Privacy Policy

To ensure proper legal compliance and risk allocation:

GoAssetHub as Data Controller: We act as a Data Controller for personal data directly collected from registered Users (e.g., property managers, property owners, and account administrators) for account setup, billing, authentication, and service delivery.

GoAssetHub as Data Processor: We act strictly as a Data Processor for personal data (including tenant details, lease agreements, unit maintenance requests, and payment logs) uploaded, entered, or managed by Property Managers and Owners (“Customer Data”). Property Managers and Owners warrant that they are the primary Data Controllers of their respective tenant data and have secured all required statutory consents.

We collect and process the following categories of data:

A. Direct Account & Identity Data (Controller Context)

• Identity & Contact Details: Full legal name, identity card / passport numbers (where legally required), email address, phone numbers, and physical business address.
• Billing Information: Corporate billing details, banking records, credit/debit card details, and tax identification numbers.
• Technical & Usage Logs: IP addresses, device identifiers, browser types, session timestamps, and audit log histories.

B. Property & Tenant Data (Processor Context)

• Property Records: Unit physical addresses, land title details, maintenance histories, and asset valuations.
• Tenant & Occupant Information: Names, contact information, identity documents, lease agreements, rental balances, utility records, and maintenance requests submitted by or on behalf of property owners/managers.

Personal data is processed strictly for lawful operational and contractual purposes, including:

• Provisioning, operating, and maintaining the Platform features.
• Account verification, user authentication, and multi-factor security checks.
• Processing platform subscriptions, automated billing, and invoicing.
• Facilitating property management communications, work-order dispatching, and lease tracking.
• Legal compliance, regulatory audit reporting, and enforceability of our Terms of Service.

We do not sell, rent, or trade personal data to third parties. Data may be shared strictly under contract with authorized sub-processors or third parties under the following conditions:

• Infrastructure Providers: Cloud hosting (e.g., AWS, GCP, Azure), database providers, and server infrastructure networks.
• Financial Services: Payment gateway providers for processing subscription payments or automated rent disbursements.
• Legal & Regulatory Obligations: Statutory bodies, law enforcement agencies, or courts of competent jurisdiction where mandated by statutory legal process or court order.

Where personal data is transferred across international borders, GoAssetHub ensures that appropriate data transfer agreements, standard contractual clauses, or comparable cross-border safeguards are enforced in compliance with applicable local data protection laws.

We implement robust technical and organizational measures to safeguard personal data, including:

• End-to-end encryption in transit (TLS 1.3) and at rest (AES-256) for stored data assets.
• Role-Based Access Controls (RBAC) restricting system access to authorized personnel only.
• Continuous security audit logging, threat monitoring, and automated vulnerability scanning.

Personal data is retained only for as long as necessary to fulfill the operational purposes set forth herein, or as required by statutory accounting, tax, or legal retention requirements. Upon termination of a customer account or written request, Customer Data will be permanently purged or anonymized within ninety (90) days, subject to legal hold obligations.

Subject to local privacy statutory provisions, Data Subjects maintain the following rights:

• Access & Rectification: The right to request access to and correction of inaccurate or incomplete personal data.
• Consent Withdrawal: The right to withdraw processing consent (subject to contractual conditions).
• Data Erasure & Portability: The right to request deletion or standard structural export of personal data.

To exercise these rights, Data Subjects must contact our Data Protection Officer (DPO) at privacy@goassethub.com.

10.1 Indemnification by Property Managers & Owners

Property Managers and Property Owners using GoAssetHub acknowledge and warrant that they have obtained all legally required explicit consents, notices, and authorizations from tenants, occupants, vendors, and contractors before uploading their personal data into the Platform.

The User agrees to defend, indemnify, and hold harmless GoAssetHub, its parent company, directors, officers, employees, and agents from any claims, fines, regulatory penalties, liabilities, losses, or legal costs arising out of or related to:

• Unauthorized entry of tenant or third-party data into the Platform by the User.
• Failure by the User to maintain statutory privacy compliance under applicable regional laws (e.g., PDPA, GDPR).
• Any dispute arising directly between a Property Manager/Owner and a Tenant regarding data rights or tenancy agreements.

10.2 Limitation of Liability

To the maximum extent permitted by law, GoAssetHub shall not be liable for any indirect, incidental, consequential, special, or punitive damages (including loss of data, profit, goodwill, or operational business interruption) arising out of or connection with the platform or data processing activities. GoAssetHub’s total aggregate liability under any legal cause of action shall not exceed the total subscription fees actually paid by the user to GoAssetHub in the twelve (12) months preceding the claim event.

10.3 Third-Party Links & Integrations

The Platform may contain links or API integrations to third-party services (e.g., accounting software, payment gateways, messaging platforms). GoAssetHub accepts no responsibility or legal liability for the data practices, privacy policies, or security controls of third-party platforms.

10.4 Amendments & Policy Revisions

We reserve the right to modify or update this Privacy Policy at any time. Continued usage of the Platform following published notice of revisions constitutes immediate acceptance of the revised terms.