Privacy Policy

1. Introduction

Bebo Studio Pte Ltd ("we", "us", or "our") operates the Bebo Work platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the Personal Data Protection Act 2012 (PDPA) of Singapore and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, and contact details
• Business Data: Projects, tasks, financial records, client information, and documents you create or upload
• Payment Information: Billing address and payment method details (processed securely through our payment providers)
• Communications: Messages, support requests, and feedback you send us

2.2 Information Collected Automatically

• Usage Data: Features used, pages visited, and actions taken within the Service
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Access times, error logs, and referring URLs

2.3 Third-Party Integrations

When you connect third-party services (such as Gmail or calendar applications), we may receive information from those services as authorized by you. This data is used solely to provide the integration features you requested.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Power AI features to provide intelligent assistance and automation
• Send administrative notifications, updates, and security alerts
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience and develop new features
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. AI Processing

Bebo Work includes AI-powered features that process your data to provide intelligent assistance. This includes:

• Natural language understanding for task management
• Email analysis and categorization
• Content suggestions and automation
• Business insights and recommendations

AI processing is performed using Anthropic's Claude API. Your data is processed in accordance with Anthropic's privacy and security practices. We do not use your business data to train AI models.

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Secure authentication with password hashing
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Automated backups and disaster recovery procedures

Our primary data infrastructure is hosted on Supabase (Singapore region) and Vercel, both of which maintain comprehensive security certifications.

6. Third-Party Services

We use trusted third-party services to operate our platform:

• Supabase: Database and authentication (Singapore region)
• Vercel: Application hosting and deployment
• Anthropic: AI processing (Claude API)
• Payment Processors: Secure payment handling

These providers are bound by their own privacy policies and data processing agreements. We only share the minimum data necessary to provide the Service.

7. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication status
• Remember your preferences and settings
• Analyze usage patterns to improve the Service
• Ensure security and prevent fraud

You can control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of the Service.

8. Your Rights

Under the PDPA and applicable laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Withdrawal: Withdraw consent for data processing (where applicable)
• Portability: Request your data in a portable format
• Deletion: Request deletion of your personal data (subject to legal retention requirements)

To exercise these rights, contact us at privacy@bebo.work. We will respond to your request within 30 days.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination:

• Business data is retained for 30 days to allow account recovery
• Financial records are retained as required by law (typically 7 years)
• Anonymized analytics data may be retained indefinitely

You can request earlier deletion of your data by contacting us, subject to legal requirements.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your data may be processed in countries other than Singapore where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and data processing agreements that comply with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.