Privacy Policy

This Privacy Policy explains how Ailytics Pte Ltd (“Ailytics”, “we”, “our”, or “us”) collects, uses, discloses and safeguards Personal Data (as defined below). Section 14 explains the cookies and analytics tools used on our public website.

1. INTRODUCTION

Ailytics is Southeast Asia’s leading video analytics solution provider, dedicated to enhancing operational safety and productivity for industries such as construction, manufacturing, oil & gas, maritime and more. This Privacy Policy (the “Privacy Policy”) sets out how we collect, use, disclose and/or process Personal Data in compliance with the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore (“PDPA”) for the time being in force. Where our processing of Personal Data relies on consent, consent may be withdrawn at any time as set out in Section 9.

In the course of providing our services, Ailytics may act in different capacities in relation to Personal Data. When processing Personal Data solely on behalf of and under the instructions of our customers for the purpose of delivering customer-directed services (such as real-time safety monitoring and alerts), Ailytics acts as a data intermediary under the PDPA. When collecting, using, or retaining Personal Data for Ailytics’ own purposes (such as training, benchmarking, testing or improving our AI models), Ailytics acts as an organisation in its own right and will comply with applicable obligations under the PDPA, including obtaining consent or relying on a valid exception for such collection, use, or retention.

2. DEFINITIONS

“Personal Data” means data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which an organisation has or is likely to have access. Personal Data may include: (i) account and contact information, including name, email address, account credentials, user preferences, settings and support or enquiry details; (ii) images of individuals in video feeds, images, alerts and associated media files processed through Ailytics software and its web dashboard (“Ailyssa”); (iii) information about individuals captured in such video feeds, images and alerts and associated media files, including facial features, movement patterns, location at a monitored site and other contextual information; (iv) alert and device metadata (including camera, site, and group names; timestamps; and alert types); and information about access to and use of Ailyssa, where such information relates to an identifiable individual; and (v) information that we receive from third-party platforms, apps or providers (including agents, vendors, contractors, affiliates, partners and other third parties that collect Personal Data, perform functions on our behalf or with whom we collaborate) when our services rely on such platforms, apps or providers to perform their intended purposes or when Ailyssa is integrated with such platforms, apps or providers.

“Selected Training Data” means customer Personal Data selected by Ailytics for the purposes of training, benchmarking, testing, and improvement of Ailytics’ AI products and services, which may include images, video clips, and related metadata.

3. COLLECTION OF PERSONAL DATA

We collect or receive Personal Data, either:

• Directly, for example, from information and Personal Data provided through the use of Ailyssa; or
• Indirectly, based on interactions with the use of Ailyssa, through cookies or other technology, or from third parties, including our customers and advertising and marketing partners.

In each case, we collect such Personal Data only insofar as is necessary or appropriate to achieve the purposes of use described below. We do not disclose Personal Data for purposes or in a manner other than as prescribed in this Privacy Policy.

Personal Data of an individual should not be provided to us unless that individual’s prior consent to do so has been obtained and that individual has been informed that their Personal Data will be handled in accordance with this Privacy Policy (including where to find it).

4. PURPOSE AND USE OF PERSONAL DATA

We collect, use, disclose and/or process Personal Data for the following purposes:

• To collect information necessary to perform our contractual obligations, including but not limited to delivering our AI-driven video analytics insights via Ailyssa and providing our services;
• To give individuals access to, or allow individuals to create, an account on Ailyssa (the “Account”), for the purposes of allowing us to provide our services;
• To monitor usage trends, improve the features of our AI services and ensure the security of Ailyssa;
• To tailor and optimise user experience by remembering preferences and settings;
• To collect diagnostic data, performance metrics and feature usage to improve and optimise our services;
• To deal with and facilitate customer service, carry out or administer customer instructions, or respond to enquiries from customers;
• To generate invoices and for accounting and/or auditing purposes;
• To protect the personal safety, rights or property of others;
• To provide marketing materials, targeted advertising and content, or to send promotional information and materials relating to additional, improved or modified service offerings;
• To investigate or prevent actual or suspected violations of our End-User Licence Agreement (“EULA”), fraud, unlawful activity or misconduct;
• Any other purpose of which we may notify individuals from time to time, after obtaining consent to collect, use, disclose and/or process Personal Data.

When our video analytics solutions are used, we process video feeds, images and associated metadata (e.g., timestamps and sensor data) for customer-directed real-time safety monitoring, including generating and delivering alerts and associated media files to the relevant customer’s dashboard. In this context, Ailytics acts as a data intermediary processing Personal Data on behalf of and for the purposes of the customer. The video feeds and images may contain identifiable individuals and information about them, including but not limited to facial features or movement patterns captured within the video feed. Our AI models are designed to identify objects, equipment and activities rather than individual persons.

