Privacy Policy

1. Roles and Responsibilities

You (or your organisation) are the data controller for all documents and data uploaded to the Service. Ophie AI acts as a data intermediary, processing your data on your behalf for the purpose of delivering the Service. You are responsible for ensuring you have a lawful basis under the Personal Data Protection Act 2012 of Singapore ("PDPA") or other applicable laws to collect, use, and disclose any personal data contained in documents you upload.

2. How We Process Your Data

• Documents you upload are processed using a combination of proprietary and third-party services for the purpose of delivering the Service. Ophie AI does not use your content for any purpose other than providing, maintaining, and improving the Service (such as monitoring performance and fixing issues).
• Ophie AI does not use your content to train its own artificial intelligence or machine learning models. Where third-party services are used in processing, their use of data is governed by their respective terms and policies. We select third-party providers that offer appropriate data protection commitments.
• We implement appropriate technical and organisational measures to protect your data, including encryption and access controls. Your data is logically segregated from other organisations.
• We do not sell your data. We do not share your data with third parties except as necessary to operate and deliver the Service.

3. Sub-Processors

To deliver the Service, we engage third-party sub-processors in the following categories: cloud infrastructure providers, artificial intelligence and machine learning service providers, and data storage providers. We select sub-processors that maintain commercially reasonable security practices and whose terms of service include data protection commitments.

4. Cross-Border Transfers

Your data may be transferred to and processed in jurisdictions outside of Singapore as part of the Service's operation. By using the Service, you acknowledge and consent to such transfers. We select third-party providers that maintain data protection practices consistent with industry standards.

5. Retention and Deletion

We retain your data only for as long as necessary to provide the Service. Upon termination or cancellation of your subscription, the following timeline applies:

• Your workspace is suspended at the end of your billing period. Data is preserved during the suspension window.
• 30 days after suspension: you receive a warning email that deletion is approaching.
• 60 days after suspension: you receive a final warning email.
• 90 days after suspension: all documents, projects, comparisons, chat history, and schema templates are permanently and irreversibly deleted.

You may request earlier deletion of data containing personal information at any time by contacting us at support@ophieai.com. We will honour deletion requests promptly in accordance with applicable data protection laws.

6. Data Breach Commitment

In the event of a personal data breach that is likely to result in significant harm to affected individuals, Ophie AI will notify affected users and, where required, the relevant data protection authority, in accordance with applicable laws. We maintain incident response procedures to detect, contain, and remediate breaches promptly.

7. Your Rights

Under the PDPA and other applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correction of inaccurate or incomplete personal data.
• Withdrawal of consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Deletion of personal data where retention is no longer necessary (subject to applicable legal obligations).

To exercise any of these rights, contact us at support@ophieai.com. We will respond within a reasonable timeframe in accordance with the PDPA.

8. Data Protection Contact

For questions about this Privacy Policy, personal data requests, or privacy concerns, please contact our data protection team at support@ophieai.com.

9. Governing Law

This Privacy Policy is governed by the laws of the Republic of Singapore. By using the Service, you consent to the jurisdiction of the Singapore courts for any disputes arising under this Privacy Policy.