Legal
Privacy Policy
Last updated: 25 September 2026
How DEHA GLOBAL PTE. LTD. collects, uses and protects your personal data across our websites, products and services – under Singapore’s PDPA (2012) and, where applicable, the GDPR.
On this page
01
Introduction
This policy describes how DEHA GLOBAL PTE. LTD. (“we”, “DEHA Global”) collects, uses and protects personal data when you use our Services – our websites (including deha-global.com) and our products and services (including Oriene). We process data under Singapore’s PDPA (2012) and, where applicable, the GDPR for users in the EEA.
02
Data controller
DEHA GLOBAL PTE. LTD., 36 Robinson Road, #20-01, City House, Singapore 068877. Privacy / Data Protection Officer: moc.labolg-ahed@ofni. For data in your Workspace managed by your organisation, that organisation may be the controller and we act as processor.
03
Data we collect
Enquiry data (website): name, work email, company and message when you submit a contact form, subscribe to our newsletter, or download a resource; Account info (name, email, hashed password, avatar, preferences, 2FA); Your Content (documents, files, text you upload or sync via Connectors, plus derived data such as embeddings and search indexes); Conversation data; Connector data; Usage and technical data; Cookies.
04
How we use data
To (a) provide, operate and maintain the Services; (b) authenticate and secure accounts; (c) process Your Content with AI in our AI-powered products to deliver features you request; (d) process payments and credits; (e) provide support and Service communications; (f) improve, analyse and protect the Services; (g) comply with legal obligations; (h) respond to your enquiries and, with your consent, send newsletters and marketing – you can unsubscribe at any time.
05
Legal basis
Under PDPA we process on your consent or as otherwise permitted by law. Where GDPR applies: performance of a contract, legitimate interests (security, improvement, abuse prevention), consent, and legal obligation. You may withdraw consent at any time.
06
AI processing and sub-processors
When you use our AI-powered products, to provide AI features we may share relevant Content with AI model/infrastructure providers acting as sub-processors, only to process on our instructions and under data-protection terms. A list of sub-processors is available on request at moc.labolg-ahed@ofni.
07
Sharing and disclosure
We do not sell personal data. We share only with: service providers/sub-processors (hosting, AI, payment, email); other members of your Workspace per your sharing settings; lawful requests by authorities; or in a merger/acquisition with equivalent safeguards.
08
International transfers
Your data may be processed in a country other than where you reside. For transfers outside your region we apply appropriate safeguards (e.g., EU Standard Contractual Clauses, or equivalent protection under PDPA).
09
Data retention
We retain personal data as long as needed to provide the Services and meet legal obligations. When you delete Content or your account, we delete or anonymise related data within a reasonable period, unless law requires longer retention.
10
Security
We apply reasonable technical and organisational measures (encryption in transit, access controls, per-Workspace data isolation). No method of transmission or storage is completely secure. For a notifiable personal-data breach, we notify Singapore’s PDPC within 3 days and affected individuals as required by law; where GDPR applies, we notify the supervisory authority within 72 hours.
11
Your rights
Depending on applicable law (PDPA/GDPR): access, correct, delete, restrict or object to processing, data portability, withdraw consent, and lodge a complaint with the data-protection authority (in Singapore, the PDPC). Contact moc.labolg-ahed@ofni; we respond within statutory timelines.
12
Cookies and tracking
We use necessary cookies/local storage for login, sessions and preferences (language, theme), and may use analytics cookies. Manage cookies via your browser; disabling necessary cookies may affect the Services.
13
Children
The Services are not intended for children under the minimum age (13, or higher where local law requires). We do not knowingly collect children’s data; if found, we delete it.
14
Changes to this policy
We may update this Policy. For material changes we provide reasonable notice. The effective date above shows the latest update.
15
Contact
Privacy questions: moc.labolg-ahed@ofni – DEHA GLOBAL PTE. LTD., 36 Robinson Road, #20-01, City House, Singapore 068877.