Market Sensus — Privacy Policy

Operator: The Market Sensus, Singapore. Service: Market Sensus (themarketsensus.com). Last updated: 2 July 2026.

1. Introduction

This Privacy Policy explains how The Market Sensus ("Market Sensus", "we", "us") collects, uses, discloses, and protects your personal data when you use Market Sensus (the "Service"), in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). By using the Service you consent to the practices described here.

2. The personal data we collect

Account & identity: first name, last name, email address, and a password (stored only as a secure hash — we never see it in plain text). Accounts created before 20 July 2026 may also have a date of birth and company name on file from our earlier sign-up form; you can ask us to delete these at any time.
Authentication: two-factor authentication (TOTP) enrolment and verification data.
Billing: subscription plan, status, and billing records. Card details are collected and stored by Stripe, our payment processor — we do not see or store full card numbers.
Usage & technical: log-in activity, device/browser information, IP address, and how you interact with the Service (used for security, including detecting shared accounts, and to improve the Service).
We do not ask you to provide, and you must not enter, your own clients' personal or confidential data into the Service.

3. Why we collect it (purposes)

To create and administer your account and authenticate you (including two-factor authentication);
To provide the Service and its features;
To process your subscription, trial, and payments, and send billing-related notices (trial-ending, renewal, and failed-payment reminders);
To protect the Service and enforce our Terms, including detecting and preventing account sharing, fraud, and misuse (this is why we collect device/IP/usage data and apply a per-user watermark);
To communicate with you about your account and important service or legal updates;
To send you marketing or promotional communications about Market Sensus, where you have opted in;
To comply with legal, regulatory, and tax obligations.

Marketing communications. We will only send you marketing or promotional emails if you have opted in to receive them. These are kept separate from essential account, billing, and legal-update messages, which you receive as part of the Service. You can withdraw your consent to marketing at any time — by using the unsubscribe link in any marketing email or by contacting us — without affecting essential service communications.

Age requirement. The Service is for professionals aged 18 or over. You confirm this at sign-up; we no longer collect your date of birth.

4. Consent and withdrawal

We collect and use your personal data with your consent, which you give by providing your data and using the Service. You may withdraw consent for any non-essential processing by contacting our DPO; note that withdrawing consent needed to run your account may mean we can no longer provide the Service.

5. Disclosure and third-party processors

We do not sell your personal data. We share it only with service providers who help us run the Service, under appropriate safeguards: - Stripe — payment processing and billing (card data, billing details). - Supabase — authentication and database hosting (account and profile data); project hosted in the Singapore region. - Netlify — website hosting/delivery. - Resend — sending transactional and, where you have opted in, marketing emails (e.g. account, billing, password emails). - PostHog (PostHog Inc.), our product analytics provider: page views, clicks and other interactions, device/browser information, and session replays with typed input masked, used to understand how the Service is used and to improve it. Data is processed on PostHog's servers in the United States.

If we engage further processors, we will update this list.

We may also disclose personal data where required by law, regulation, court order, or to a regulator, or to protect our rights and the safety of users.

6. Transfers outside Singapore

Some processors process data outside Singapore: for example Stripe (payment data) and PostHog (analytics data, processed in the United States). Where personal data is transferred overseas, we take reasonable steps so that it is protected to a standard comparable to the PDPA, including through the processors' contractual commitments.

7. Retention

We keep personal data only for as long as needed for the purposes above or as required by law (for example, billing and tax records). When no longer needed, we will delete or anonymise it. Account data is kept while your account is active and for as long as required by law (for example, billing and tax records), then deleted or anonymised.

8. Security

We use reasonable administrative and technical measures to protect personal data, including encryption in transit, hashed passwords, two-factor authentication, row-level access controls in our database, and access restrictions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights (access and correction)

Under the PDPA you may request access to the personal data we hold about you and information about how it has been used, and you may request correction of inaccurate or incomplete data. To make a request, contact our DPO (below). We may verify your identity and may charge a reasonable fee for an access request as permitted by the PDPA, and will respond within the timeframe required by law.

10. Cookies and similar technologies

The Service uses cookies/local storage that are necessary to sign you in, keep you signed in, and remember preferences (such as light/dark theme). These strictly necessary cookies do not require consent.

We also use analytics cookies set by PostHog, our analytics provider, to understand how the Service is used and to improve it. These record page views, clicks and other interactions, and device/browser information, and enable session replays in which anything you type is masked before it reaches us. By continuing to use the Service you consent to these analytics cookies. If you would like the analytics data associated with your visits deleted, contact us at themarketsensus@gmail.com and we will action it.

11. Data Protection Officer

We have appointed a DPO to oversee our compliance with the PDPA. You can reach the DPO at: Data Protection Officer, themarketsensus@gmail.com.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or in-app, with an updated "Last updated" date.

13. Contact

The Market Sensus, themarketsensus@gmail.com.

← Back to The Market Sensus