Privacy Policy

1. Introduction

BuyWhere Pte. Ltd. ("BuyWhere", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and API services. We comply with Singapore's Personal Data Protection Act 2012 (PDPA).

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and company name when you register
• Usage data: API query logs, query content, response metadata, and access timestamps
• Billing information: Payment method details (processed by our payment provider; we do not store card numbers)
• Technical data: IP addresses, browser type, and device information
• Communications: Messages you send us via contact forms or email

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the BuyWhere API and website
• Process payments and manage your subscription
• Monitor usage for quota enforcement and fraud prevention
• Send service-related communications (account alerts, billing notices)
• Provide customer support
• Comply with legal obligations

4. API Query Data

Query content sent to our API (e.g., product search terms) may be logged for up to 90 days for debugging, abuse prevention, and service improvement. We do not use query content to identify individual users or sell it to third parties. Enterprise customers may request data processing agreements with custom retention terms.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Payment processors, cloud hosting providers, and analytics tools that help us operate the Service
• Legal authorities: When required by law, court order, or to protect the rights and safety of our users
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. API keys are hashed and never stored in plaintext. Despite these measures, no system is completely secure — please protect your API keys and notify us immediately of any suspected breach.

7. Data Retention

We retain your account data for as long as your account is active. Usage logs are retained for 90 days. Billing records are retained for 7 years as required by Singapore law. You may request deletion of your account data at any time (subject to legal retention requirements).

8. Your Rights (PDPA)

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Withdraw consent for optional processing
• Request deletion of your data (subject to legal obligations)

To exercise these rights, contact us via our contact page.

9. Cookies

Our website uses essential cookies for authentication and session management. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this may affect functionality.

10. International Transfers

Your data may be processed in countries outside Singapore where our service providers operate. We ensure such transfers comply with the PDPA's requirements for cross-border data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy inquiries or to exercise your PDPA rights, contact our Data Protection Officer via our contact page.

BuyWhere Pte. Ltd.
Singapore