🔒 PDPA Compliant
Privacy Policy
Last updated: October 2026 · Governed by Singapore's Personal Data Protection Act 2012 (PDPA)
1. About EngageAI
EngageAI provides AI-powered chatbot solutions for businesses in Singapore. Our chatbots are deployed on client websites to facilitate customer engagement.
This Privacy Policy explains how we collect, use, disclose and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
2. What Personal Data We Collect
When you interact with an EngageAI-powered chatbot, we may collect the following personal data:
| Data Type | Examples | How Collected |
|---|
| Contact Information | Name, email address, phone number | Voluntarily provided via lead capture form |
| Conversation Data | Messages sent to and received from the chatbot | Automatically recorded during chat session |
| Session Data | Session ID, timestamp, source page | Automatically generated |
| Feedback Data | Thumbs up/down ratings on responses | Voluntarily provided |
Please do not share sensitive personal data such as NRIC numbers, financial information, medical records or passwords through the chatbot.
3. Purpose of Collection
We collect personal data for the following purposes:
- To respond to your enquiries and provide customer support
- To follow up on leads and business enquiries on behalf of the business you are engaging with
- To improve the accuracy and quality of our AI chatbot responses
- To generate analytics and insights for the business operating the chatbot
- To detect and flag conversations that require human escalation
- To comply with legal and regulatory obligations
4. AI-Generated Responses
Our chatbots are powered by Engage AI. Please be aware:
- Responses are AI-generated and may not always be 100% accurate
- The AI does not have real-time access to external information unless specifically configured
- For important decisions, please verify information with the business directly
- Conversations flagged by escalation keywords will be reviewed by a human agent
5. Disclosure of Personal Data
Your personal data may be shared with:
- The business operating the chatbot - to follow up on your enquiry or lead
- Engage AI - To process your messages and generate responses
- EngageAI support staff - Authorised staff may access the business's EngageAI account, including conversations and leads, only to set up, maintain and support the chatbot. Every such access is logged.
- Database Provider - For secure data storage
- Email Service Provider - For sending notifications
We do not sell your personal data to third parties.
6. Data Protection
- All data is transmitted over encrypted HTTPS connections
- Data is stored in a secured cloud database with row-level security policies
- Access to personal data is restricted to authorised personnel only
- API keys and credentials are stored as environment variables, never in code
7. Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this policy. Conversation data is retained for a maximum of 12 months from the date of collection unless otherwise required.
8. Your Rights Under PDPA
Under Singapore's PDPA, you have the right to:
- Access - request a copy of your personal data held by us
- Correction - request correction of inaccurate personal data
- Withdrawal of Consent - withdraw consent for collection, use or disclosure
- Data Portability - request your data in a portable format
To exercise any of these rights, please use the Data Request Form in Section 12 below.
9. Cookies
Our chatbot widget does not use cookies. Session identifiers are stored temporarily in browser memory only.
10. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available at engage-ai.info/privacy.html.
11. Contact Us
For any privacy-related queries, please contact our Data Protection Officer:
You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.
12. Submit a Data Request
Use this form to exercise your rights under the PDPA. We will respond within 30 days.