Separately, acting as an organisation in our own right, we may, for our own purposes, collect, retain and use Selected Training Data. Selected Training Data may contain Personal Data. We will only use such Personal Data where (a) consent has been obtained; or (b) a relevant customer has provided any required notification or reasonable access to information and has a valid legal basis, including any required consent or applicable exception, for disclosing the Personal Data to us for these purposes.

We may rely on the various exceptions under the PDPA for the collection, use or retention of such Personal Data for these purposes. If so, we will conduct and document the assessment required by the PDPA, including our assessment of likely adverse effects and the measures implemented to eliminate, reduce or mitigate them. Any questions about our reliance on the legitimate interests exception may be directed to our Data Protection Officer at support@ailytics.ai.

Individuals may opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting marketing@ailytics.ai. We do not use video feeds, images or other biometric data for marketing purposes.

5. HANDLING OF DATA FOR LEGAL PURPOSES

We may access, retain and disclose Personal Data and any information provided in the Account where such access, retention or disclosure is required or authorised under the PDPA or any other written law (including pursuant to an order of court or a lawful direction of any government or regulatory authority having jurisdiction over Ailytics), or where such access, retention or disclosure is necessary for any of the following purposes:

• complying with any applicable law, legal process, judgment or order of court;
• complying with a request from a governmental or regulatory authority;
• conducting any investigation into any breach or potential breach of the terms and conditions governing the use of the Account;
• responding to any actual or contemplated allegations, claims, demands and lawsuits against Ailytics; and
• any other purpose which we may notify you of from time to time and after obtaining your consent.

6. INTERNATIONAL TRANSFER OF DATA

To the extent necessary to achieve the purposes of use described above, we may provide Personal Data to our business partners, agents, vendors, contractors and affiliates and may outsource the processing of such information to any such parties for the purposes stipulated above. We shall take steps to ensure that, when transferring, storing or processing Personal Data outside Singapore, the Personal Data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

7. MANAGEMENT OF PERSONAL DATA

Third parties may unlawfully intercept or gain unauthorised access to Personal Data and/or account information transmitted to or from Ailyssa through no fault of Ailytics. Technologies may malfunction or not work as anticipated. We will nevertheless deploy reasonable security arrangements to protect Personal Data as required by laws and regulations; however, there can be no guarantee of absolute security, especially in relation to disclosures arising from malicious or sophisticated hacking through no fault of Ailytics. Ailytics makes no warranty and is not responsible for ensuring that Personal Data submitted to us is complete, accurate, true or correct. Failure to do so may result in our inability to provide any services requested and the Company shall not be liable for any loss, expense, damage or claim arising out of inaccurate Personal Data being provided to the Company through no default of its own. Ailytics may make use of public data obtained from publicly available sources at zero cost, including public datasets. Ailytics is not responsible for use of Personal Data that has entered or will subsequently enter the public domain unless this was caused by a breach of an agreement.

8. INFORMATION ON MINORS

Ailyssa is not designed for direct use by individuals who lack legal capacity to consent under applicable law. Where a customer deploys Ailyssa in a setting involving minors, the customer must ensure that all required notices have been provided and that valid consent has been obtained from each relevant parent or legal guardian, or that another legal basis under the PDPA or other applicable law applies, before any minor’s Personal Data is captured, disclosed to or processed by us through Ailyssa. We will process such Personal Data only for notified or legally permitted purposes, and will take reasonable steps to delete or cease processing Personal Data of a child under 13 if we become aware that it has been provided without valid consent or another lawful basis, unless retention or processing is required or authorised by law.

9. WITHDRAWAL, CORRECTION, ERASURE AND ACCESS TO PERSONAL DATA

Where our collection, use and/or disclosure of Personal Data is based on consent, the relevant individual may withdraw that consent at any time by contacting us as set out in Section 17. Applications to correct and/or access a copy of Personal Data in our possession or under our control may also be made by contacting us as set out in Section 17. We shall process such requests in accordance with this Privacy Policy and any other relevant legislation or applicable laws. Any withdrawal of consent will apply prospectively and will have no bearing on the lawfulness of processing before consent is withdrawn. Where processing is permitted or required by law on another basis, withdrawal of consent will not affect that processing. Where consent is withdrawn, we will provide information on the likely consequences of withdrawing consent, including where it may affect our ability to continue providing services.

Requests for us to provide copies of Personal Data in our possession or under our control may be made by the individual to whom that Personal Data relates in accordance with (and subject to) the PDPA and the relevant regulations made thereunder. If fees or costs are incurred as a result of any such application or request, the requesting individual shall be responsible for bearing all such fees and costs.

Requests for us to correct any Personal Data that is believed to be inaccurate or incomplete may be made by the individual to whom that Personal Data relates. We will consider each request in accordance with applicable law and make any correction required by applicable law without undue delay.

