Privacy Notice

Effective Date: 28 April 2026

This Privacy Notice ("Privacy Notice") explains how AUTODONE.AI PTE. LTD. ("AutoDone.AI", "we", "us" or "our") handles your Personal Data (as defined under applicable data privacy laws) when you use our Platforms (including mobile applications, websites, software or portals) that we own or operate in connection with providing our services, products and solutions ("Services").

Our Services include an AI-powered CRM platform, WhatsApp Business API integrations, AI lead qualification tools, and social media automation features for CEA-licensed real estate agents in Singapore and the broader Southeast Asia market.

It applies to our consumers, agents, vendors, suppliers, partners, contractors and service providers ("you").

We process Personal Data with your consent or as allowed by law, such as to:

• meet legal requirements;
• enter into or fulfil our contractual obligations to you; and
• fulfil our legitimate interests or in the interest of others.

I. COLLECTION OF PERSONAL DATA

We collect your Personal Data in the ways listed below. We may also combine Personal Data collected via these various channels.

You provide your Personal Data to us

We collect your Personal Data when you provide it to us. For example, when you:

• complete a user registration form or customise your profile (such as your name, contact information, CEA licence number and other identification where needed);
• provide your WhatsApp phone number through our platform, landing pages, social media lead forms, or Click-to-WhatsApp advertising campaigns;
• interact with our social media pages on TikTok, Instagram, YouTube or other platforms (such as your social media account ID, profile photo, comments, and direct messages);
• provide information to assess your eligibility to use our Services as a real estate agent or partner (such as your CEA registration details, agency information and business profile);
• provide property preferences, search criteria or enquiry details through any of our channels;
• participate in contests, events or surveys organised by us;
• contact us through our various customer support channels (such as chat, messages, emails or call recordings);
• submit reviews, feedback, ratings or other content about our Services;
• provide information through the use of our artificial intelligence ("AI") services, such as when you interact with our AI agent or input data to our AI lead qualification tools; and
• furnish payment or billing information for the use of our Services.

When our Services are used

Personal Data may be passively collected through the normal operation or use of our Platforms. Some examples are:

• your location information;
• transaction information (such as payment method, subscription records and items purchased through our Services);
• usage data (such as features used, content viewed and interaction patterns);
• device information (such as hardware model, operating system, IP address, browser type and device identifiers); and
• log data (such as access times, pages viewed and system activity relating to the Platforms).

From other sources

We may collect Personal Data from other sources, including:

• social media platforms (such as TikTok, Instagram, YouTube and Facebook) through lead forms, comments or direct messages;
• WhatsApp Business API interactions, including messages initiated through Click-to-WhatsApp advertisements;
• our business partners, such as property developers, agency partners and payment providers;
• publicly available sources of data (such as property listing platforms and public registries); and
• marketing services providers or partners.

When you provide Personal Data of other individuals to us

In some situations, you may provide Personal Data of other individuals to us, such as when you refer a prospective buyer or seller, or add them as a contact in our CRM system. If you provide us with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used and disclosed as set out in this Privacy Notice.

Personal Data

"Personal Data" refers to any data about an individual as defined under the Personal Data Protection Act 2012 ("PDPA"). Examples of such Personal Data you may have provided during the course of your interactions with us include your name, telephone number(s), email address, WhatsApp number, social media handles, property preferences, transactional information and so on.

II. USE OF PERSONAL DATA

We use your Personal Data for the purposes below ("Purposes"). If you use our Services in various capacities (for example, if you operate as both an agent user and a consumer), we may link your Personal Data collected across your various capacities to facilitate your use of our Services.

Providing services and features

Your Personal Data will be used to provide, personalise, maintain and improve our Platforms and Services. This includes using your Personal Data to:

• create, administer and update your account;
• process, manage or verify your eligibility for our products, services, promotions and subscriptions;
• provide AI-powered lead qualification, appointment booking and property information services through our AI agent;
• automate social media comment management and direct message responses on your behalf across TikTok, Instagram and YouTube;
• facilitate WhatsApp Business API communications, including broadcast messages, lead capture and CRM workflows;
• personalise your experience (such as identifying your preferences and recommending relevant features);
• perform internal operations necessary to provide our Services, including troubleshooting, data analysis, testing and research; and
• protect the security or integrity of our Services and any facilities or equipment used to make the Services available.

In providing you with these services and features, we may use manual or automated means, including AI services. Our AI agent operates as a business support tool for lead qualification, appointment booking and property information — not as a general-purpose AI assistant. We strive to ensure the accuracy and reliability of our AI services, and where necessary, we may manually verify the outputs.

Safety and security

We use your data to ensure the safety and security of our Services and all users. This includes:

• verifying your identity when you log in to our Platforms;
• using device, location, profile, usage and other Personal Data to prevent, detect and combat fraud or unsafe activities; and
• monitoring compliance with our terms and conditions and policies.

