Privacy and Data Protection Policy

1. Introduction

TIA Reviews Pte. Ltd. ("TIA", "we", "our", or "us") is committed to safeguarding the personal data of our users and customers in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This Privacy and Data Protection Policy outlines how we collect, use, disclose, and protect personal data in the course of providing access to our Software-as-a-Service platform, including all associated features, integrations, and related services (collectively, the "Services").

By accessing or using our Services, entering into a software license agreement with us, or otherwise providing us with personal data, you acknowledge that you have read and understood this policy and agree to the collection, use, and disclosure of your personal data as described herein.

We may update this policy from time to time to reflect changes in our business practices, legal requirements, or service enhancements. We encourage you to review this page periodically. Continued use of our Services after changes to this policy are published will constitute your acceptance of those changes.

2. Scope and Application

This policy applies to all personal data collected, used, or disclosed by TIA in connection with:

1. our client onboarding processes,
2. the provision of our SaaS Software,
3. integrations and API-based access to third-party platforms (such as e-commerce marketplaces),
4. customer support,
5. analytics and reporting functionalities.

This policy does not apply to:

1. business contact information as defined under the PDPA (e.g., name, business title, business email), unless such information is provided solely for personal purposes;
2. data sourced from publicly available reviews or marketplace content, provided that such data does not allow identification of a specific individual.

Where applicable, we act as a Data Intermediary under the PDPA when processing personal data on behalf of our clients. Our clients remain responsible for ensuring that their collection and use of personal data complies with all applicable laws (including GDPR, CCPA, and others, where relevant).

3. Collection of Personal Data

We collect personal data in the ordinary course of providing our Services, including but not limited to when:

1. you or your company enter into a licensing agreement with us;
2. you configure or use the Software (including review response templates, rules, and analytics);
3. you contact us for support, billing, onboarding, or service-related inquiries.

Examples of personal data we may collect include:

1. Full name and contact details of your team members (e.g., customer support or marketing managers);
2. Email addresses and phone numbers of your organization's authorized users;
3. Account credentials and access metadata;
4. Information derived from customer reviews, where such reviews are uploaded or synced by you from third-party platforms (note: we treat these as client-provided content, not collected by us independently);
5. Usage activity and preferences (e.g., rule configurations, language settings, tone-of-voice options).

We may also collect non-identifying, aggregated, or anonymized data (such as platform usage metrics or system performance logs) to improve our Services, conduct diagnostics, or generate operational insights. Where applicable, such data does not constitute "personal data" under the PDPA.

3A. Data Collected via Lead Generation Forms and Advertising Campaigns on Third-Party Platforms

In addition to the data collection described in Section 3, TIA Reviews collects personal data when you interact with our advertisements or submit a Lead Generation Form on third-party advertising platforms, including but not limited to LinkedIn, Meta, Google, and TikTok (collectively, "Advertising Platforms").

3A.1. Categories of personal data collected

When you submit a Lead Generation Form through an Advertising Platform, we may collect the personal data you choose to provide, which may include:

1. Full name;
2. Business email address;
3. Company or organization name;
4. Job title and seniority level;
5. Country and location;
6. Industry or business category;
7. Phone number (where applicable);
8. Responses to custom questions presented on the form.

When you submit a form through an Advertising Platform, the data is initially collected by that platform under its own privacy policy and subsequently transmitted to TIA Reviews. Once received, TIA Reviews acts as the data controller responsible for the use, storage, and protection of such data, in accordance with this Policy and applicable law.

3A.2. Purposes of use

We use personal data collected through Lead Generation Forms and Advertising Platforms for the following specific purposes:

1. Delivery of requested content — to send you the report, whitepaper, or other resource you requested through the form.
2. Sales and business outreach — to contact you via email, phone, or messaging platforms to respond to your inquiry, discuss how TIA's services may benefit your organization, or arrange a product demonstration.
3. Marketing communications — where you have provided specific, opt-in consent through a disclosure checkbox on the form, to send you newsletters, product updates, event invitations, and other promotional materials.
4. Campaign performance measurement — to analyze aggregated and anonymized form submission data for the purpose of measuring advertising effectiveness and optimizing future campaigns. Such analysis does not involve automated decision-making or profiling that produces legal or similarly significant effects on you.

