This Privacy Policy explains how CogniVision Pte. Ltd. (UEN 201728394C) (“CogniVision”, “we”, “us”) collects, uses, discloses, and protects personal data in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA), as amended and in force from May 2025, and other applicable laws in jurisdictions where we operate.
1. Data controller
CogniVision Pte. Ltd.
1 Fusionopolis Place, #03-20 Galaxis, Singapore 138522
Email: [email protected]
Phone: +65 6778 4521
Data Protection Officer: [email protected]
2. Personal data we collect
Depending on your relationship with us, we may collect the following categories of personal data:
- Identity and contact data: name, job title, company name, email address, telephone number, postal address.
- Business and project data: team size, budget range, solution interests, consultation preferences, messages submitted via our contact form.
- Account and usage data: login credentials (stored in hashed form), activity within CogniVision platforms, support correspondence, and deployment milestone records.
- Technical data: IP address, browser type, device identifiers, referral URLs, and cookie identifiers when you visit cognivision.life or use our services.
- Payment data: billing contact details and transaction references processed by third-party payment providers (we do not store full payment card numbers).
- Vision and model-related data: where you engage our computer vision or multimodal AI services, we may process datasets, camera metadata, and labelled images you provide under separate data processing agreements, subject to confidentiality and purpose limitation.
3. Purposes of collection, use, and disclosure
We collect, use, and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, including:
- Responding to enquiries and providing computer vision, multimodal AI, and cognitive perception services;
- Delivering solutions from our collection and managing client deployments;
- Administering contracts, invoicing in SGD, and customer success activities;
- Improving our website, models, security, and user experience;
- Sending service notices, deployment updates, and marketing communications where permitted;
- Complying with legal obligations, regulatory requests, audits, and dispute resolution;
- Recruitment and employment administration (where applicable).
We may disclose personal data to trusted service providers (cloud hosting, GPU compute, analytics, email delivery, payment processing, professional advisers) who process data on our instructions. We require such parties to implement appropriate technical and organisational safeguards. We may also disclose data to regulators or law enforcement where required by Singapore law.
4. Consent and notification obligation
Under the PDPA (May 2025 framework), we notify you of the purposes for which personal data is collected on or before collection. Where consent is required as the legal basis, we seek clear and informed consent. You may withdraw consent for marketing at any time by emailing [email protected] or using unsubscribe links in our emails. Withdrawal does not affect processing already lawfully performed or processing based on other permitted grounds such as contractual necessity or legal obligation.
5. Legitimate interests and business purposes
Where permitted under the PDPA, we may rely on legitimate business purposes for processing that is necessary for our operations and not disproportionate to your interests — for example, fraud prevention, network security, model integrity monitoring, and aggregated analytics that do not identify individuals.
6. Cookies and similar technologies
Our website uses:
- Essential cookies: required for security, load balancing, and remembering cookie consent choices stored in localStorage.
- Analytics cookies (with consent): to understand how visitors use cognivision.life and improve content.
When you first visit our site, a cookie banner allows you to accept all cookies or continue with essential cookies only. Your choice is stored locally under the key cv_cookies_accepted. You may change browser settings to block cookies; some features may not function correctly.
7. Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Typical retention periods:
- Contact form submissions: up to 24 months unless a client relationship continues;
- Client and deployment records: duration of contract plus 7 years for business records;
- Camera footage and training datasets: as specified in your data processing agreement or until deletion is requested where permitted;
- Marketing suppression lists: indefinitely where required to honour opt-out requests;
- Server logs: up to 12 months unless needed for security investigations.
8. Cross-border transfers
As an APAC-focused provider, we may transfer personal data to service providers or affiliates outside Singapore for cloud hosting and model training. Where we do so, we ensure that the recipient provides a standard of protection comparable to that under the PDPA, including contractual clauses approved under PDPA transfer requirements effective May 2025.
9. Security
We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including access controls, encryption in transit (TLS), encryption at rest where applicable, staff training, and incident response procedures. No method of transmission over the Internet is completely secure; we encourage you to use strong credentials and report suspected breaches promptly.
10. Data breach notification
In the event of a data breach that is likely to result in significant harm or affect a significant number of individuals, we will assess the incident promptly and, where required under the PDPA and guidance issued from May 2025, notify the Personal Data Protection Commission (PDPC) and affected individuals without undue delay.
11. Your rights
Subject to exceptions under the PDPA, you may:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Withdraw consent for processing based on consent;
- Request information about how your data has been used or disclosed in the past year.
We may charge a reasonable fee for manifestly unfounded or excessive access requests. We will respond within the timelines prescribed by the PDPA.
12. Do Not Call Registry
Where we send marketing messages to Singapore telephone numbers, we check against the Do Not Call Registry unless you have provided clear and unambiguous consent for such messages or an applicable exception applies.
13. Children
Our services are directed at business users. We do not knowingly collect personal data from individuals under 18 without parental or guardian consent. Contact us if you believe we have collected such data in error.
14. Third-party links
Our website may link to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.
15. Changes to this policy
We may update this Privacy Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised “Last updated” date. Continued use of our services after changes constitutes acceptance where permitted by law.
16. Contact and complaints
For privacy enquiries or to exercise your rights, contact our Data Protection Officer at [email protected] or write to the address in Section 1. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore at www.pdpc.gov.sg.