User support

We use Personal Data to resolve user support issues. For example, we may:

• investigate and address concerns;
• monitor and improve our user support responses; and
• respond to questions, comments and feedback.

Research, development and security

We may use the Personal Data we collect for testing, research, analysis, machine learning, and product development. This allows us to understand and analyse your needs and preferences, improve and enhance the safety and security of our Services, and develop new features, products and services.

Legal purposes

We may use the Personal Data we collect for legal purposes such as to:

• prevent, detect, investigate, resolve or prosecute fraud or crimes;
• comply with court orders or other legal, governmental or regulatory requirements;
• enforce our Terms of Service or other agreements; and
• enforce or protect our rights, interests or properties in the event of a claim, investigation, complaint or dispute.

Marketing and promotions

We may use your Personal Data to send you marketing communications relating to products or services that may be of interest or relevance to you. For example, we may:

• send you property market updates, reports and newsletters;
• send you alerts, promotional materials and special offers relating to our Services; and
• notify, invite and manage your participation in our events or activities.

We may communicate such marketing to you by various means, where applicable (including by SMS, WhatsApp, push notification, email and in-app messaging).

If you wish to unsubscribe from such marketing communications, you may type "STOP" in any WhatsApp conversation with us, click on the unsubscribe link in the relevant email or message, or update your preferences in our app settings. Please note that while you may opt out of marketing communications, we may still send you account and/or service-related messages.

III. DISCLOSURE OF PERSONAL DATA

We may disclose your Personal Data with various parties only as needed for the Purposes. These parties include:

With other users

For example:

• if you are a prospective buyer or seller, we may share your name and contact details with the CEA-licensed agent handling your enquiry;
• if you are an agent user, we may share your lead and enquiry data with your team or agency as configured in our CRM system; and
• if you use our in-app communication features, we may share your registered name and profile information with the other parties to your conversation.

With third parties

We may provide Personal Data to our vendors, consultants, marketing partners and other service providers or business partners. This includes:

• WhatsApp Business API solution providers (such as our messaging infrastructure partner);
• cloud storage and hosting providers;
• payment processors and facilitators;
• data analytics providers;
• advertising and marketing partners and platform providers (including social media platforms such as Meta, TikTok and Google);
• document storage and management providers; and
• service providers who perform identity verification services.

With our legal advisors and governmental authorities

We may share your Personal Data with our legal advisors, law enforcement officials, government authorities and other third parties. This may take place to fulfil the legal purposes mentioned above, or where it is necessary to respond to an emergency that threatens the life, health or safety of a person.

Business transfers

We may share your Personal Data with other parties in connection with any acquisitions, sales, mergers, joint ventures, consolidation, restructuring, financing or any other type of business transactions. Your Personal Data will however remain subject to our obligations made in any pre-existing Privacy Notice that you have agreed to.

We do not sell your Personal Data to third parties.

IV. RETENTION OF PERSONAL DATA

We retain your Personal Data only for as long as it is necessary to fulfil the Purposes outlined in this Notice, or as required by applicable laws and regulations. Retention periods differ depending on the nature of the data, why it is collected and processed, and relevant legal or business needs.

Once your Personal Data is no longer necessary for the Services or Purposes, we take steps to erase, destroy, anonymise or prevent access or use, except where needed for legal compliance, safety, security and fraud prevention and detection, in line with applicable laws.

V. INTERNATIONAL TRANSFERS OF PERSONAL DATA

As we serve the broader Southeast Asia market, your Personal Data may be transferred from your current location to another jurisdiction for various reasons such as centralised data processing and storage, regional operations and support, and service delivery.

We ensure these transfers comply with applicable laws and regulations, including Section 26 of the PDPA. This includes having a lawful basis for transfer, and putting appropriate technical and organisational safeguards in place to ensure an adequate level of protection for your Personal Data. Where required, we will obtain your consent and inform you that overseas protection standards may differ from those under the PDPA.

VI. COOKIES AND RELATED TECHNOLOGIES

We, and third parties with whom we partner, may use cookies, web beacons, tags, scripts and similar technologies (collectively, "Cookies") in connection with your use of our Platforms. Cookies may be used for various purposes such as to:

• provide the essential, basic functions of the use of our Platforms or Services;
• authenticate you, or remember your user preferences and settings;
• deliver and measure the effectiveness of advertising campaigns;
• analyse site traffic and trends; and
• enhance user interface and experience.

You have the right to choose to disable, block or deactivate cookies. Please note that refusal or removal of some cookies could affect the availability, functionality or use of our Platforms or Services. You may adjust your internet browser settings or consult the help section of your internet browser for more information.

VII. PROTECTION OF PERSONAL DATA

We implement reasonable legal, physical, organisational and technical measures to ensure that your Personal Data is protected. This includes measures to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, as well as the loss of any storage medium or device on which Personal Data is stored.

