Privacy Policy

SOLARAI PTE. LTD. (UEN 202614541H) (“SOLARAI”, “we”, “us”) is a Singapore-based design and technology studio operating the website solarai.asia and providing software, platform, and communication services to our clients. For anything in this policy, you can reach our Data Protection Officer at dpo@solarai.asia.

We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”).

This policy applies to personal data we collect through:

• the solarai.asia website;
• our business communications, including messages exchanged with our official WhatsApp business number via the WhatsApp Business Platform;
• our work with clients and their teams in the course of providing our services.

Platforms we build and operate on behalf of clients are governed by those clients’ own privacy policies; in those cases we act on our client’s instructions.

Data you give us. Your name, email address, phone or WhatsApp number, company and role, and the contents of messages, calls, and documents you share with us.

Data collected automatically. Our hosting infrastructure keeps standard server logs (such as IP address, browser type, and pages requested) for security and service delivery. The website does not currently use analytics, advertising, or tracking cookies.

Data from WhatsApp messaging. If you message our business number or opt in to receive messages from us: your WhatsApp number, profile name, message content, delivery and read metadata, and your opt-in and opt-out records.

We use the WhatsApp Business Platform, provided by Meta, to communicate with people who contact us and with contacts who have opted in — for example to receive meeting, document, or invoice reminders relating to an ongoing project.

• Business-initiated messages are sent only with your prior consent and use message templates where required by WhatsApp’s rules.
• You can stop receiving messages at any time by replying “STOP” or by emailing us — we honour opt-outs promptly and keep a record of them.
• We do not send marketing messages to Singapore telephone numbers except in compliance with the PDPA’s Do Not Call provisions and with clear consent.
• Messages are transmitted through Meta’s infrastructure. Meta’s handling of WhatsApp data is described in the WhatsApp Privacy Policy.

Some of our replies, summaries, and reminders are prepared with the help of AI systems that we operate. Consequential communications — such as anything concerning payments — are reviewed and approved by a member of our team before they are sent, and approvals are logged. Financial figures in our messages are taken from our records, never generated by AI.

Our AI providers process data solely to provide the service to us and are not permitted to use your messages to train their general-purpose models.

• to respond to your enquiries and provide our services;
• to coordinate projects — scheduling, task follow-ups, document sharing, and invoicing;
• to send reminders and updates you have opted in to receive;
• to keep our systems secure and prevent abuse;
• to comply with legal and accounting obligations.

We rely on your consent, the necessity of performing our agreements with you, and other bases recognised by the PDPA. We do not sell personal data.

We share personal data only with service providers that help us operate, under appropriate protections:

• Meta Platforms, for transmission of WhatsApp messages;
• cloud hosting and infrastructure providers for our website and systems;
• the productivity, scheduling, and accounting platforms we use to run our business;
• professional advisers, and authorities where the law requires it.

Some providers store data outside Singapore. Where personal data is transferred overseas, we take steps required by the PDPA to ensure it receives a standard of protection comparable to the PDPA’s.

We keep personal data only as long as it is needed for the purposes above or as required by law. Records of consent, opt-outs, and message approvals are retained for accountability, after which data is deleted or anonymised.

We protect personal data with encryption in transit, access controls, audit logging, and least-privilege access for our team. No system is perfectly secure, but we design ours so that sensitive actions leave a trail.

Under the PDPA you may:

• request access to the personal data we hold about you and information about how it has been used or disclosed;
• request correction of inaccurate data;
• withdraw consent to our collection, use, or disclosure of your data, with reasonable notice.

Write to dpo@solarai.asia and we will respond within the timelines required by the PDPA.

To request deletion of your personal data — including WhatsApp conversation history held in our systems — email dpo@solarai.asia with the subject “Data deletion request” from the address or number concerned, or include it in your message. We will confirm receipt, verify the request, and delete data we are not legally required to retain, normally within 30 days.

• Our services are directed at businesses and are not intended for minors.
• Our website may link to third-party sites whose privacy practices we do not control.
• We may update this policy from time to time; the effective date above always reflects the current version.

Questions or complaints: contact our Data Protection Officer at dpo@solarai.asia. If you are unsatisfied with our response, you may contact Singapore’s Personal Data Protection Commission.