Legal

What Is Qualifyr?

Qualifyr is a lead-intelligence CRM for real estate agents and agencies in Malaysia. We help you organize, qualify, and follow up with leads. We do not represent buyers or sellers, and we are not involved in property transactions.

What Qualifyr Does Not Do

• We are not a broker, agent, or agency.
• We do not provide legal, financial, or investment advice.
• We do not guarantee a sale, rental, or commission.

Who Can Use Qualifyr

You must be at least 18 years old and authorized to use the platform for your agency or business.

Your Account Responsibilities

• Keep your Google account secure and do not share access to it.
• Only upload data you have permission to use.
• Make sure your team follows these terms.

Data Ownership and Lead Ownership

• You own your CRM data and your client or lead relationships.
• We do not sell your leads.
• We process data only to provide the service and improve the platform.

Acceptable Use

Please do not use Qualifyr to:

• Upload data without consent or lawful basis.
• Send spam, engage in fraud, or harass contacts.
• Reverse engineer or copy our software.

Service Availability

We aim for high availability but cannot promise uninterrupted service. We may suspend access for security, legal compliance, or misuse.

Fees and Payment

If you subscribe to a paid plan, you agree to the fees shown in your plan. Refunds, if any, follow the policy shown at checkout.

Limitation of Liability (Plain Language)

We are not liable for indirect or consequential losses, including lost profits, lost deals, or reputational harm. Our total liability is limited to the fees you paid in the last 12 months, unless the law does not allow that limit.

Termination

You can stop using Qualifyr at any time. We may suspend or terminate accounts for serious misuse, legal requirements, or security risks. We will provide notice where reasonable.

Contact

Questions about these terms: hello@qualifyr.my

What Data We Collect

A. Data you or your team upload

• Contact details: name, phone, email
• Lead notes: preferences, budget range, timeline
• Engagement history: calls, messages, deal stage
• Optional identity info: NRIC only when necessary and with consent

B. Data we collect automatically

• Device and browser info
• IP address, time zone, and usage events
• Cookies for login and performance

C. Data collected when you sign in with Google

When you choose to sign in with Google or connect Google Calendar, Qualifyr requests access to the following Google account data:

• Basic profile: your Google account name and email address, used solely to create and identify your Qualifyr account.
• Google Calendar (write-only): the ability to create and delete calendar events on your primary calendar, used only when you enable the “Sync to Google Calendar” feature for reminders.

Google Calendar Access: Scope and Limits

Qualifyr uses the https://www.googleapis.com/auth/calendar.events scope exclusively. We ask for it only when you turn on calendar sync, and we use it strictly as follows:

• We create events on your Google Calendar only when you save a reminder in Qualifyr and calendar sync is enabled.
• We update or delete events only for events that Qualifyr itself created, identified by the event ID we store.
• We never read, list, or access any existing events on your calendar. We do not retrieve, display, process, or store any calendar data that Qualifyr did not create.
• Calendar sync can be disabled at any time from your Settings page, which immediately stops all calendar writes.

The OAuth tokens (access token and refresh token) issued by Google are stored in our database with restricted access, and are used only to authenticate the write operations described above. They are never shared with any third party.

Why We Collect Data (Purpose Limitation)

• Provide the CRM and lead-matching features
• Create, update, and delete Google Calendar events you initiate through Qualifyr reminders
• Maintain security and prevent abuse
• Improve product performance and reliability
• Provide customer support and billing

Consent and Lawful Basis (PDPA Malaysia)

You are responsible for obtaining consent from your leads before entering their data into Qualifyr. We process that data on your instructions, as a service provider. We process your Google account data only on the consent you give during Google sign-in. If you need a data processing agreement, contact us.

Data Retention

We keep your CRM data only as long as your account is active and for a reasonable period after closure to meet legal, security, or backup needs. You can request deletion at any time.

Google account data specifically: your Google account name and email are retained for as long as your Qualifyr account is active. Google OAuth tokens are deleted immediately when you disconnect Google Calendar from Settings or when your account is deleted. We do not retain any Google Calendar event content beyond the event ID needed to perform updates or deletions.

No Sale or Sharing of Google User Data

Qualifyr does not sell, rent, license, or share your Google account data, including your Google profile information and OAuth tokens, with any third party, advertiser, or data broker. Google user data is used only to provide the features you turned on yourself inside Qualifyr.

Qualifyr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Security

We use access controls and encryption in transit (TLS), and we host on managed providers that encrypt stored data at rest. Sign-in is handled through Google, so we never store your password. No system is fully secure, so please also secure your Google account and use role-based access within your team.

Where Data Is Hosted and Cross-Border Transfers

Our infrastructure may store or process data in Malaysia and other regions. We only use providers with strong security and privacy safeguards, and we take steps to protect data transferred across borders.

Third-Party Services (Subprocessors)

We use the following trusted providers to run the service. Each can access data only to perform its function and is contractually prohibited from using it for any other purpose. Google user data (your Google profile and OAuth tokens) is never passed to these providers.

• Google (Gemini / Generative Language API): automated lead scoring, suggestions, and draft-message generation.
• Stripe: payment and subscription billing.
• Resend: transactional email delivery.
• Neon: database hosting.
• Upstash: caching and rate limiting.
• Meta Platforms: WhatsApp Business messaging, when you use WhatsApp features.

Your Rights (PDPA)

• Access or correct your data
• Withdraw consent where applicable (including revoking Google access via your Google Account settings at myaccount.google.com/permissions)
• Delete your account data

Contact

Privacy questions: hello@qualifyr.my

Qualifyr uses the information you enter (budget, area, property type) to suggest relevant listings or leads. This is an assistive tool only. You make the final decisions.

Automated Processing by a Third-Party AI Model

To generate lead scores, follow-up suggestions, and draft messages, Qualifyr sends the lead information you enter (name, phone number, notes, message history, and engagement history) to a third-party AI model, Google Gemini(Google's Generative Language API). The model returns an assessment that Qualifyr shows you as a suggestion; you decide whether to act on it. This processing is limited to providing these features, and our use of the model is governed by Google's applicable API terms.

You can disable AI scoring for your account at any time from your Settings page, which stops lead data being sent for automated scoring.

Qualifyr is provided as a software service. We do not guarantee that leads are accurate, complete, or converted. You are responsible for all communications, compliance with PDPA, and professional conduct.