Our commitment to protecting your privacy

Stripe

Our Shopify apps use Stripe as the payment processor. The payment is handled directly by Shopify, and we only receive the funds. Stripe’s privacy policy can be found at https://stripe.com/privacy.

Jira Service Management and Slack

We use Jira Service Management for managing support inquiries. Data submitted through Jira is processed and shared with Slack for support staff notifications. Jira and Slack employ sub-processors for infrastructure services and support.

• Jira Service Management Privacy Policy:
• https://www.atlassian.com/legal/privacy-policy
• Slack Privacy Policy: https://slack.com/intl/en-sg/trust/privacy/privacy-policy

Amazon Web Services (AWS)

We use Amazon Web Services (AWS) for hosting our email servers and general servers. AWS processes and stores data on our behalf in their data centers, some of which are located outside of Singapore. AWS ensures appropriate security measures are in place for international data transfers in compliance with applicable laws and regulations. AWS implements technical and organizational security measures in accordance with industry standards such as ISO 27001, 27017, and 27018. We have data processing agreements and standard contractual clauses in place with AWS to ensure the protection of your data.

• AWS Privacy Notice: https://aws.amazon.com/privacy/
• AWS Data Privacy FAQ: https://aws.amazon.com/compliance/data-privacy-faq/

Raidboxes

We use Raidboxes, located in Germany, for website hosting services. Raidboxes complies with GDPR requirements for data processors, ensuring a high standard of data protection and security. This includes implementing strong encryption methods, strict access controls, and data minimization practices. Raidboxes also provides GDPR-compliance. Their privacy policy can be found at https://raidboxes.io/legal/privacy-policy/

Borlabs Cookie

We use the Borlabs Cookie Consent Manager to obtain user consent for the use of cookies and cookie-based applications. Borlabs processes data in accordance with GDPR standards, ensuring user privacy and data protection. Borlabs implements robust security measures, including data encryption and user consent logs, to safeguard personal data. More information can be found in their privacy policy: https://borlabs.io/privacy-policy/

GetResponse

We use GetResponse, an email marketing platform, for collecting email addresses through sign-up forms on our website, sending newsletters and notifications about app releases or updates, categorizing leads based on app interests or customer status, and sending targeted notifications to specific lead categories. Data is transferred to GetResponse servers in the USA. GetResponse implements security measures in accordance with GDPR standards, and we have a data processing agreement in place with them. Users have the rights to access, rectify, erase, restrict processing, and object to the processing of their data.
– GetResponse Privacy Policy: https://www.getresponse.com/legal/privacy

Google Analytics

We use Google Analytics to analyze website usage and improve performance. Google Analytics collects data such as your IP address, location, browser type, and pages visited. This data is used to analyze trends, track user movements, and gather demographic information. Users can opt-out of Google Analytics data collection through browser settings or plugins. The cookie consent manager also assists with opt-out options.

• Google Analytics Privacy Policy: https://policies.google.com/privacy

Google Analytics stores the collected data on servers located in various countries, including the United States. To ensure a level of protection comparable to the PDPA, Google implements the following measures:

• General Data Protection Regulation (GDPR): Google Analytics is GDPR-compliant, ensuring a high level of data protection similar to the PDPA.
• EU-US Privacy Shield: Although the Privacy Shield agreement has been invalidated, Google continues to provide a similar level of protection for data transfers.
• Standard Contractual Clauses (SCCs): Google uses SCCs for international data transfers, approved by the European Commission to provide adequate protection.
• Data Encryption: Google employs strong encryption methods to protect data during transmission and storage.
• Access Controls: Google implements strict access controls to prevent unauthorized access to the collected data.
• Data Minimization: Google Analytics offers data minimization features, such as IP anonymization and limited retention periods.
• User Rights: Google provides users with the ability to access, correct, or delete their data, similar to the rights provided by the PDPA.

Facebook Pixel

We use Facebook Pixel for marketing and ad optimization. Facebook Pixel tracks website interactions and collects data for marketing purposes. Data is transferred to Meta Platforms Inc. in the USA, which is certified under the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework.

• Facebook Privacy Policy: https://www.facebook.com/privacy/policy
• Facebook Data Policy: https://www.facebook.com/about/privacy

Microsoft Azure

We use Microsoft Azure for providing AI services, and other cloud computing services. Azure processes and stores data on our behalf in accordance with data processing agreements and standard contractual clauses. Microsoft ensures appropriate security measures for international data transfers and treats your data confidentially.

• Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement
• Online Services Terms: https://www.microsoft.com/licensing/terms/product
• Azure Trust Center: https://azure.microsoft.com/en-us/overview/trusted-cloud/

By using our services, you consent to the processing of your data by these third-party service providers in accordance with their respective privacy policies. We ensure that appropriate data processing agreements, standard contractual clauses, and security measures are in place to protect your data and comply with applicable data protection laws and regulations, such as the GDPR and the PDPA.