Privacy policy

Who is responsible for your data

The controller is PT First Property Bali, trading as FIRST Property, Jalan Pantai Batu Mejan No. 33a, Canggu, Kabupaten Badung, Bali 80351, Indonesia.

For anything in this policy, including a request to see or delete your data, write to contact@firstproperty.id or call +62 822 50 40 50. A real person reads that inbox.

This policy covers the website firstproperty.id and the FirstProperty mobile application, which is used by our own agents and is not a consumer app.

What we collect when you use the website

You can browse the whole site, including every listing, map and guide, without giving us anything. We only receive personal data when you send it.

When you submit a contact or enquiry form, we store what you typed:

• your name (required), and your email address and phone number if you fill them in;
• your message, kept as the first note on the enquiry;
• the reference code of the listing you were looking at, so the enquiry reaches the agent who handles it;
• the language of the page you were on, so we answer you in it.

What we do not keep

The form is protected against bots by a hidden field and by a rate limit of five submissions per minute per IP address. That rate limit holds your IP address in the server's memory for sixty seconds and then forgets it: no IP address from the form is written to our database.

We do not run an advertising pixel. There is no Meta pixel, no Google Ads tag and no advertising network on this site, and we do not sell the contact details you send us.

Cookies, analytics and session replay

We use PostHog for product analytics. It is loaded after the page has finished rendering, and it records how the site is used: page views, clicks and other interactions captured automatically, JavaScript errors, and a replay of the session so we can see where a page confused someone. Text you type into form fields is masked in those replays, so your message and contact details do not appear in them.

PostHog stores identifiers in a cookie and in your browser's local storage so that repeated visits are recognised as the same anonymous person. Our PostHog project is hosted in the United States (us.i.posthog.com), so this data leaves Indonesia.

We do not currently show a cookie or consent banner. If you would rather not be measured, you can block it: any tracker-blocking extension or browser setting that blocks us.i.posthog.com stops it completely, and the site works normally without it. You can also write to us and we will delete the recordings we hold for you.

The site also loads maps from third parties on the pages that show one: Google Maps, or map tiles from CARTO built on OpenStreetMap data. Those providers receive your IP address, as any server you connect to does. Payload's admin and agent areas set a session cookie once a member of staff signs in; there is no such cookie for a visitor.

What the FirstProperty app collects from our agents

The mobile application is a working tool for our own agents. It contains no analytics and no advertising SDK of any kind: nothing in the app reports your behaviour to us or to anyone else.

It handles four things, all of them tied to the job of listing a property:

• Account: the agent's name, email address and password, held in the same system as the website, plus the profile they choose to publish (photo, short bio, languages spoken, WhatsApp number). The password is stored hashed, never in clear text. The sign-in token is kept in the phone's secure keystore.
• Location: when the agent taps the button on the location step, the app reads one position fix and uses it as the property's coordinates. Location is foreground only, both background modes are switched off, nothing is recorded between taps, and refusing the permission is a supported path that simply falls back to typing the coordinates by hand.
• Camera and photo library: photos of the properties being listed. They are re-encoded on our server, which strips the EXIF metadata, so the camera and GPS tags embedded by the phone do not survive into the published image.
• Push notifications: if the agent allows them, the device's Expo push token is stored with the platform, the device model name and the date it was last seen. It is used for one thing — telling the assigned agent that a new lead just arrived. It is deleted when they sign out.
• Drafts in progress are also held on the phone itself so a listing survives a bad connection.

Why we use this data

Each piece of data above exists for one of these reasons, and no other:

• to answer your enquiry and follow it through — that is why the form exists;
• to route your enquiry to the right agent and let them keep notes on the conversation;
• to publish accurate listings: the coordinates place the property on the map, the photos show it;
• to alert the assigned agent quickly when a new enquiry arrives;
• to understand which pages work and to find errors, which is what the analytics are for;
• to keep accounts secure and prevent the forms being abused by bots.

Who else sees it

Inside the company, an enquiry is visible to the agent it was assigned to and to administrators; other agents cannot read it. A property owner's private contact details are restricted to staff and never leave the server towards a visitor. Push tokens are readable by no one but their owner and an administrator.

Outside the company, we use these service providers:

• PostHog, Inc. (United States) — website analytics and session replay;
• Hostinger International Limited — the server this site and its database run on, and the mail service behind our @firstproperty.id addresses;
• Cloudflare, Inc. (United States) — every request to this site passes through Cloudflare's network before reaching our server: it terminates the encrypted connection, filters abusive traffic and caches images close to you, and in doing so processes your IP address and the page you asked for;
• Expo (Expo Application Services) — delivery of push notifications to our agents' devices, which it hands to Apple's and Google's push services;
• Google, and CARTO with OpenStreetMap — the maps displayed on listing and area pages.
• We also notify search engines through IndexNow when a listing or guide changes. That submission contains page addresses only, never personal data.

Where it is kept, and for how long

The database, the uploaded photos and the site itself run on our own virtual server in Southeast Asia, rented from Hostinger. Photos are served from this same domain rather than an external image host. Analytics data is the exception: it is held by PostHog in the United States.

We take an automatic copy of the database every night. Those copies are kept for thirty days and then deleted; that is the only automatic deletion in the system today.

Enquiries themselves have no automatic expiry: an enquiry stays in our CRM until someone deletes it, because an interest in a Bali property often resurfaces years later. If you would prefer yours gone, ask us and we will delete it. How long analytics data is kept is a setting on our PostHog project rather than something this site controls; ask us and we will tell you what it is currently set to. Push tokens are deleted at sign-out, and dead ones are removed when the push service reports the device no longer exists.

How it is protected

The site is served over HTTPS only. Passwords are stored hashed. Access inside the system is by role: an agent sees their own enquiries and the listings they work on, not the whole database, and the sensitive fields on a listing — the owner's name and phone number, the commission — are readable by staff only, enforced on the server rather than hidden in the interface.

No system is perfect. If you believe something has gone wrong with your data, tell us at the address above and we will investigate and tell you what we find.

Your rights, and how to use them

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, and ask us to stop using it. You can withdraw a consent you gave at any time; that does not undo what was done before you withdrew it.

Send any of these requests to contact@firstproperty.id. We will reply within thirty days. We may ask you a question or two first, only to be sure that we are handing your data to you and not to someone claiming to be you.

Depending on where you live, national data-protection law may give you the right to complain to a supervisory authority as well as to us. Nothing in this policy removes that right.

Children

This is a real-estate service for adults. It is not directed at children, and we do not knowingly collect data from them. If a child has sent us something through the form, write to us and we will delete it.