Privacy Policy

This Privacy Policy explains how Standardise Pte. Ltd. (UEN 202630608Z) (“Standardise”, “we”, “us”) collects, uses, discloses and protects personal data in connection with our website and the Standardise platform (the “Service”), in accordance with applicable data protection laws.

What this Policy covers. This Policy covers personal data for which we determine the purposes of collection and use – for example, your account details, billing information, communications with us, and data about how you use the Service.

What this Policy does not cover. Documents and other materials that you or your organisation upload to the Service (“Customer Data”) may contain personal data of your clients, opposing parties, witnesses or other individuals. We process that personal data only on your organisation’s behalf and instructions, as a processor or data intermediary. Our handling of Customer Data is governed by our Terms of Service (in particular the clauses on Customer Data, confidentiality and security, and our Data Processing Agreement), not by this Policy. Responsibility for that personal data under applicable data protection laws remains with your organisation.

We collect the following categories of personal data:

1. (a)Account and profile data: your name, business email address, firm or organisation name, position, and login details;
2. (b)Billing data: billing contact details and transaction records (payment card details are collected and processed by our payment provider, not stored by us);
3. (c)Communications: correspondence, support requests and feedback you send us;
4. (d)Usage data: information about how the Service is used, such as features accessed, actions performed and performance metrics, which may be linked to your account but does not include the content of Customer Data; and
5. (e)Marketing data: your subscription preferences if you opt in to our mailing list.

We collect this data directly from you, automatically when you use the Service, or from your organisation when it sets up your access as an authorised user. Account and profile data, and billing data where a subscription is purchased, are required: without them we cannot provide you with the Service or an account. Providing all other personal data is voluntary, although some features (such as support or marketing communications) may not be available without it.

We use personal data to: (a) provide, operate and support the Service, including account administration and authentication; (b) process payments and manage subscriptions; (c) communicate with you about the Service, including service updates and security notices; (d) send marketing communications where you have opted in (you may unsubscribe at any time); (e) monitor, secure and improve the Service, including diagnosing technical issues; and (f) comply with our legal and regulatory obligations.

By providing your personal data to us, or using the Service, you consent to our collection, use and disclosure of that data for the purposes in this Policy. In some cases we rely on other lawful bases permitted under applicable data protection laws, such as where processing is necessary to perform a contract with you, to comply with a legal obligation, or for our legitimate interests in operating and securing the Service.

Marketing consent is always sought separately and is optional – it is never a condition of using the Service.

Withdrawal. You may withdraw any consent by contacting our Data Protection Officer (“DPO”) or, for marketing, by using the unsubscribe link in any message. We will explain the likely consequences of a withdrawal – for example, that we may no longer be able to provide you with the Service or an account.

We do not sell personal data. We disclose personal data only: (a) to the service providers described in clause 5.2, to the extent needed for them to provide their services to us; (b) within your organisation, to its administrators, in connection with managing your access; (c) where required by law, regulation or court order; and (d) to a successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy.

Service providers. We use a small number of providers to run the Service, each bound by contractual obligations to protect personal data, in the following categories: cloud hosting, storage and authentication; email delivery; and payment processing. The sub-processors that process personal data contained in Customer Data on your organisation’s behalf are listed in our Data Processing Agreement.

You acknowledge that personal data covered by this Policy may be transferred to us in Singapore, and that limited personal data (such as account or email data) may be processed by our service providers in the locations in which they provide their services, in order to provide the Service for the purposes set out in this Policy. Where personal data is transferred to a recipient outside Singapore (or outside any other jurisdiction whose data protection laws apply to that data), we will ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that under the data protection laws applicable to such data, including standard contractual clauses or other appropriate contractual safeguards.

We retain personal data only for as long as it is needed for the purposes in this Policy or to meet legal, accounting or reporting requirements. Account data is retained while your account is active and for a reasonable period afterwards; billing records are retained as required by law; and marketing data is retained until you unsubscribe or withdraw consent. When personal data is no longer needed, we delete or anonymise it.

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, loss or similar risks, including encryption in transit and at rest, access controls and logging. No system is completely secure, and we cannot guarantee absolute security, but we will notify affected individuals and the relevant data protection authority of any data breach where required by applicable law.

Depending on where you are located, you may have rights under applicable data protection laws to: (a) request access to the personal data we hold about you and information about how it has been used or disclosed; (b) request correction of any error or omission; (c) withdraw consent as described in clause 4.3; (d) opt out of marketing at any time; and (e) exercise any other rights available to you under applicable data protection laws. To exercise these rights, contact our DPO. We will respond as soon as reasonably possible and within any timeframes required by applicable law. We may charge a reasonable fee for access requests where permitted.

Our website and the Service use cookies and similar technologies that are necessary for the Service to function (such as keeping you signed in) and to understand how the Service is used. You can manage cookies through your browser settings, though disabling necessary cookies may affect how the Service works.

Our website or the Service may contain links to third-party sites. This Policy does not apply to those sites, and we are not responsible for their privacy practices.

We may revise this Policy from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Policy was last updated. Your continued use of the Service constitutes your acknowledgement and acceptance of such changes.

Questions, requests or complaints about personal data may be directed to our Data Protection Officer at legal@standardise.com.

Application. This Schedule applies only while you participate in our closed beta programme, which runs from 12 August 2026 to 30 September 2026 (the “Beta Period”, consistent with our Terms of Service). After the Beta Period, this Schedule will be removed from this Policy without further notice and will cease to apply; the remainder of this Policy continues in full.

Additional data during the Beta Period. In addition to the categories in clause 2.1, we collect the feedback you provide on the Service during the Beta Period, and we use it to market, evaluate and improve the Service. Where feedback is used or shared, it is anonymised unless you consent otherwise.