Privacy Policy
Last Updated: 01 October 2025
This Privacy Policy describes how Invent.sg collects, uses, discloses, stores, and protects personal data in connection with your use of our services. This policy is incorporated into and forms part of our Terms of Service.
Your use of the Service constitutes agreement to this Policy.
1. Definitions
- Personal Data / Personal Information: Data about an identifiable natural person.
- Account Data: Registration or profile data (e.g. name, email).
- Usage / Technical Data: Log files, device info, IP address, browser, timestamps.
- Input Content: Materials, data, files, designs, documents you submit or upload.
- Output Content: Results, drafts, analysis, reports generated by the Service from your Input Content.
- Confidential Content: Input Content designated by you as confidential (e.g. prior art, existing patent drafts).
- PDPA: Personal Data Protection Act 2012 (Singapore).
2. Accountability & Data Protection Officer
We are responsible for the personal data we collect and process. We have appointed a Data Protection Officer (DPO) to oversee our data protection practices.
You may reach out to our DPO for inquiries, complaints, or data access requests via our contact page.
3. Purposes of Collection, Use & Disclosure
We collect, use, and disclose personal data for the following primary purposes:
- Service Provision: Account registration and management; Processing Input and generating Output; Feature access and collaboration
- Billing & Payments: Payment processing and invoices; Subscription management; Fraud detection
- Communications: Service announcements and updates; Support requests; Security alerts
- Analytics & Improvement: Usage analytics; Performance monitoring; AI model training (anonymized)
4. Types of Personal Data Collected
- • Account Data: name, email address, username, password (hashed)
- • Contact Data: address, phone number (if provided)
- • Payment Data: billing address, payment method details (handled via third-party)
- • Technical / Usage Data: IP address, device identifiers, browser, logs, access times
- • Input Content Data: files, documents, drawings, text, uploads
- • Communications Data: messages, support tickets, feedback
5. Consent & Withdrawal
We collect and process your Personal Data with your consent (explicit or implied), or when legally permitted (e.g. for service performance).
You may withdraw your consent at any time by contacting us or via account settings. Please note that withdrawal of certain consent may limit or disable features or your ability to use the Service.
6. Use of Confidential Content & Model Training
Confidential Content (designated by you) will not be used to train or improve AI models unless you explicitly consent.
For non-confidential Input/Output Content, we may use anonymized or aggregated versions for model training, improvement, and analytics, subject to safeguards and the opt-out choices you make.
7. Disclosure to Third Parties
We may disclose your Personal Data to:
- • Service Providers / Processors: e.g. cloud providers, payment processors, email services
- • Legal / Regulatory Authorities: when required by law or in defense of rights
- • Business Transfers: in case of merger, acquisition, or sale (with confidentiality protections)
We require third parties to adhere to confidentiality and data protection obligations no less stringent than this Policy.
8. Cross-Border Transfers
If we transfer your Personal Data outside Singapore (e.g. to cloud servers or external AI service providers), we will ensure that the recipient ensures protection standards comparable to PDPA (e.g. via contractual obligations). We will inform you in advance and obtain consent where required.
9. Data Retention & Deletion
We retain Personal Data only as long as necessary to fulfill the purposes, or to comply with legal, regulatory, or business obligations.
- • Upon account deletion or request, we will delete or anonymize data, except for archival backups required by law.
- • Accounts inactive for 90 days may be archived; accounts inactive for 1 year or more may be deleted, after notice.
- • Logs and operational data may be retained for a limited time for security, diagnostics, or compliance.
10. Security Measures
We implement reasonable technical and organizational measures to protect personal data, including:
In case of a data breach, we will notify affected users and relevant authorities in accordance with PDPA.
11. User Rights & Data Subject Requests
Under the PDPA, you have rights to:
- • Access your Personal Data
- • Correct inaccurate or incomplete data
- • Delete data or withdraw consent (subject to legal restrictions)
- • Request portability (where applicable)
- • Object to or limit processing (if profiling / marketing involved)
To exercise these rights, contact us via our contact page. We may require identity verification and will respond within a reasonable timeframe (e.g. 30 days) or inform you of extension.
12. Cookies & Tracking Technologies
We use cookies, web beacons, local storage, and similar technology to collect usage data, remember preferences, analyze user behavior, and support functionality.
You may disable or restrict cookies via browser settings, but some features may not function properly. Upon first visiting the site, a cookie notice or preference center may appear.
13. Children & Minors
The Service is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from minors. If we discover data from a minor, we will promptly delete it.
14. Changes to This Privacy Policy
We may update this Policy from time to time (e.g. for new features, legal changes). We will provide notice (via email or platform) before changes take effect. Continued use of the Service after updates means you accept the revised Policy.
15. Contact & Complaints
If you have questions, complaints, or requests regarding this Policy or your Personal Data, contact us via our contact page.
You may also lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore if our handling is not compliant with PDPA.