← Back to VeraSpace

Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how VeraSpace Sdn Bhd (“VeraSpace”, “we”, “us”, or “our”) collects, uses, stores, and protects your information when you use our website and services at veraspace.my (the “Service”), Malaysia’s verified property ecosystem. By using the Service, you agree to this Policy.

1. Who we are

VeraSpace is a property platform that connects buyers and renters with verified agents and verified listings showcased through 360° virtual tours. We serve property agents, property seekers (buyers and renters), and related service providers.

2. Information we collect

  • Account information — name, email address, phone number, and (for agents) agency, licence/REN number, and verification documents you submit.
  • Listing information — property details, photos, 360° tours, and links you add.
  • Communications — messages, enquiries, and WhatsApp conversations handled through the Service.
  • Usage & device data — pages viewed, actions taken, IP address, and browser information, used to operate and secure the Service.
  • Google account data — see Section 3.

3. Google user data

When you choose to use a Google-based feature, we access limited Google data with your explicit consent:

  • Sign in with Google — we receive your Google name and email address to create or sign you into your VeraSpace account. We do not receive your Google password.
  • Google Calendar (agents only, optional) — if an agent connects their Google Calendar, we request the following scopes:
    • …/auth/calendar.events — to create viewing-appointment events on the agent’s calendar when a viewing is booked through our assistant.
    • …/auth/calendar.freebusy — to check the agent’s free/busy availability so we do not book over an existing commitment.

We only access Google Calendar to create and manage the specific viewing appointments booked through the Service and to check availability for those bookings. We do not read the contents of your other calendar events, and we do not use Google user data for advertising.

Limited Use disclosure. VeraSpace’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except (a) with your explicit consent, (b) for security purposes (e.g. investigating abuse), (c) to comply with applicable law, or (d) where the data is aggregated and anonymised.

4. How we use your information

  • To provide, operate, and improve the Service.
  • To verify agents and listings, and to keep the platform trustworthy and secure.
  • To connect buyers with agents, capture enquiries, and (with consent) book property viewings.
  • To create calendar events and check availability, as described in Section 3, when you connect Google Calendar.
  • To communicate with you about your account, enquiries, and appointments.

5. How we store and protect data

We store data on secured servers and apply industry-standard measures to protect it. Sensitive credentials, including any Google authorization (refresh) token used for Calendar, are encrypted at rest. Access is limited to authorised personnel and systems. No method of transmission or storage is 100% secure, but we work to protect your information and to limit access to what is needed to run the Service.

6. How we share information

We do not sell your personal information. We share it only as needed to run the Service:

  • Between users — a buyer’s enquiry details are shared with the relevant agent (and vice versa) to facilitate the transaction.
  • Service providers — hosting, messaging (e.g. WhatsApp), and infrastructure partners who process data on our behalf under confidentiality obligations.
  • Legal — where required by law, regulation, or valid legal process.

7. Data retention & your choices

  • We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations.
  • You may request access to, correction of, or deletion of your personal data by contacting us (Section 9).
  • Revoking Google access — you can disconnect Google Calendar at any time from your VeraSpace agent portal, and/or revoke VeraSpace’s access to your Google account at myaccount.google.com/permissions. When you disconnect, we delete the stored authorization token.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data.

9. Contact us

For any questions about this Policy or your data, contact us at contact@veraspace.my.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.