An individual may request that we delete or cease using the individual’s Personal Data by contacting us as set out in Section 17. We will consider each request in accordance with applicable law and may decline a request where retention or continued processing is required or permitted by law or is necessary for a legal or business purpose.

We reserve the right to reject a request to correct or delete Personal Data in accordance with data protection laws or any other applicable laws or regulations.

Before responding to any request to access, correct or delete Personal Data or withdraw consent, we shall require the relevant individual to verify their identity.

10. AGGREGATED OR ANONYMISED INFORMATION

We may share aggregated or anonymised information publicly with business partners like publishers, advertisers, developers or rights holders. Such information will be aggregated or anonymised so that it does not identify any individual. This may be done to highlight trends among individuals, amongst other things.

11. RETENTION OF PERSONAL DATA

We will only retain Personal Data for as long as it is required or permitted by law for the purposes for which such Personal Data was collected. Operational data, including alerts and associated media files processed solely for customer-directed services, is generally retained for the duration of the relevant project or service term and then deleted, subject to any legal requirement to retain it and the normal expiry of backup copies. Separately, Selected Training Data may be retained beyond the end of the relevant customer-directed services for as long as necessary for the purposes for which it was selected. We will periodically review Selected Training Data and delete or irreversibly anonymise it when it no longer serves those purposes or is no longer necessary for any legal or business purpose. Backup copies containing such Personal Data are generally overwritten within seven days after deletion from active systems.

12. THIRD PARTY LINKS AND WEBSITES

Ailyssa could contain links to third-party websites operated by other companies, such as affiliates or business partners. We are not responsible for the security of Personal Data on websites wholly operated by such third parties.

13. PASSWORDS

Some Personal Data can be accessed and amended through the Account, protected by a password. It is recommended that the password not be divulged to anyone. Our staff, personnel or agents will never ask for the password in an unsolicited phone call or email.

14. COOKIES AND WEBSITE ANALYTICS

Cookies are text files placed on computers to collect standard Internet log information and data about behaviour on websites. When individuals visit Ailyssa we may collect information about such individuals automatically through cookies or similar technology. For more information, visit allaboutcookies.org.

We use cookies to improve the user experience on Ailyssa, including but not limited to (i) keeping individuals signed in to the Account; (ii) gathering data on how individuals interact with and/or use Ailyssa; and (iii) automatically filling in user information on login.

Individuals may configure their browsers not to accept cookies. However, where cookies are blocked or restricted, individuals acknowledge and accept that some of our services and features may not function as a result.

Our public website

When individuals visit our public website, we use PostHog, an analytics service, to understand how the website is used and to improve it. PostHog stores this data on servers in the United States.

PostHog may collect:

• the pages viewed, how long they were viewed, and the website or link that led to the visit;
• clicks, scrolling and other interactions with our pages, including heatmaps of where visitors click;
• recordings of browsing sessions that show how pages were used. Text typed into form fields is masked and is not included in these recordings;
• device and browser information, such as browser type, operating system and screen size, and an approximate location based on the IP address; and
• a record when someone clicks a link to our contact page or submits our contact, partnership or job application form, including the role applied for. The contents of these forms are not sent to PostHog.

PostHog places a cookie and a local storage entry in the browser so it can recognise a returning visitor. The cookie expires after 12 months unless it is deleted sooner. PostHog keeps analytics data for 1 year and session recordings for 30 days.

Our website also keeps a short visit history in the browser’s local storage. It records the website that referred the visitor, the first page visited and any campaign tags in that link (such as “utm_source”), and the last five pages viewed on our website. The history is reset after 90 days. It stays in the browser unless the individual submits our contact or partnership form, in which case it is sent with the enquiry so that we know how the individual found us.

Individuals can block or delete cookies and local storage in their browser settings. This stops our website from recognising a returning visitor and from keeping the visit history described above. To stop analytics data from being sent to PostHog, individuals can use a browser setting or extension that blocks analytics scripts. Our website, including its forms, continues to work in either case.

15. POLICY UPDATES

We may, in our sole discretion, amend or update this Privacy Policy from time to time. Changes deemed significant in our sole and absolute discretion will be communicated through our website or by email, together with an updated effective date.

16. ENFORCEABILITY

Without prejudice to an individual’s rights under the PDPA, nothing in this Privacy Policy shall create or confer any legally enforceable right whether by way of contract, tort, equity or otherwise under the law.

17. CONTACT INFORMATION

Any queries, requests, notices or complaints relating to this Privacy Policy or our collection, use or disclosure of Personal Data may be directed to us at:

Phone: +65 6859 4780

Ailytics Pte Ltd

81 Ayer Rajah Crescent, #03-48

Singapore 139967

Email: support@ailytics.ai