1. Introduction
Thirdi Pte Ltd (referred to as “we,” “us,” or “our”) is committed to safeguarding the privacy of individuals and complying with data protection laws. This Privacy Policy outlines how we collect, use, disclose, and protect your Personal Information. By using our services, you consent to the practices described in this policy.

2. Applicability and Compliance
We adhere to Singapore’s Personal Data Protection Act (PDPA) and are committed to complying with relevant European Union (EU) data protection laws, including the General Data Protection Regulation (GDPR).

3. Definitions

• Personal Information: Refers to any information that identifies an individual, including but not limited to name, address, email address, phone number, date of birth, login details, device information, location data, and browsing history.
• Sensitive Information: Includes information about racial or ethnic origin, political opinions, religious or philosophical beliefs, health information, or other special categories as defined by applicable laws.

4. Collection of Personal Information
We collect Personal Information through various means, including interactions via email, our website, and third-party services. We will clearly communicate the purpose of collecting the information at the time of collection, ensuring data minimization principles are upheld.

5. Purpose of Collection
We collect Personal Information for the primary purpose of providing our services to you. We may also use Personal Information to communicate with you about our services, promotions, or updates. However, we do not sell your personal information to third parties for marketing or any other purposes.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

6. Consent and Notification
When collecting Personal Information, we will explain why we are collecting it and how we plan to use it. Your explicit consent will be sought where required by law.

7. Sensitive Information
Sensitive Information will only be used for the primary purpose for which it was obtained, or for closely related secondary purposes, with your explicit consent, or as required by law.

8. Third Parties
We will collect Personal Information directly from you whenever reasonable and practicable. In cases where information is provided by third parties, we will ensure you are aware of such information and its usage.

9. Disclosure of Personal Information
Your Personal Information may be disclosed to third parties only:

• With your explicit consent,
• As required or authorized by law, or
• As part of providing our services to you (e.g., disclosing information to service providers acting on our behalf).

We do not sell your personal information. This includes any data obtained through services such as Google APIs.

10. Google API Data Usage
We comply with Google’s API Services User Data Policy. Any personal information obtained via Google APIs is used strictly for the purposes specified during the OAuth consent flow, such as user authentication. We do not sell or disclose Google user data to third parties unless required by law or with the user’s explicit consent.

11. Security of Personal Information
We take reasonable steps to protect Personal Information from misuse, loss, unauthorized access, modification, or disclosure. When no longer needed, information will be securely destroyed or anonymized.

12. Access and Correction
You have the right to access and correct your Personal Information, subject to certain exceptions. Requests for access can be made by contacting us, and identification may be required.

13. Maintaining Data Accuracy
We strive to ensure your Personal Information is accurate, complete, and up-to-date. If you find inaccuracies, please inform us so we can correct them.

14. Privacy by Design
We are committed to embedding data protection principles into the design and development of our products and services.

15. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve user experience and for analytics purposes. Details on the use of cookies and how you can manage preferences are outlined in our separate Cookie Policy.

16. Data Retention Policy
We retain personal information for the duration of your engagement with our services. Upon account termination or withdrawal of consent, information will be securely deleted within a 60-day period. Specific retention periods for other categories of personal information are outlined in our Data Retention Policy.

17. International Data Transfers
We ensure that adequate protections are in place when transferring personal information internationally. International data transfers are conducted with appropriate safeguards, such as standard contractual clauses or binding corporate rules, to maintain data protection standards.

18. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant regulatory authorities within the legally required timeframes.

19. Policy Updates
This Policy may be updated from time to time. We encourage you to review this policy regularly on our website for any changes.

20. Contact Information
For any privacy-related queries, complaints, or requests, please contact us at:
Email: info@thirdi.ai