-changing code to count visits; we do not store your IP address and we do not use advertising cookies.
• If you open a video or tour link that a professional sent you in a WhatsApp chat, the link carries a code that tells that professional you finished watching, so they can follow up. Links found elsewhere, such as on social media, carry no such code.
• If you tap a WhatsApp or call button, you leave our page and contact the professional directly. From then on, the "clients and prospects" section above applies.

Visitors to qojix.ai

• Anything you send us through email or forms, and basic technical data needed to serve and secure the site.

5. How our AI workers use data

Qojix's features are organised as AI workers, each with one job:

• Media worker: creates photos, videos, tours and listing copy from the professional's own material.
• Lead worker: replies to enquiries and asks questions that help the professional understand what a client needs.
• Scheduler: offers, books and reminds about appointments.
• Briefing worker: summarises conversations so the professional is prepared.
• Client update worker: sends property owners their weekly report.
• Compliance worker: checks content before it is published.

The professional controls what each worker may do. Some actions happen automatically, some are queued with a short window to cancel, and some wait for the professional's approval. Some things no worker ever does, whatever the settings: negotiate price, accept offers or deposits, agree commission terms, sign or send contracts, or disclose an exact unit number before a buyer is verified. Every action is recorded in a log the professional can see.

Automated assessments. Workers estimate how far along an enquiry is (for example, "serious" or "ready to view") so the professional knows whom to follow up first. These assessments help the professional prioritise; they are not decisions about anyone, and the professional can change them.

AI-generated media is labelled. Staged photos, rendered images and videos presented by an AI avatar are marked as AI-generated, and staged photos are shown alongside the original.

We do not use your content, or the messages of people you deal with, to train AI models. The AI providers we use process data only to return results to us, under terms that do not allow them to train their models on it.

We use data to provide and improve the service, keep it secure, bill for it, provide support and meet legal obligations. We do not sell personal data and we do not use it for advertising.

6. Data from WhatsApp

Qojix connects to a professional's own WhatsApp Business account through the WhatsApp Business Platform, provided by Meta. When a professional connects their number, we receive the account and phone number identifiers, the business display name, and the messages and message-status updates for that number, plus updates about their message templates.

We use this data only to provide Qojix to that professional: to show conversations in their console, let their AI workers reply and follow up as they have allowed, send their templates, and keep records. We do not sell it, use it for advertising or use it to train AI models. Messages also pass through Meta's systems under WhatsApp's own terms and privacy policy, which Qojix does not control.

When a professional disconnects their number or closes their account, we stop receiving new data and delete what we hold as described in section 10.

7. Data from Google Calendar

If a professional chooses to connect Google Calendar, Qojix uses read-only access to check when they are busy, so that no viewing is booked over another commitment. We read only free and busy times, not event titles or details, and we never create, change or delete calendar events.

Qojix's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Disconnecting the calendar deletes our access immediately.

8. Who we share data with

We share personal data only as needed to run Qojix, with:

• Service providers working for us under contract: cloud hosting and database services, AI model providers, image, video and voice generation services, email delivery, payment processing and customer support tools.
• Meta, to send and receive WhatsApp messages for the professional's own number.
• Services a professional chooses to connect, such as Google Calendar or their social media accounts.
• Photography partners, if a professional books an onsite 360° shoot. The partner receives the property address, appointment time and the professional's contact details.
• Authorities, where the law requires it, or to protect the rights, safety or property of people or of Qojix.
• A buyer of our business, if Qojix is sold or merged, under terms that keep this policy's protections.

Property owners never receive client details through Qojix; their reports show counts only.

9. Data outside Singapore

Some of our service providers store or process data outside Singapore. When that happens, we make sure the data receives protection comparable to the PDPA, through contractual commitments and the provider's own safeguards.

10. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy or as the law requires:

• Account and conversation data is kept while the account is active, and for a limited period after it is closed so an account closed by mistake can be restored. It is then deleted.
• Generated media is kept while its listing is active, and deleted after the listing ends unless the professional has saved a copy.
• Weekly-report contacts are deleted after the listing closes or when the owner unsubscribes.
• Billing records are kept for as long as Singapore law requires businesses to keep them.
• Backups may hold deleted data for a short period until they expire.
• If data is needed for a dispute, complaint or legal proceeding, we may keep it until that matter ends.

Professionals should note that their own record-keeping duties under their licensing rules are separate from our retention. If you need records for longer, export and keep your own copy.

11. How we protect data

• Data is encrypted in transit and at rest.
• Each professional's client conversations are separated so that only that professional can see them. Other professionals, including colleagues at the same agency, cannot.
• Access to systems is limited to staff who need it, and access is logged.
• Qojix staff do not read client conversations. If a professional needs support with a conversation, they choose whether to export it and share it with us.

No system is perfectly secure, but we work to protect data and to fix problems quickly.

12. Your choices and rights

Under the PDPA you can ask to access the personal data we hold about you, ask us to correct it, and withdraw consent to its use. You can also ask us to delete it.

• Professionals can update their details, change worker settings, disconnect WhatsApp, Google Calendar or social accounts, delete their likeness, delete individual conversations and close their account from Settings in the console.
• Clients and prospects can ask the professional they dealt with, or email us and we will pass the request on. You can also simply stop replying or block the number in WhatsApp.
• Property owners can unsubscribe from any report email.

To request deletion, follow the steps at qojix.ai/data-deletion. We aim to respond to requests within 30 days. If we can't do what you ask, for example because the law requires us to keep the data, we'll explain why. If withdrawing consent means we can no longer provide part of the service, we'll tell you what changes.

13. Age

Qojix accounts are for licensed professionals aged 21 or over. We don't knowingly create accounts for anyone younger.

14. If something goes wrong

If a data breach is likely to cause significant harm, or is of a significant scale, we will notify the Personal Data Protection Commission and, where required, the people affected, as the PDPA requires. Where we act for a professional, we will notify that professional promptly so they can meet their own obligations.

15. Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will tell account holders by email or in the console before it takes effect.

16. Contact and Data Protection Officer

Our Data Protection Officer can be reached at privacy@qojix.ai, or by post at QOJIX AI PTE. LTD., 7 Temasek Boulevard, #12-07, Suntec Tower One, Singapore 038987.