These measures include:

• encryption of data in transit and at rest;
• access controls and authentication mechanisms;
• regular security assessments and vulnerability testing;
• restricted access to Personal Data on a need-to-know basis;
• staff training on data protection obligations; and
• regular audits and reviews of data handling practices.

Those processing your Personal Data will only do so in an authorised manner and are required to treat your information with confidentiality.

Nevertheless, please understand that the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the absolute security of your Personal Data during online transmission. By using our Services, you acknowledge that some risk remains with any data sent or transferred online.

VIII. NRIC AND NATIONAL IDENTIFICATION NUMBERS

In alignment with the Advisory Guidelines on the Personal Data Protection Act for NRIC and Other National Identification Numbers, and the PDPC’s February 2026 directive, we do not collect, use or disclose your NRIC number(s), passport numbers and/or other national identification numbers (e.g. driver’s licence, Foreign Identification Numbers), including but not limited to the retention of physical NRICs or copies (physical or electronic) of your identification documents.

We will only collect, use or disclose such numbers when this is required under the law or when it is necessary to accurately establish or verify your identity to a high degree of fidelity in accordance with the Advisory Guidelines. We do not use NRIC numbers for authentication purposes.

IX. DO NOT CALL (DNC) REGISTRY

We comply with the Do Not Call provisions under Part IX of the PDPA. Before sending marketing messages to Singapore telephone numbers, we will check the relevant DNC Registers and ensure that we have obtained clear and unambiguous consent in evidential form from recipients who are registered on the DNC Registry.

X. YOUR PRIVACY RIGHTS

In accordance with applicable laws and regulations, you may be entitled to:

• inquire about the processing of your Personal Data and be provided with a copy of it;
• request correction or deletion of your Personal Data;
• restrict or object to the processing of your Personal Data;
• withdraw consent (where processing is based on consent);
• request a transfer of your data to another organisation, in a machine-readable form (where applicable); and
• complain to the relevant data privacy authority if you believe your rights were violated and we failed to address your concerns.

If you choose not to provide your Personal Data or later withdraw consent, you may be unable to access certain services or features. However, we may continue to process your data as required or permitted by law.

To protect your rights, we verify all requests and may ask for supporting information or documentation. Once verified, we will process your request within the timelines prescribed by applicable laws. We reserve the right to charge a reasonable fee for processing access requests.

XI. CONSENT

Through your interactions with us (including our agents and partners, as the case may be), providing or submitting information to us or signing up for products or services offered by us, you agree and consent to us:

• collecting, using, disclosing and/or processing your Personal Data for the Purposes as described above;
• collecting Personal Data about you from sources other than yourself and using, disclosing and/or processing the same, for one or more of the Purposes as described above; and
• disclosing your Personal Data to our third-party service providers or agents for the Purposes as described above.

Withdrawal of Consent

You may withdraw your consent at any time by:

• typing "STOP" in any WhatsApp conversation with us;
• contacting our Data Protection Officer at the details provided below; or
• using the unsubscribe mechanism provided in our marketing communications.

If you withdraw your consent, depending on the nature of your request, we may have to discontinue the provision of our products and/or services to you, or terminate any contractual relationship in place. We will inform you of the likely consequences of your withdrawal. Our legal rights and remedies in such events are expressly reserved.

XII. DATA BREACH NOTIFICATION

In the event of a data breach, we will conduct an assessment to determine whether the breach is a notifiable data breach under the PDPA. Where the breach has been assessed to be notifiable, we will:

• notify the Personal Data Protection Commission ("PDPC") as soon as practicable, but in any case no later than 3 calendar days after completing the assessment; and
• notify each affected individual in a manner that is reasonable in the circumstances.

A data breach is notifiable if it results in, or is likely to result in, significant harm to the affected individuals, or if it involves the personal data of 500 or more individuals.

XIII. LINKS TO OTHER WEBSITES OR APPLICATIONS

Our Platforms may contain links to other websites or applications, including those of social media platforms (such as WhatsApp, TikTok, Instagram and YouTube), property listing portals and other third-party services. These websites and applications operate independently from our Platforms, and we do not control and are not responsible for the content, security or privacy practices employed by them. You should review the privacy statements of those websites and applications to determine how they protect and use personal data.

XIV. AMENDMENTS AND UPDATES

AutoDone.AI may update this Privacy Notice at any time. We will notify you of any material changes through our Platform, via email, or through a WhatsApp message. Your continued use of the Platforms or Services following the modifications, updates or amendments to this Notice shall constitute your agreement to be bound by such amendments.

XV. HOW TO CONTACT US

If you have any queries about this Notice or would like to exercise your rights, please contact our Data Protection Officer:

• Email: [dpo@autodone.ai]
• Address: AUTODONE.AI PTE. LTD., 25 SEAH STREET, #02-01, SINGAPORE 188381

Version: April 2026