Last updated 13 October 2026
This website (propelai.sg) and the Propel product are owned and operated by MUNDAINE PTE. LTD. (UEN: 202628649N), a company incorporated in Singapore. References to "Propel," "we," "us," or "our" in this policy mean MUNDAINE PTE. LTD.
From every user, we collect sign-in name and email, workspace membership, legal acceptance versions and times, and relevant action attribution. Owners may also provide their WhatsApp number, agency and specialty and connect business accounts. Managers use their own sign-in and are not required to connect their own messaging or calendar accounts. As you use Propel, we also store the client and lead information you enter or that comes in through WhatsApp or Instagram (names, phone numbers, property preferences, conversation transcripts, and voice note recordings/transcripts). Depending on features used, this also includes imported contacts, birthdays, transaction requirements and finances, tasks and appointments, document text, confirmed agreement terms and excerpts, generated summaries, workspace memberships, permission declarations, action attribution, subscription and usage metadata, and delivery and security records. Information may come from you, authorised members, connected services or people messaging your connected business accounts.
For invitations, we record the invited email address, who invited them and when the invitation was sent, accepted, expired or revoked. Legal acceptance records do not include an IP address or device fingerprint. Ordinary security and reliability logs are distinct from those acceptance records.
If you connect your Google Calendar, we access:
We request Google's calendar permission broadly at the account level, but our use of it in practice is limited to the two things above.
Google user data specifically: we use your Google Calendar data only to power the scheduling features visible in Propel's interface (checking availability, creating/updating viewing appointments). We do not use it for advertising, do not sell it, do not use it to build ad-targeting or user profiles, and do not use it to train AI models — for you or any other customer. No one at Propel reads your calendar data manually unless you specifically ask us to (e.g., for a support request), and we'll always ask first.
Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How to revoke access: you can disconnect Propel's access to your Google Calendar at any time from your Google Account permissions page or from Propel's settings. If you revoke access, calendar-dependent features (availability checks, auto-booking) will stop working, but the rest of Propel continues as normal.
If you connect WhatsApp, we sync your phone's contact list so Propel can recognize who's messaging you. This may include contacts unrelated to your property work. Synced phone-book contacts, manually added or imported CRM contacts, and new inbound enquiries have different initial settings. Agent-added contacts may request visibility and automation, subject to identity, channel, permission and eligibility checks. Review scope settings when connecting or adding contacts. A saved contact alone does not establish permission for every kind of automated message.
Inbox visibility and AI replies are separate controls. AI replies require visibility to be on; turning visibility off also turns AI replies off. Turning automation off does not delete retained history.
We store:
Disconnecting: disconnecting WhatsApp stops Propel's use of that connection and removes the synced phone-contact list. It does not automatically delete CRM records or existing conversation history, which remain subject to our retention policy and deletion procedures. You can request deletion separately through our data deletion process. It does not revoke Propel's access on Meta's side — you'll need to remove it separately from your Meta Business Settings if you want to fully offboard. We'll point you to the exact steps if you disconnect.
If you connect Instagram, we process direct messages from people you don't follow, to qualify them as leads the same way WhatsApp messages are. Automation is on by default for these senders, and you can turn it off per-contact.
Follow status is used in initial eligibility checks. Senders you already follow are generally excluded from initial automated lead handling. An enquiry already handled by Propel is not necessarily excluded merely because you later follow that person. Unverified eligibility may restrict automation. Use the available scope controls to manage eligible conversations; switching automation off does not delete previously retained history.
We store, for senders we do process:
Disconnecting: disconnecting Instagram removes the saved connection details and stops Propel's use of that connection. It does not automatically delete CRM records or existing conversation history, which remain subject to our retention policy and deletion procedures. You can request deletion separately through our data deletion process. To revoke permissions granted through Meta, remove Propel separately in your Meta account settings.
This data powers the product: turning your voice notes into client notes and follow-ups, qualifying new leads, surfacing who to contact today, drafting listing copy, and booking viewings against your calendar. It also supports transaction management, agreement-term review where enabled, Practice, call summaries, proactive automations, service emails, workspace access, subscription administration, security and support. Propel does not sell your data or use it to train its own models for other customers. Provider processing, retention and model-improvement practices are separate, as described below.
Your data is processed by the infrastructure providers that make Propel work:
Deepgram voice processing: Practice sends microphone audio for speech recognition and response text for speech generation. Deepgram may retain and use submitted audio, text, transcripts and generated speech to improve its models under its applicable terms and model-improvement programme. Propel does not currently apply a per-request opt-out for these Practice requests, and we have not verified an account-level exclusion. We therefore do not promise no-training or zero retention for Deepgram processing. Request metadata and usage logs are separate from content retention. See Deepgram's data-handling information.
