Privacy Policy

1. Overview

SyncLife Tech Pte Ltd ("we", "us") is committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use SyncBooks SG.

2. Data We Collect

We collect the following categories of personal and business data:

• Account data: Email address, password (hashed, never stored in plain text)
• Business data: Company name, UEN, registered address, GST registration number, financial year end
• Contact data: Company phone number, company email, director name
• Banking data: Bank name, account name, account number, bank code, branch code, SWIFT code (used for invoice generation only)
• Financial records: Invoices, expenses, payroll records, operation fees that you input into the system
• Payment data: Processed securely via Stripe. We do not store your card details on our servers.
• Usage data: Login times, feature usage, browser type (for service improvement)

3. How We Use Your Data

We use your data to:

• Provide and operate the SyncBooks SG service
• Generate invoices, reports, and compliance reminders on your behalf
• Process subscription payments via Stripe
• Send transactional emails (invoices, receipts, compliance reminders)
• Improve the platform based on usage patterns
• Comply with Singapore legal and regulatory obligations

We do not use your financial data for marketing profiling or sell it to any third party.

4. Data Sharing

We share data only with the following trusted service providers who are bound by data protection obligations:

• Supabase — cloud database and authentication hosting
• Stripe — payment processing
• Email service providers — transactional email delivery

We may also disclose your data if required to do so by Singapore law, court order, or government authority.

5. Data Retention

We retain your account and financial data for as long as your subscription is active, plus 5 years thereafter to meet IRAS record-keeping requirements. If you request account deletion, we will delete your personal data within 30 days, subject to any legal retention obligations.

6. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Hashed and salted password storage via Supabase Auth
• Row-level security — each user can only access their own data
• Private storage buckets for uploaded documents

No system is completely secure. In the event of a data breach that affects your personal data, we will notify you as required under the PDPA.

7. Your Rights Under PDPA

As a data subject under Singapore's PDPA, you have the right to:

• Request access to the personal data we hold about you
• Request correction of any inaccurate personal data
• Withdraw consent for collection or use of your personal data (this may affect your ability to use the service)
• Request deletion of your account and associated data

To exercise any of these rights, email us at hello.synclifetech@gmail.com.

8. Cookies

SyncBooks SG uses essential session cookies to maintain your logged-in state. We do not use third-party advertising cookies or tracking pixels.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you via email at least 14 days before material changes take effect.

10. Contact Us

SyncLife Tech Pte Ltd
412 Bukit Batok West Avenue 4, #16-314, Singapore 650412
Email: hello.synclifetech@gmail.com