隐私政策

When you browse the public site. You do not need an account to search the map or view listings, and we do not ask who you are. We do not use analytics, advertising or tracking cookies. Like any website, our hosting provider receives technical information with each request — such as your IP address, browser type and the page requested — and keeps it in server logs for security and troubleshooting. We count how many times each listing is viewed, as a total only; the count does not record who viewed it.

When you send an inquiry about a listing. We collect your name, email address, phone number (if you give one) and your message, together with the listing you asked about.

When an agency applies for an agent account. We collect the company name, the contact person’s name, phone number, email address, office address and any note included with the application. If the application is made with “Continue with Google”, we receive from Google the email address (which Google has verified), your name, your profile picture and a Google account identifier. We store the email address and the identifier; the name is used only to pre-fill the form, and the picture is only displayed on it.

When you use an agent account. We hold your name, email address, phone number, preferred language, company name, contact person, office address, company logo and the contact channels you choose to list (for example a Viber number or a Telegram username), as well as the listings and photos you publish and the inquiries you receive. For sign-in we keep a securely hashed password (never the password itself), a record of linked Google accounts, the time of your last sign-in, failed sign-in attempts and temporary lockouts, and hashed session tokens.

We use personal information to:

• deliver your inquiry to the agent responsible for the listing so they can reply to you;
• review agency applications, create agent accounts and tell applicants the outcome by email;
• show listings and agency profiles on the public site, and let agents manage their listings and inquiries;
• sign you in, keep your account secure, detect repeated failed sign-ins and send password-reset emails you request;
• review listings before they are published and remove content that breaks our Terms; and
• comply with the law and respond to lawful requests.

We do not sell personal information, and we do not use it for advertising.

The Service exists to put buyers and renters in touch with agencies, so some agent information is public by design. Anyone visiting the public site can see an agency’s company name, logo, contact person, email address, phone number and listed contact channels, together with its published listings and their photos.

Inquiries are not public. An inquiry is visible only to the agent who received it and to YHC staff who administer the Service.

We share personal information only as follows:

• Agents. When you send an inquiry, the agent responsible for that listing receives your name, contact details and message.
• Service providers that run parts of the Service on our behalf: our website hosting provider; Supabase, which hosts our database and stores uploaded photos and logos; our email delivery provider, which sends application, approval and password-reset emails; Mapbox, which supplies the map — your browser requests map images from Mapbox directly, so Mapbox receives your IP address; and Google, when you choose to sign in or apply with Google.
• Legal reasons. When we are required to by law, or where it is necessary to protect the rights, property or safety of YHC, our users or others.
• Business transfers. If the Service is sold or merged, information may transfer to the new operator, who must continue to protect it as this policy describes.

Some of these providers process data on servers outside Myanmar. By using the Service you understand that your information may be processed in those countries.

If you choose “Continue with Google”, Google shares your email address, name, profile picture and Google account identifier with us, under the permissions shown on Google’s consent screen. We use them only to sign you in, to link your Google account to your agent account, and — if you have no account yet — to pre-fill your agency application. We do not request access to your Gmail, contacts, files or any other Google data, and we do not post anything to your Google account.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove YHC’s access at any time from your Google Account’s security settings.

The public site stores a few preferences in your browser’s local storage so they survive your next visit: your chosen language, whether you have finished the map tour, whether the advanced search filters are open, and the properties you have saved. These stay on your device and are not sent to us. You can clear them at any time through your browser settings.

The agent portal uses strictly necessary cookies to keep you signed in and to protect sign-in forms against forgery, plus a short-lived cookie that carries your Google sign-in to the application form when you apply with Google. These cannot be switched off without breaking sign-in.

We keep agent account information for as long as the account exists, and inquiries for as long as the receiving agent’s account exists, so the agent can follow up. Applications are kept after a decision so that a rejected application can be reconsidered and so we have a record of who was approved. Session tokens expire automatically, and password-reset links expire shortly after they are sent.

When information is no longer needed for these purposes, or when you ask us to delete it and we are not required to keep it, we delete it.

Information travels over encrypted connections. Passwords are stored only as salted hashes, session and password-reset tokens are stored only as keyed hashes, and repeated failed sign-ins temporarily lock an account. Access to the administration tools is limited to YHC staff who need it. No system is perfectly secure, but we work to protect your information and will act promptly if a problem occurs.

Agents can view and correct most of their information at any time from the Profile page of the agent portal, including their name, phone number, address, logo and contact channels.

Anyone may ask us for a copy of the personal information we hold about them, ask us to correct it, or ask us to delete it — for example an inquiry you sent, or an application you made. Email [privacy@your-domain] from the address the information relates to, and we will respond within a reasonable time. We may need to keep some information where the law requires it.

The Service is meant for adults looking for property and for property professionals. It is not directed at children, and we do not knowingly collect information from anyone under 18.

We may update this policy when the Service or the law changes. We will change the “last updated” date above, and where a change is significant we will let agents know through the agent portal or by email before it takes effect.

[Registered company name]
[Registered office address, Yangon, Myanmar]
[privacy@your-domain]