Last updated: November 2026
Data controller
Rocket Science Pte. Ltd. (operator of Brixfox)
Registered office
160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore (068914)
Privacy contact
Contact usCollected when you sign up. Used to authenticate you and send transactional email about your account. Lawful basis: performance of contract (GDPR Art. 6(1)(b)). Retained while your account is active and for 24 months after last login, after which it's deleted.
Handled by Stripe. We never see your card number. We store your Stripe customer ID and subscription status so we can grant or revoke access. Lawful basis: performance of contract. Retained as long as your subscription is active plus the legally required accounting period.
When you save listings or build a portfolio, we store those preferences linked to your account. Lawful basis: performance of contract. Deleted with your account.
When you send an inquiry about a property, we store your name, email address, phone number (if you give one), your message, the listing you asked about and how you reached us (such as the ad you clicked). Where we have the address of the agent selling the property (the listing agency or, in the Netherlands, the makelaar), we send the inquiry to them so they can reply to you directly: your name, email address, phone number and message, whether you have a Brixfox account or subscription, and Brixfox's analysis of the listing. The agent then handles your details under its own privacy policy, and your confirmation email tells you whether the inquiry was sent. If no reply is recorded after about three days, we may send the agent one reminder with the same details. Where we have no address for the agent, the inquiry comes to the Brixfox team instead. If you ask for proposals from rental-management companies, our team passes your request (your name, contact details and message) to management companies in that area. Lawful basis: taking steps at your request (GDPR Art. 6(1)(b)). We keep inquiries so we can follow them up, until you ask us to delete yours (see Your rights).
When you ask a question in Ask Brixfox (on a property page) or in the Market Intel chat, we store the text of your question, the page and listing it was asked on, the time, how the answer ended and, if you rate the answer, your rating and the reason you picked. If you are signed in, the question is linked to your account; questions asked while signed out are stored without any account or visitor identifier. Email addresses you type are removed before a question is stored. We do not store the answer, your IP address or your browser details with it. We use these questions to improve our answers and our data, to find and fix failures, and to prevent abuse. Lawful basis: legitimate interest (GDPR Art. 6(1)(f)). Kept for 12 months, then deleted automatically; questions linked to an account are deleted with the account. Please don't type anything into a question that you don't want us to keep. To hold each visitor to the daily number of free questions, we count the questions asked per day: for an account under the account, and for a visitor without one under a one-way hash of the IP address, never the address itself and never stored with the question. These counts are deleted after two days.
Page views, anonymised user agent, country-level location, and aggregated interaction events. Sent to Google Analytics 4. Lawful basis: consent (GDPR Art. 6(1)(a)) — collected only after you accept analytics cookies in our consent banner. GA4 default retention: 14 months. You can withdraw consent any time via the .
Conversion measurement and audience signals shared with Google Ads. When you have accepted marketing cookies and give us your email address (by creating an account, sending an inquiry or joining a waitlist), we also send Google Ads a one-way SHA-256 hash of that address, never the address itself, so Google can match a sign-up, inquiry or subscription to the ad that led to it (Google's "enhanced conversions"). Lawful basis: consent. Retained per Google Ads defaults (typically 540 days). Same withdrawal mechanism as analytics.
Brief records of your IP address, request path, and response code, retained for up to 30 days. Used for security, abuse prevention, and debugging. Lawful basis: legitimate interest in protecting the platform (GDPR Art. 6(1)(f)).
We don't sell your personal data. We share it with the third-party processors that make Brixfox work, listed below. When you send a property inquiry we also share it with the agent selling that property and, if you ask for management proposals, with rental-management companies in that area (see Property inquiries above); they handle your details under their own privacy policies.
Where data leaves the EEA (e.g. to Stripe US, Google US, or our Singapore HQ), transfers rely on the EU Standard Contractual Clauses or each provider's adequacy decisions where applicable.
Essential cookies — needed for login, checkout, and CSRF protection. Always on; can't be turned off without breaking the site.
Analytics cookies — Google Analytics. Off by default. Turn on or off any time:
Marketing cookies — Google Ads. Off by default. Same controls.
If you're in the EU, EEA, UK, or any jurisdiction with similar laws, you have the right to:
To exercise any of these, send us a message via our contact form with the subject "Privacy request". We respond within 30 days.
We may update this policy as the platform evolves. Material changes will be flagged on the site and the "Last updated" date at the top will move. Continued use after the update means you accept the revised policy.
Questions about your privacy? Reach us through our contact form