Privacy Policy

Last updated: February 2026

1. Introduction

This privacy policy explains how aiflowbiz (Business ID: 202434567P, Bukit Panjang Ring Road 12, 679947 Bukit Panjang, Singapore) collects, uses, and protects your personal data. We comply with applicable Singaporean and international data protection regulations.

2. Collection & Use of Personal Data

Your data is processed exclusively for the following purposes:

• Handling inquiries and service requests
• Providing updates about our AI solutions and offers
• Enhancing our website and optimizing business process workflows

3. Legal Basis for Data Processing

We process your data on the following legal bases:

• Your explicit consent as required
• Fulfilling contracts or pre-contractual measures
• Complying with legal obligations
• Legitimate interests related to service improvement

4. Cookies & Tracking Technologies

To enhance your experience, we use cookies and similar tools, including:

• Essential cookies for core functionality
• Analytics tools (such as Google Analytics)
• Marketing cookies (only with your consent)

You can manage your cookie preferences on your first visit and adjust them anytime in your browser settings.

5. Data Disclosure

Your data is not shared with third parties unless necessary for service delivery, legally required, or explicitly authorized by you.

6. Data Retention

We store personal data only as long as needed for the purposes stated or as required by law.

7. Your Rights

Under applicable laws, you have the following rights:

• Access to your stored data
• Correction of inaccurate data
• Erasure of your data
• Restriction of data processing
• Right to data portability
• Objection to data processing
• Withdrawal of consent for future processing

8. GDPR (EU/EEA Residents)

When we process personal data of individuals in the European Union or EEA, we comply with the EU General Data Protection Regulation (GDPR). This section explains GDPR-specific rights and safeguards.

Scope

GDPR protections apply if you are located in the EU/EEA when you provide personal data to us.

Additional Rights under GDPR

• Right to be informed: you can request details of processing activities.
• Right to rectification: we will correct inaccurate personal data.
• Right to erasure: you may request deletion where legal grounds permit.
• Right to restrict processing: you may ask us to limit how we use your data.
• Right to data portability: receive and reuse your data across services.
• Right to object: you may object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision-making and profiling: you may request human review where decisions have legal or similarly significant effects.

Lawful Bases for EU/EEA Processing

• Consent: where you have given clear consent.
• Contract: to perform a contract with you.
• Legal obligation: to comply with a legal duty.
• Legitimate interests: for our legitimate business interests, balanced against your rights.

Data Transfers Outside the EU/EEA

If we transfer EU/EEA personal data to countries without an adequacy decision, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) or your consent. Contact our DPO for details.

Processors & Third Parties

We use processors (e.g., hosting, analytics, payment providers). We require processors to implement suitable technical and organizational measures and act only on our instructions.

Data Protection Officer & Supervisory Authority

Data Protection Officer (DPO): [email protected]

If you consider our processing to infringe GDPR, you have the right to lodge a complaint with a supervisory authority in your EU/EEA Member State.

How to Exercise GDPR Rights

To exercise any GDPR right, contact [email protected] or [email protected]. We will verify requests and respond without undue delay and within one month, extendable by two months for complex requests.

9. Privacy Contact

For questions, concerns, or to exercise your rights, contact us at:

• Email: [email protected]
• DPO: [email protected]
• Address: Bukit Panjang Ring Road 12, 679947 Bukit Panjang, Singapore

We respond within 30 days.

10. Policy Updates

This privacy policy may be updated at any time. Changes will be published here.

11. Applicable Law & Jurisdiction

Singapore law applies exclusively. Jurisdiction is Singapore, except where mandatory local law (such as GDPR) provides otherwise for data subjects in that jurisdiction.