Privacy Policy

Last updated: 15 July 2026

1. Who we are

VBCreation Pte. Ltd. (UEN 202620906D), registered at 160 Robinson Road #14-04, Singapore 068914, is the Data Controller for the personal data we collect and process through this site.

2. What data we collect

  • Identification data: name, email, phone, company name (contact form)
  • Technical data: IP address, browser type, device information
  • Usage data: pages visited, interactions, preferences (analytics)
  • Communication data: emails, chatbot exchanges, feedback
  • Order and billing data: name, email, billing address and information, transaction identifiers and status
  • AI SaaS Study data: project description, sector, budget, and generated deliverable

3. Why we collect data (legal basis)

  • Performance of a contract or pre-contractual steps: processing orders, generating and delivering the AI SaaS Study, responding to commercial inquiries
  • Legitimate interest (analytics, security, fraud prevention)
  • Legal obligation (accounting, tax records)
  • Consent (advanced analytics, non-essential cookies)

4. Who we share data with

  • Hosting: Cloudflare, Inc.
  • Advanced analytics: Microsoft Clarity (heatmaps, sessions, user journeys) — Microsoft Corporation, subject to consent via the cookie banner
  • Basic analytics: Cloudflare Web Analytics (cookie-less, aggregated)
  • Email: Proton Mail (Proton AG, Switzerland)
  • Payments and billing: Stripe Payments Singapore Pte. Ltd. — billing details, payment identifiers, transaction status, and fraud-prevention data
  • Transactional emails and contact messages: Resend, Inc. — recipient address and message content
  • Chat assistant and request validation: Groq, Inc. — instructions, conversation history, and context needed to respond
  • AI SaaS Study generation: Anthropic, PBC — project description and content needed to generate the deliverable

5. International data transfers

Depending on the service used, data may be processed outside Singapore in countries where these providers operate. The applicable transfer mechanism depends on the provider and current contract; no single contractual safeguard is asserted for every data flow. You may request the applicable information at [email protected].

6. Data retention

  • Accounting and tax records: at least 5 years from the relevant Year of Assessment where IRAS requirements apply; longer only where another legal obligation or a dispute requires it
  • Marketing data: until consent withdrawal
  • Technical and security logs: retained only as long as needed for operations and security under the periods configured with each provider, then deleted or anonymized

7. Your rights

Under PDPA (Singapore) and GDPR (EU), you have the following rights:

  • Right of access to your personal data
  • Right to correction of inaccurate data
  • Right to deletion (right to be forgotten)
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the regulator

To exercise your rights, contact: [email protected]

8. Security

We implement appropriate technical and organizational measures: HTTPS/TLS encryption, access controls, regular backups, and incident response procedures.

9. Cookies

  • Essential cookies: language preference, theme, consent (no tracking)
  • Analytics cookies (with consent): Microsoft Clarity for heatmaps and sessions

You can manage your preferences via the cookie banner or your browser settings.

10. Children's data

We do not knowingly collect data from individuals under 16 years old. Any data collected by mistake will be deleted promptly.

11. Data breach notification

Where a breach is notifiable under the PDPA, we will notify the PDPC no later than 3 calendar days after determining that it is notifiable. Affected individuals will be notified as soon as practicable where that notification is required.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new date. Continued use of the site constitutes acceptance.

13. Contact

DPO email: [email protected]

Postal: VBCreation Pte. Ltd., 160 Robinson Road #14-04, Singapore 068914

14. Regulatory complaints