Each provider only receives what's needed to perform its function. We don't sell your data, and we don't share it with advertisers, data brokers, or any party outside this list, except as described under "Legal and law enforcement requests" below.
Where your data is processed: your database and backend are hosted in Singapore. Some of our other providers — including AI processing, messaging, and calendar sync — may process data outside Singapore. Where we transfer personal data overseas, we take steps to ensure it receives a standard of protection comparable to the PDPA, consistent with our obligations under Singapore's Personal Data Protection Act.
Reference Library uploads store extracted text for your reference. General templates do not establish a particular client's agreement terms. Where transaction extraction is enabled, readable PDF text is temporarily processed and sent to Anthropic to propose terms for review. The agreement feature does not retain the original PDF as a document archive. Confirmed terms, supporting excerpts, page references and review information are saved against the transaction and may inform authorised transaction-specific answers.
Remove unnecessary identity and payment details before uploading; screening may not detect every sensitive detail. Keep the original separately and check every selected term. Confirmation records review, not signatures, execution or legal validity. Provider retention is separate from Propel's non-storage of the original PDF. No-training arrangements do not necessarily mean zero retention by a provider.
Supported WhatsApp voice notes are processed to prepare transcripts and requested outputs. Practice sends microphone audio to speech providers and uses AI processing for the interactive session. Uploaded call recordings are temporarily transcribed and summarised; the call-summary feature saves the summary and key points rather than serving as an archive of the uploaded recording or full transcript. Saved outputs and provider-held copies are distinct from temporary processing. Only submit recordings you have authority to record and share, with applicable notice and consent requirements met.
Owners can invite members with role-based access to client, conversation and transaction information. Membership and relevant actions are recorded for access management, attribution and security. Owners should review invitations and remove access when no longer needed. Removal restricts future access; it cannot recall information previously viewed, downloaded or received.
Managers receive only the access enabled for that workspace, not access to the Owner's connected-account credentials, Owner-only billing controls or other workspaces. The Owner can see relevant Manager activity. Workspace business records remain with the Owner's business after a member leaves or is removed.
Leaving or removal ends access to that workspace, not your personal Propel account. A request to delete your personal account is distinct from deleting shared business records in a workspace you do not own. Records you worked on remain in that workspace, and necessary action attribution and legal acceptance evidence may remain where justified. An Owner's request to close and delete a workspace is handled through our data deletion process, subject to applicable retention obligations. These distinctions do not prevent you from exercising your rights over your own personal data.
We use industry-standard safeguards to protect your data, including encryption in transit (TLS) and at rest, access controls limiting who at Propel can view customer data, and provider-level security controls from our infrastructure partners. If we become aware of a data breach that's likely to cause significant harm, we'll notify you and, where required, the Personal Data Protection Commission, in accordance with the PDPA.
Our normal retention period for stored conversation content is up to 12 calendar months. Eligible content is removed through scheduled cleanup; temporary processing and operational copies may have shorter retention periods. Audio used for transcription, uploaded call summaries and live Practice is temporarily processed rather than kept as a recording archive. Saved transcripts, summaries and business records are distinct from those temporary audio copies.
Specific records may be retained longer where necessary for legal obligations, disputes, security investigations or a documented preservation hold. Such exceptions must have a justified purpose and be reviewed; an audit label alone does not justify indefinite retention. Provider-held copies follow the applicable provider terms and controls and are not erased by Propel's database cleanup.
Client and lead records are kept for as long as your account is active, or until you delete them, subject to justified retention obligations. Confirmed agreement terms and supporting excerpts remain with the transaction until explicitly deleted; completing a transaction does not delete them. Calendar data accessed via Google sync is not stored beyond what's needed to display upcoming events and is not retained after you disconnect your Google account.
We may disclose personal data to a public authority (such as law enforcement) if required by Singapore's Personal Data Protection Act (PDPA) or other written law. We only disclose the minimum information necessary to satisfy a lawful request, and we keep a record of every request we receive, including its legal basis. We do not disclose data in response to informal requests that don't cite a specific legal authority.
You can ask to see, correct, or delete the personal data we hold on you or your clients at any time, consistent with the PDPA. See our data deletion instructions for how to request this — this covers WhatsApp, Instagram, and Google data along with everything else we hold. You do not need a Propel account to raise a request about your own information. We verify identity and authority and may coordinate with the agent or agency on whose behalf records are processed. You may also withdraw relevant permissions, subject to applicable law; this may stop affected features and does not necessarily remove records that must lawfully be retained.
If we change how we collect, use, or share your data — including Google, WhatsApp, or Instagram user data — in a way that's materially different from what's described here, we'll notify you and, where required, ask for your renewed consent before the change takes effect. We'll always update the date at the top of this page when we make changes.
Questions about this policy, your data, or to reach our Data Protection Officer — email hello@propelai.sg.