Privacy Notice

1. Who we are

SiteDesk is operated by Razin Omar, who is the data controller for the personal data described in this notice. This means we decide how and why your personal data is processed.

2. What we collect

• Account data — your name, email address, and login credentials, used to create and secure your account.
• Company settings — company name, contact name, phone number, hourly rate, and tax rate you enter, used to generate your documents.
• Job content — job briefs, customer names and contacts, site addresses, and job updates you enter, used to provide the service.
• Usage and device data — log data, device identifiers, and IP address, used for security, fraud prevention, and product improvement.
• Support messages — anything you send us when asking for help.

Payment card details are collected and processed directly by Paddle, our Merchant of Record — we never see or store your card number.

3. Why we use it (legal basis)

• Contract performance — to create your account, provide the service, and generate your job packs.
• Legitimate interests — to keep the service secure, prevent fraud, and improve the product.
• Consent — for optional marketing communications, which you can withdraw at any time.
• Legal obligation — where we must keep records or respond to authorities.

4. Who we share it with

• Service providers — hosting, database, and AI processing providers that help us run the service, under contractual safeguards.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, tax compliance, invoicing, and subscription management.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.

We do not sell your personal data.

5. Retention

We keep your personal data for as long as your account is active and as needed to provide the service. When data is no longer needed — for example after you close your account — it is deleted or anonymised, except where we must keep records by law.

6. Your rights

Under Singapore's Personal Data Protection Act and other applicable laws, you may request access to your personal data, ask us to correct or delete it, withdraw consent, and complain to the relevant data protection authority. To exercise any of these rights, contact us through the app.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit your data to your own account.

8. Cookies

We use essential cookies and local storage only — to keep you signed in and remember your session. We do not use advertising or marketing cookies. You can clear cookies in your browser settings, but signing in will no longer work without the essential ones.

9. Changes

We may update this notice from time to time. The "last updated" date above shows the current version; material changes will be flagged in the app.