MarqueTrack
Privacy Policy
MarqueTrack is a property-management platform operated by Allyvate Pte Ltd (UEN 201934150N), Singapore. This policy explains what personal data the platform holds, why, and the rights of the people it belongs to. We comply with the Singapore Personal Data Protection Act (PDPA).
Who the data belongs to
MarqueTrack is used by property owners and managers (our clients). Two kinds of personal data exist in the platform:
- Client account data — usernames and profiles we create for our clients and their teams. There is no public sign-up; every account is provisioned by us.
- Tenancy data entered by clients — tenant names and contact details, leases, rent records and documents. For this data our client is the data controller; MarqueTrack processes it on their behalf to run their property operations.
What we hold, and for how long
| Data | Kept while | After that |
|---|---|---|
| Financial records (invoices, rent ledger, statements) | Client relationship + 5 years | Deleted |
| Tenancy documents (leases, stamp certificates) | The property or tenancy exists in the account | Deleted with the property |
| Compliance evidence (inspection certificates) | The obligation exists | Deleted once resolved |
| Tenant contact details | The tenancy exists | Deleted with the tenancy |
| Account and login data | The client relationship | Deleted at offboarding |
The 5-year financial retention follows IRAS record-keeping requirements and applies even if earlier erasure is requested — the system itself blocks deleting a tenancy that has invoices on record.
When WhatsApp or another messaging channel is used for operational communication, the relevant messages and requests may be recorded in MarqueTrack so the team can track work, provide follow-up and maintain an audit trail.
How it is stored and protected
Data is stored with Supabase (database, authentication and file storage) in their Singapore region, encrypted in transit and at rest. Access is controlled by row-level security: each client account can only reach its own records. Passwords are hashed and never visible to us. If you enable push notifications, the platform stores your device's push subscription — a delivery address issued by your phone's platform, not your location or contacts — and removes it when you turn notifications off.
Deleted data may persist in point-in-time platform backups until the backup window passes; we disclose this rather than work around it.
Sharing
- Supabase, as our data processor for hosting, authentication and storage.
- Singapore tax and regulatory authorities, where legally required.
- Nobody else. We do not sell data.
Your rights
- Clients can review and correct their data inside the platform, export their financial records at any time, and request account deletion (offboarding) — we export your records to you, delete your properties and files, and keep only what the 5-year rule requires.
- Tenants whose details appear in a client's account should direct access, correction or erasure requests to their property manager (the data controller); we support the client in fulfilling them.
Terms
The terms of service — what MarqueTrack does and does not decide on a client's behalf — are at marquetrack.com/legal.
Contact
For any data query, request or complaint, email Max.Marquetrack@gmail.com with the property manager or company the request concerns.