Privacy Policy

Last updated: May 2025

AbstractAI Pte. Ltd. (UEN 201938472A), registered at 1 Raffles Place, #20-61 One Raffles Place, Singapore 048616 ("AbstractAI", "we", "us", or "our"), is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore and guidelines issued by the Personal Data Protection Commission ("PDPC").

This Privacy Policy explains what personal data we collect, how we use it, whom we share it with, and your rights regarding your data. By using our website at abstractai.pro or submitting an enquiry, you acknowledge that you have read and understood this policy.

1. Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact data: full name, email address, phone number, company name, job title, and postal address when you submit an enquiry or contact us.
• Enquiry details: solution of interest, preferred consultation date, team size, budget range, and message content provided through our contact form.
• Technical and usage data: IP address, browser type, device information, pages visited, time spent on pages, referring URLs, and interaction patterns collected through cookies and similar technologies.
• Communication records: correspondence, meeting notes, and call records when you interact with our team.
• Marketing preferences: your consent status and communication preferences where applicable.

2. How We Collect Personal Data

We collect personal data through:

• Direct submission via our contact form at /contact.php
• Email, telephone, or in-person communications
• Automated technologies such as cookies, web beacons, and analytics tools when you browse our website
• Business events, referrals, and professional networking in Singapore and APAC

3. Purposes of Collection and Use

We collect and use your personal data for the following purposes:

• Responding to your enquiries and providing information about our AI consulting services
• Preparing proposals, quotations, and scope documents for potential engagements
• Scheduling and conducting consultations, workshops, and advisory sessions
• Improving our website, services, and user experience through analytics
• Complying with legal and regulatory obligations under Singapore law
• Sending marketing communications about our services, where you have provided consent or where permitted under the PDPA
• Maintaining business records and managing client relationships

4. Legal Basis for Processing

Under the PDPA, we rely on the following bases for processing your personal data:

• Consent: where you have voluntarily provided your data through our contact form or opted in to marketing communications.
• Legitimate interests: to respond to enquiries, improve our services, and operate our business, provided these interests are not overridden by your data protection rights.
• Legal obligation: where processing is required to comply with applicable laws, regulations, or court orders in Singapore.
• Contractual necessity: where processing is necessary to perform a contract or take steps at your request before entering into a contract.

5. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: required for basic site functionality, including cookie consent preferences stored in localStorage.
• Analytics cookies: help us understand how visitors interact with our website, including pages viewed and time spent.
• Preference cookies: remember your settings and choices to provide a personalised experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. By clicking "Accept" on our cookie banner, you consent to our use of cookies as described in this policy.

6. Disclosure to Third Parties

We may share your personal data with the following categories of third parties, strictly for the purposes described in this policy:

• Service providers: hosting providers, email delivery services, analytics platforms, and CRM systems that process data on our behalf under contractual data protection obligations.
• Professional advisers: legal, accounting, and audit firms where necessary for business operations.
• Implementation partners: where you have engaged us for services that require handoff to a third-party implementation firm, and only with your knowledge or consent.
• Regulatory authorities: where required by law, regulation, or legal process in Singapore.

We do not sell your personal data to third parties. Where personal data is transferred outside Singapore, we ensure that the recipient provides a standard of protection comparable to that under the PDPA.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Enquiry data: retained for up to 24 months from last contact, unless a business relationship is established.
• Client data: retained for the duration of the engagement plus 7 years for legal and accounting purposes.
• Marketing data: retained until you withdraw consent or request deletion.
• Analytics data: aggregated and anonymised data may be retained indefinitely; identifiable data retained for up to 26 months.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, secure hosting environments, and staff training on data protection practices.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

9. Your Rights Under the PDPA

Under the PDPA, you have the following rights regarding your personal data:

• Access: request access to personal data we hold about you.
• Correction: request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: withdraw consent for processing where consent is the basis, subject to legal and contractual restrictions.
• Data portability: request a copy of your data in a commonly used format, where technically feasible.
• Limit processing: request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days as required under the PDPA.

10. Do Not Call Registry

If your telephone number is registered with the Do Not Call (DNC) Registry under the PDPA, we will not send you marketing messages via phone, text, or fax unless you have provided clear and unambiguous consent or have an ongoing business relationship with us as permitted under the DNC provisions.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

AbstractAI Pte. Ltd.
1 Raffles Place, #20-61 One Raffles Place
Singapore 048616
Email: [email protected]
Phone: +65 6812 3847

13. Supervisory Authority

If you believe your personal data has been handled in breach of the PDPA, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.