Privacy Policy

1. Personal Data We Collect

"Personal Data" refers to any data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.

We collect the following categories of personal data:

• Identity and Contact Data: Name, email address, phone number, company name, and professional title.
• Professional Credentials: Industry registration numbers, years of experience, and professional specialties.
• Authentication Data: Encrypted passwords and third-party OAuth tokens (e.g., Google Business Profile access tokens).
• Financial Data: Billing address and subscription details. We do not store full credit card numbers; these are processed directly by Stripe.
• Technical and Usage Data: IP addresses, browser type, device information, and data regarding your interaction with the Platform.

2. Purposes of Collection, Use, and Disclosure

We collect, use, and disclose your personal data for the following purposes:

• Service Delivery: To create and manage your account, verify your professional credentials, and provide the TealPrint services.
• Billing and Administration: To process payments, issue invoices, and manage your subscription tier.
• Communication: To send you service updates, security alerts, and support messages.
• Platform Improvement: To monitor and analyse platform usage, resolve technical issues, and improve our services.
• Compliance: To comply with legal and regulatory obligations.

3. Disclosure to Third-Party Processors

To provide our services, we disclose your personal data to trusted third-party service providers. By using TealPrint, you acknowledge and consent to your data being processed by these third parties:

• AI Model Providers: OpenAI, Anthropic, Perplexity, and Google (for generating content and visibility analysis).
• Payment Processors: Stripe (for handling subscription billing).
• Infrastructure Providers: Vercel (hosting) and Supabase (database and authentication).
• Communication Tools: Resend (transactional emails) and Loops.so (marketing emails).

Important: While we select reputable providers, TealPrint does not control their internal security practices. By using our platform, you accept that TealPrint is not liable for data breaches, unauthorized access, or data loss occurring on third-party infrastructure.

4. Cross-Border Data Transfers

TealPrint uses cloud infrastructure and third-party AI models that may be hosted outside of Singapore. When we transfer your personal data overseas, we comply with the PDPA's Transfer Limitation Obligation by ensuring overseas recipients are bound by legally enforceable obligations to provide a comparable standard of protection.

5. Data Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your personal data, including:

• AES-256-GCM encryption for OAuth tokens at rest.
• TLS/SSL encryption for all data in transit.
• Role-Based Access Control (RBAC) and Row Level Security (RLS) at the database level.

Limitation: No method of transmission over the internet or electronic storage is 100% secure. You acknowledge that TealPrint cannot guarantee absolute security. To the maximum extent permitted by law, TealPrint expressly excludes all liability for any loss, damage, or unauthorized disclosure of personal data resulting from cyber attacks, hacking, malware, or other malicious acts by third parties.

6. Data Breach Notification

In the event of a notifiable data breach (likely to result in significant harm or affecting 500 or more individuals), TealPrint will notify the Personal Data Protection Commission (PDPC) and affected individuals within three (3) calendar days of assessment, in accordance with the PDPA.

7. Retention of Personal Data

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws. When your subscription is cancelled, we will securely delete or anonymise your personal data, except where retention is necessary for legal, tax, or accounting purposes.

8. Your Rights

Under the PDPA, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of any errors or omissions.
• Withdrawal of Consent: Withdraw your consent at any time. Note that this may prevent us from providing you with TealPrint services.

To exercise these rights, contact our Data Protection Officer at privacy@tealprint.sg. We will respond within 30 days.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and sending an email to active subscribers.

10. Contact Our Data Protection Officer

If you have any questions or concerns regarding this Privacy Policy, please contact:

Data Protection Officer
TealPrint Pte. Ltd.
Email: privacy@tealprint.sg