Privacy Policy
Last updated: 29 August 2026
1. Who we are
Harta.my is a Malaysian local marketplace. This policy explains what information we collect, why we collect it, and the choices you have.
2. Information we collect
- Account information — email address, name, and (optionally) phone number.
- Sign-in identity — when you use Google Sign-In we receive your Google subject identifier, email and profile name, but never your Google password.
- Listings — titles, descriptions, prices, categories, locations, and photos you publish.
- Professional verification — if you apply as a property agent, we collect your REN number, registered agency details, submitted REN-tag evidence and the resulting review record. Evidence is not published and is restricted to authorised staff.
- Messages and safety — listing-linked message content, delivery/read state, blocks, reports and moderation decisions. WhatsApp contact links are enabled by default when a seller supplies a number and can be disabled per listing. Harta.my does not receive external WhatsApp conversation contents.
- Usage — searches, saved listings, contact-initiation events, security outcomes and rate-limit signals.
3. How we use information
We use your information to operate the marketplace, publish your listings, deliver buyer–seller messages, prevent spam and scams, investigate reports, and send transactional emails such as message notifications, verification and password reset.
4. Location data
Listings show a locality and an intentionally imprecise map point. Your precise address is never shown publicly. Exact coordinates, if provided, are kept access-controlled.
5. Sharing
We do not sell your personal data. Conversation content is visible to its participants and may be accessed by authorised Harta.my staff when required for moderation, support, safety, legal compliance or dispute handling. We share information only with service providers who help operate Harta.my (for example, our email and bot-protection providers), or where required by law.
6. Retention and security
We retain conversations, reports and professional-verification records for as long as reasonably needed to operate the service, protect users, resolve disputes and comply with law. Access to agent evidence is permission-controlled. Cloudflare Turnstile evaluates security signals on protected forms; its own privacy terms also apply.
7. Your rights
You may access, correct or request deletion of your data, and withdraw consent where applicable, through our contact support form.
8. Contact
For privacy questions, use the contact support form and select Privacy request.