3A.3. Disclosure to third parties

Personal data collected through Lead Generation Forms is stored in our customer relationship management (CRM) system and email marketing platform, which are operated by third-party service providers acting as data intermediaries on our behalf, under contractual data protection obligations consistent with this Policy and applicable law.

TIA Reviews does not sell, rent, or share personal data collected through Lead Generation Forms with unaffiliated third parties for their own marketing or commercial purposes.

3A.4. Lawful basis and consent

Where required by applicable law, the processing of personal data described in this Section 3A is based on:

1. Your specific consent, provided through opt-in disclosure checkboxes presented on the Lead Generation Form, for marketing communications; and
2. Our legitimate interests in responding to inquiries, delivering requested content, and conducting business outreach, balanced against your rights and interests.

3A.5. Your rights and choices

You may at any time:

1. Withdraw consent for marketing communications by clicking the "unsubscribe" link contained in every marketing email we send;
2. Request access to, correction of, or deletion of your personal data by contacting our Data Protection Officer as set out in Section 8;
3. Choose to receive the specific content you requested (e.g., a downloadable report) without opting in to ongoing marketing communications, where the form permits separate consent.

4. Use of Personal Data

We may use personal data for the following purposes, consistent with the scope of our Software and services:

1. Client onboarding and account setup — to verify business identity, assign access credentials, and configure subscription parameters.
2. Service delivery and contract performance — to provide access to the Software, support integrations, deliver features (e.g., analytics, auto-replies, reports), and maintain platform functionality.
3. Communication — to send service-related notifications, billing and invoicing communications, system alerts, and feature updates.
4. Technical and customer support — to troubleshoot issues, respond to support tickets, and provide implementation guidance.
5. Security and compliance — to monitor account activity for compliance with usage policies, detect misuse or suspicious activity, and enforce technical safeguards.
6. Service improvement and analytics — to analyze usage trends, review rule configurations, and optimize platform performance.
7. Marketing (limited and optional) — where you have provided specific opt-in consent (for example, through a disclosure checkbox on a Lead Generation Form, a website subscription form, or other written consent), to send you newsletters, product updates, event invitations, and other promotional content. You may withdraw your consent at any time by clicking the unsubscribe link in our emails or by contacting our Data Protection Officer.

We do not use or repurpose Customer Data (including synced reviews, templates, or product metadata) for training AI models or for any purpose unrelated to providing the Software, unless expressly authorized in writing.

5. Disclosure of Personal Data

We treat personal data with strict confidentiality and do not sell, rent, or share it with unaffiliated third parties, except as follows:

5.1. Internal access

Access is limited to authorized TIA personnel who require such information to perform their roles (e.g., support, billing, product development).

5.2. Data intermediaries and subprocessors

We may engage trusted third-party service providers (e.g., hosting partners, analytics providers, support ticket platforms) who process personal data on our behalf and in accordance with strict data protection agreements.

5.3. Legal and regulatory disclosures

We may disclose personal data if required to comply with applicable laws, court orders, or requests from regulatory authorities (e.g., tax or enforcement agencies), or to assert or defend legal claims.

5.4. Business transfers

In the event of a corporate transaction such as a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to confidentiality protections.

We will never disclose customer identities, platform activity, or usage metrics publicly, except as anonymized or aggregated statistical data (e.g., platform performance trends).

6. Data Retention and Protection

6.1. Retention period

We retain personal data only as long as necessary for the purposes for which it was collected, or to comply with legal or regulatory requirements. This includes:

1. the term of your subscription or active agreement;
2. a reasonable retention buffer (typically up to 6 years) for audit, compliance, or dispute resolution purposes.

If you request deletion of your account or personal data, we will securely remove it from our systems unless legal retention obligations apply.

6.2. Security measures

We implement appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, or unlawful processing. These measures include:

1. data encryption at rest and in transit,
2. access controls and user authentication,
3. logging and monitoring of administrative actions,
4. secure hosting infrastructure with regular security audits.

