Privacy Policy

We collect personal information that Users provide directly and information that is collected automatically through Platform usage:

You can clear cookies through your browser settings. Mobile app data can be cleared through your device settings (iOS: Settings → General → iPhone Storage → RHO Property → Offload App, or Android: Settings → Apps → RHO Property → Storage → Clear Data) or by uninstalling the app.

We use personal information for the following purposes:

• Operating, maintaining, and improving the Platform and its features
• Processing account registrations, logins, and authentication
• Personalising search results, recommendations, and user experience
• Processing token purchases, Rho Coin transactions, and payment-related activities
• Facilitating communications between Users and Agents through the messaging system
• Training and improving AI models for search, recommendations, and listing enhancement
• Detecting, preventing, and investigating fraud, scam activity, and security threats
• Monitoring Platform activity for compliance with Terms of Service and policies
• Sending service-related communications and account notifications
• Complying with legal obligations, regulatory requirements, and law enforcement requests
• Enforcing our Terms of Service and protecting the rights and safety of the Company and its Users
• Conducting analytics to understand usage patterns and improve Platform performance

Information may only be shared in the following limited circumstances:

• With Agents and Service Providers: When Users voluntarily submit inquiries or interact with listings, relevant contact information may be shared with the corresponding Agent or service provider solely to facilitate the specific communication initiated by the User. Agents and service providers are bound by the Platform's Data Processing Agreement and may not use this information for any other purpose.
• With Trusted Technical Partners: We may share information with hosting providers, analytics platforms, cloud infrastructure providers, AI processing services, and other technical vendors strictly necessary for Platform operations. These parties are contractually bound to protect User information, process it only as instructed, and are prohibited from using it for their own purposes.

  Our current technical partners include:

  • --Supabase Inc. — database hosting, authentication, and storage (data stored in Singapore region)
  • --Google LLC (Firebase) — push notification delivery via Firebase Cloud Messaging and crash analytics
  • --Apple Inc. — push notification delivery via Apple Push Notification service
  • --AI language model providers — for Smart RHO search and recommendation features (queries are processed for response generation but not used to train third-party models)

  This list may be updated as our technical infrastructure evolves. All partners are bound by contractual data protection agreements and process information solely as instructed by Ursa Warrior Technology.

• For Legal Compliance: We may disclose information when required by law, regulation, court order, governmental request, or when necessary to protect the rights, property, or safety of the Company, its Users, or the public.
• For Fraud Prevention: We may share information with law enforcement, regulatory bodies, or other relevant authorities when investigating suspected fraud, scam activity, or other illegal conduct.
• Business Transfers: In the event of a merger, acquisition, reorganisation, sale of assets, or similar business transaction, User information may be transferred as part of the transaction, subject to the acquiring party's commitment to honour the protections in this Privacy Policy.

We implement commercially reasonable technical and organisational security measures to protect User information from unauthorised access, loss, alteration, or misuse. These measures include encryption, secure authentication, access controls, and regular security assessments.

However, no method of electronic transmission or storage is completely secure. While we strive to protect User information, the Company cannot guarantee absolute security and shall not be liable for any unauthorised access, data breach, or security incident that occurs despite the implementation of reasonable security measures.

User information may be processed and stored on servers located outside of Malaysia, including but not limited to servers operated by our cloud infrastructure providers and AI processing partners. By using the Platform, you consent to the transfer and processing of your information in jurisdictions outside of Malaysia, which may have different data protection standards.

Subject to applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (PDPA), Users may:

• Request access to their personal data held by the Company
• Request correction of inaccurate or incomplete personal data
• Request deletion of personal data where legally permitted, subject to the Company's right to retain data necessary for legal compliance, dispute resolution, or enforcement of agreements
• Withdraw consent for certain processing activities, with the understanding that withdrawal may limit access to certain Platform features

The Company reserves the right to retain certain data as required by law, for legitimate business purposes, or to protect the Company's legal interests. Requests can be submitted to hi@ursawarriortechnology.com and will be processed within 21 days in accordance with PDPA requirements.

In accordance with the PDPA, we adhere to the following seven data protection principles:

• General Principle: Personal data shall not be processed without the consent of the data subject, except as permitted by law. By creating an account and using the Platform, Users provide their informed consent to the processing of their personal data as described in this Privacy Policy.
• Notice and Choice Principle: Users are informed through this Privacy Policy about the purposes for which their personal data is collected and processed, and the choices available to them regarding processing.
• Disclosure Principle: Personal data shall not be disclosed for any purpose other than the purposes for which it was collected, or a purpose directly related to it. We do not sell, rent, or commercially distribute personal data to third parties.
• Security Principle: We take practical steps to protect personal data from loss, misuse, modification, unauthorised or accidental access, disclosure, alteration, or destruction.
• Retention Principle: Personal data shall not be kept longer than is necessary for the fulfilment of the purpose for which it was collected, subject to legal retention requirements.
• Data Integrity Principle: We take reasonable steps to ensure that personal data is accurate, complete, not misleading, and kept up to date.
• Access Principle: Users have the right to access and correct their personal data held by the Company. Requests can be made to hi@ursawarriortechnology.com.

Users who believe their personal data has been mishandled may lodge a complaint with the Company or directly with the Personal Data Protection Commissioner of Malaysia.

We retain personal information for as long as necessary to support Platform operations, provide services to Users, comply with legal obligations, resolve disputes, enforce agreements, and protect the Company's legitimate interests. Even after account deletion or termination, certain data may be retained in anonymised or aggregated form for analytics, or in archived form for legal compliance purposes.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that personal information has been collected from a minor, we will take steps to delete such information promptly.

When you upload property images, descriptions, or other content to the Platform, this content may contain personal information (such as property addresses, images that may show identifiable people, vehicles, licence plates, or other recognisable elements).

By uploading content, you confirm that:

• You have the necessary rights, licences, and permissions to publish such content
• The content does not violate the privacy or other rights of any third party
• You consent to the publication of the content on the Platform and its accessibility to other Users

You may request removal of your uploaded content at any time by contacting hi@ursawarriortechnology.com. We will remove content within 14 days of a valid removal request, except where retention is required for legal compliance or fraud investigation.

We may update this Privacy Policy from time to time at our sole discretion. Changes will be effective immediately upon publication on the Platform. Continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy. Users are responsible for reviewing this Policy periodically.

For privacy-related inquiries or to exercise your data rights, contact us at hi@ursawarriortechnology.com.