Privacy Policy
Effective date: 21 May 2026. This page describes how HomeyDays Stamp Duty Pte Ltd (“we”, “us”) collects, uses, and discloses personal data when you use our stamp-duty filing service. Singapore PDPA (No. 26 of 2012) applies in full.
1. Who we are
HomeyDays Stamp Duty Pte Ltd operates an internal software tool that helps our team file IRAS lease / tenancy stamp duty on behalf of the company. We are the data intermediary; IRAS is the controller for the stamping record.
Our Data Protection Officer (DPO) can be reached at rent@homeydays.com.
2. Data we collect
When you upload a stamping document we collect, on a per-document basis:
- Party names, NRIC/FIN/UEN, date of birth, gender, addresses
- Property addresses, postal codes, floor/unit
- Lease/sale/loan terms — rents, prices, dates
- The signed PDF you upload (we extract text but keep the original)
We also collect account data when you register: your name, email, organization name + UEN, and (optionally) your IRAS SDID.
3. Why we collect it
- To file your stamping with IRAS. We translate the extracted fields into the IRAS e-Stamping API payload and submit it under your Corppass authorization.
- To estimate your stamp duty. Before any IRAS submission, we call IRAS's Stamp Duty Calculator API to show you the amount owed.
- To prove the filing happened. We archive the stamp certificate and audit log for the retention periods below.
4. Retention schedule
| Data class | Retention |
|---|---|
| Extraction JSON (raw + reviewed) | 90 days after final stamp |
| Original uploaded PDF | 90 days after final stamp |
| Stamp certificate PDF | 5 years (Stamp Duties Act §37) |
| Audit log events | 7 years |
| Failed transactions (never stamped) | 30 days |
| Account data (user / org) | Until account deletion |
Auto-deletion jobs run nightly. You may request earlier deletion of any record not under the Stamp Duties Act legal-obligation retention.
5. Third-party processors
We share the minimum necessary data with these processors:
- IRAS (Singapore Inland Revenue Authority) — the controller of your stamping record. We send the full request payload via the APEX gateway.
- AI document-extraction provider (United States) — runs the model that pulls fields out of your tenancy PDF. We have signed a Zero-Data-Retention agreement (where applicable) so your data is not persisted beyond the request. See §7 below for the cross-border statement.
- Cloud hosting platform (Singapore region) — hosts our application and stores PDFs in encrypted blob storage.
- Transactional email provider — sends your stamp certificate by email.
We will name each sub-processor in writing on request. Email rent@homeydays.com for the current list.
6. Where the data lives
Application, database, and blob storage are pinned to Singapore. Backups are also Singapore-region.
7. Cross-border transfer disclosure
Sending your PDF to our AI document-extraction provider transfers personal data outside Singapore. We rely on contractual safeguards equivalent to PDPA standards (data-processing addendum + zero-data-retention). By using the service you consent to this transfer for the express purpose of field extraction.
8. Your rights (PDPA Parts IV & V)
- Access. Email rent@homeydays.com and we will provide your personal data within 30 days.
- Correction. You can edit most fields on the review screen; for fields outside the form, email the DPO.
- Withdraw consent / erasure. Account data deleted within 30 days. Stamp certificates retained under the Stamp Duties Act exception (Second Schedule of PDPA).
- Portability. Click “Download all my data” in your dashboard for a CSV + ZIP export of every transaction.
9. Breach notification
We will notify the PDPC and affected individuals as required by PDPA Part VI-A. Notifiable breaches (affecting ≥ 500 individuals or causing significant harm) are reported within 3 calendar days of discovery.
10. Changes to this policy
We'll post a new effective date at the top of this page and notify active organizations by email when material changes are made.