1. Who we are

Minloq Pte. Ltd. (UEN 202615062H), 73 Ubi Road 1, #09-51, Singapore 408733, operates the Minloq platform accessible at minloq.sg. We are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

2. Data we collect

We collect information you provide when signing up and using the platform, including your name, email address, company name and UEN; financial documents uploaded to the platform (bank statements, invoices, receipts); the content of messages you send to the platform via WhatsApp; and usage data such as log files and session information.

Documents you submit may contain personal data belonging to your staff, customers and suppliers. Where you use our corporate-secretarial, know-your-client or payroll features, we may collect identification data including NRIC or FIN numbers and other categories set out in our Data Processing Agreement, which also states which services are active and which are not yet released.

3. How we use your data

Your data is used solely to provide the Minloq service — to process documents, generate compliance outputs and operate the platform. We do not sell your data to third parties. We do not use your data to train third-party or foundation AI models. Where the platform improves its suggestions based on your own prior categorisations, that learning is applied only within your own account.

4. Data storage and security

Your books, uploaded documents and primary AI processing are stored and processed in Singapore (Supabase Singapore region; Amazon Web Services ap-southeast-1; application serverless functions in Vercel's Singapore region). Certain ancillary services — transactional email, subscription billing, SMS verification codes, rate limiting, and WhatsApp message transport — are operated by global providers that process limited data outside Singapore; these are listed in Schedule A of our Data Processing Agreement. Each subscriber's data is isolated using row-level security. Access is restricted to authorised personnel only. Documents are stored in private, access-controlled storage.

5. Data retention

We retain your data for as long as your account is active or as required by Singapore law. You may request deletion of your account and associated data at any time by emailing hello@minloq.sg. We will process deletion requests within 30 days, subject to any retention required by law — including statutory accounting and tax record-keeping obligations, which under IRAS guidance are generally five years and which may override a deletion request. Our platform uses a soft-delete model that preserves the audit trail and does not hard-delete accounting records.

6. Third-party processors

We use the third-party processors listed in Schedule A of our Data Processing Agreement, which is the authoritative and current list. It covers document processing and storage, database and file storage, application hosting, WhatsApp messaging, transactional email, subscription billing, SMS verification, rate limiting, and website form handling. Each entry states its purpose and processing location. All processors are engaged under appropriate data protection terms.

7. Your rights

Under the PDPA, you have the right to access personal data we hold about you, correct inaccurate personal data, and withdraw consent for data processing (subject to legal or contractual restrictions). To exercise these rights, contact us at hello@minloq.sg.

8. Cookies

We use only essential cookies necessary to operate the platform (session management and authentication). We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Each version carries a version number and effective date. Where a change is material, we will ask you to review and accept the updated policy when you next sign in to the platform, and we will record your acceptance.

10. Contact

For any privacy-related queries or to exercise your rights, contact our Data Protection Officer at hello@minloq.sg.