Podyx Privacy Policy
Version 1.0
Effective 30 June 2026
Last updated 30 June 2026
1. Overview
Podyx Pte. Ltd.("Podyx", "we", "us", "our") respectsyour privacy. This Privacy Policy explains what personal data we collect, why,how we use and share it, how long we keep it, and the rights you have. We aimfor clarity, not surprises.
This policy applies to:
• Studiosand their staff who use our platform (our customers and prospects).
• Visitorsto our marketing and product websites.
It does not coverpersonal data that a Studio collects about its own customers ("EndUsers") through the Services. For that data the Studio is the controllerand Podyx acts only as its processor under our Data Processing Agreement. SeeSection 11.
2. Who is responsible for your data
The controller of the personaldata described in this policy is Podyx Pte. Ltd., UEN 202403560C, registered at160 Robinson Road, #14-04, Singapore 068914.
For privacy questions or toexercise your rights, contact our Data Protection Officer at privacy@podyx.com,or write to us at the address in Section 14.
3. The personal data we collect
Account and profile data.Name, business name, email address, phone number, password (stored hashed),role, and preferences, collected when you create an account, start a trial, orconfigure your Studio.
Billing data. Plan,billing records, and the limited payment metadata our payment processor returnsto us. We do not store full card numbers; card payments for your Podyxsubscription are handled by our payment processor.
Usage and device data.How you interact with the Services, including log data, IP address, browser anddevice type, pages viewed, and actions taken, collected through cookies andsimilar technologies.
Support and communicationsdata. Messages, attachments, and records of your contact with our supportand sales teams, including chat and email.
Marketing data.Information you give us through forms, demos, events, or our community, andyour communication preferences.
4. How we collect personal data
We collect data directly fromyou when you sign up, configure your Studio, pay, contact support, or fill in aform; automatically through cookies and similar technologies when you use oursites and the Services; and from third parties such as our payment processors.
5. How we use personal data and our legal bases
We use personal data to:provide, operate, and secure the Services; set up and bill your subscription;provide support; communicate with you about your account and service changes;understand and improve how the Services are used; send marketing wherepermitted, which you can opt out of at any time; detect and prevent fraud,abuse, and security incidents; and comply with legal obligations.
Where GDPR applies, our legalbases are: performance of our contract with you; our legitimate interests inrunning and improving our business (balanced against your rights); your consent(for example, certain cookies and marketing); and compliance with legalobligations. Where Singapore's PDPA applies, we rely on consent and theexceptions the PDPA permits, including legitimate and business-improvementpurposes.
6. How we share personal data
We share personal data only asneeded and with appropriate safeguards. Our service providers (sub-processors)currently include:
• AmazonWeb Services - cloud hosting and storage.
• Stripeand Square - subscription billing and payment-related processing.
• Google- calendar and maps services.
• Intercom- customer support and in-product messaging.
• Resend- transactional and notification email.
We also share personal data withprofessional advisers and authorities where required by law, legal process, orto protect our rights, users, or the public, and in connection with a merger,acquisition, financing, or sale of assets, subject to this policy. Anup-to-date sub-processor list is available on request.
We do not sell yourpersonal data.
7. International data transfers
Our platform is hosted on AmazonWeb Services, and personal data is currently processed and stored in the UnitedStates (AWS US East region). The region may change over time as we operate theServices. Because our company is in Singapore and our customers areinternational, your personal data may be transferred across borders.
Where we transfer personal datainternationally, we use a lawful transfer mechanism, such as an adequacydecision or the relevant Standard Contractual Clauses, and apply appropriatesafeguards.
8. How long we keep personal data
We keep personal data for aslong as your account is active and as needed to provide the Services. After youcancel, we retain your account data for one hundred and eighty (180) days,during which it can be exported, and then permanently delete it, unless we arerequired to keep specific records longer to meet a legal, tax, accounting, or dispute-relatedobligation. Aggregated or anonymised data that no longer identifies you may bekept for analytics.
9. How we protect personal data
We use technical andorganisational measures appropriate to the risk, including encryption intransit, access controls, and monitoring. No system is perfectly secure, but wework to protect your data and to respond promptly to incidents. Our securitymeasures for End User data we process on behalf of Studios are detailed in theDPA.
10. Your rights and choices
Depending on where you live, youmay have the right to access, correct, delete, or port your personal data, toobject to or restrict certain processing, and to withdraw consent. You canmanage much of your data in the Services, and you can opt out of marketingusing the unsubscribe link or by contacting us. To exercise any right, emailprivacy@podyx.com. We will respond within the time the law requires. You alsohave the right to complain to your data protection authority, such as the PDPCin Singapore or your EU or UK supervisory authority.
11. End Users' personal data
When a Studio uses the Servicesto collect and manage data about its own customers, the Studio is thecontroller of that data and decides how it is used. Podyx processes that dataonly on the Studio's instructions, as its processor, under our Data ProcessingAgreement. If you are an End User and want to access, correct, or delete yourdata, contact the Studio you booked with. We will support the Studio inresponding to your request.
12. Cookies and similar technologies
We use cookies and similartechnologies on our sites and in the Services to keep you signed in, rememberpreferences, measure performance, and, with your consent where required, foranalytics and marketing. You can manage non-essential cookies through ourcookie banner or your browser settings.
13. Children
The Services are for businessesand are not directed to children. We do not knowingly collect personal datafrom children. Studios are responsible for any age requirements that apply totheir own End Users.
14. Changes and how to contact us
We may update this policy fromtime to time. We will post the updated version with a new version number anddate and, for material changes, give notice through the Services or by email.Prior versions are available on request.
Questions, requests, orcomplaints: privacy@podyx.com, or Podyx Pte. Ltd., Attention: Data ProtectionOfficer, 160 Robinson Road, #14-04, Singapore 068914.