6.3. Data transfers

If personal data is transferred outside of Singapore (e.g., for cloud hosting), we ensure that such transfers comply with PDPA requirements through legally binding agreements or cross-border safeguards.

7. Your Rights and Access Requests

Under the Personal Data Protection Act 2012 (PDPA), individuals have the right to:

1. Access: You may request access to the personal data we hold about you.
2. Correction: You may request that inaccurate or incomplete personal data be corrected or updated.
3. Withdrawal of consent: You may withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions.

To exercise these rights, please contact our Data Protection Officer (DPO) as detailed in Section 8 below.

Note: Depending on the nature and scope of your request, we may require reasonable verification of your identity and may charge an administrative fee where permitted by law.

Withdrawal of consent may impact our ability to continue providing the Services to you. In such cases, we will inform you of the potential consequences (e.g., suspension or termination of your access to the Software).

8. Contacting Our Data Protection Officer (DPO)

If you have any questions, concerns, or requests relating to your personal data, or wish to exercise your rights under the PDPA, please contact our designated Data Protection Officer (DPO) at:

Data Protection Officer
TIA Reviews Pte. Ltd.
[email protected]
1 Coleman Street, #05-05, The Adelphi, Singapore 179803

We aim to respond to all legitimate requests within a reasonable time frame, and in accordance with our legal obligations.

9. Updates to This Policy

We may update this Privacy and Data Protection Policy from time to time to reflect changes in our legal obligations, business operations, or service offerings. Any changes will be published on our official website at tia-reviews.com/privacy.

Where appropriate, we will notify you via email or system notification of material changes.

Cookies Policy of TIA Reviews Pte. Ltd.

What Are Cookies?

Cookies are small text files that websites place on your device to ensure proper website functionality and to improve your overall experience.

For example, our cookies remember your language and region preferences so that you don't need to set them again each time you visit our website — tia-reviews.com.

In some cases, cookies may collect limited personal data, such as your device's IP address. We only collect such data when it is strictly necessary for our website to function.

How Do We Use Cookies?

We use cookies for the following purposes:

Essential
These cookies are required for the website to operate correctly. Without them, some parts of our website may not function. Essential cookies collect only the minimal information needed to deliver services. You may disable them in your browser, but doing so may affect the performance of the site.

Analytics
Analytical cookies help us understand how visitors interact with our website — for example, which pages are most frequently visited and how users navigate between sections. This information is aggregated and anonymous, and is used solely to improve our website and services.

Marketing
We use marketing cookies to deliver relevant advertisements and promotional content on third-party platforms. These cookies help us measure the effectiveness of our campaigns and ensure that ads are more relevant to your interests. We only work with trusted advertising partners.

Functional
Functional cookies remember your preferences and customization choices (such as login details or language settings) to enhance your browsing experience. These cookies do not track your activity on other websites.

Can You Control Which Cookies We Use?

Yes. You can manage your cookie preferences and choose to allow or block essential, analytical, marketing, or functional cookies through the cookie settings available on our website.

You can also manage cookies directly through your browser. Most browsers allow you to:

1. prevent new cookies from being stored,
2. receive notifications when cookies are placed,
3. block cookies altogether, or
4. delete existing cookies.

Please note that if you block all cookies, certain features and services on our website may not work as intended, and you may need to reconfigure preferences each time you visit.

Use of Cookies and Tracking Technologies

Cookies used on our platform may include:

1. Session cookies, which expire when you close your browser;
2. Persistent cookies, which remain on your device for a defined period (typically between 1 day and 12 months) unless manually deleted.

These cookies may store preferences (e.g., language or UI settings), maintain active sessions, or help us understand how users interact with our content to improve functionality and performance.

Third-Party Cookies

We may also use cookies provided by third-party services to support analytics, performance monitoring, or limited marketing features. These third-party providers may set their own cookies on your device and process data in accordance with their own privacy policies.

You may manage or delete cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features or access secure areas of our Services.