Privacy Policy

gimmefy Labs Pte. Ltd. (“gimmefy”, “we”, “us”) operates the gimmefy platform. This Privacy Policy explains how we collect, use, and protect data when you use our services.

1. Data We Collect

Account Data

Organisation name, Authorised User email addresses, roles, and authentication credentials. Collected during onboarding and account management.

Content Data

Text, images, video, audio, documents, and brand assets you upload or generate through the Platform. This includes Brand Vault content, conversation history, and generated outputs.

Usage Data

Feature usage metrics, session data, and performance analytics. Used to improve the Platform and provide usage reports to your Organisation.

Technical Data

IP addresses, browser type, device information, and access logs. Collected automatically for security monitoring and service optimisation.

2. How We Use Your Data

• Service delivery: To provide, maintain, and improve the Platform.
• Brand context: To make AI outputs brand-aware using your Brand Vault data.
• Security: To detect and prevent unauthorised access, fraud, and abuse.
• Communication: To send service updates, security alerts, and billing notices.
• Analytics: To provide usage reports and optimise Platform performance.

3. What We Never Do

We never train AI models on your data. Your Content is never used to train, fine-tune, or improve any AI model — ours or third-party.

We never sell your data. Your data is not a product. Period.

We never share your data with other tenants. Multi-tenant isolation is enforced through 470+ Row-Level Security policies.

We never access your Brand Vault without authorisation. Your brand intelligence stays yours.

4. AI Model Providers

The Platform routes requests to third-party AI providers (OpenAI, Google, Anthropic, Meta, Mistral, and others). We maintain data processing agreements with all providers that prohibit them from using your data for model training. Prompts and outputs are processed in real-time and not retained by providers beyond the processing window.

5. Data Storage & Security

• Encryption: TLS 1.3 in transit, AES-256 at rest.
• Infrastructure: Hosted on enterprise-grade cloud infrastructure with SOC 2 Type II and ISO 27001 compliance.
• Access control: Role-based access with principle of least privilege. All access is logged and auditable.
• Data residency: Primary storage in Singapore. Enterprise customers may request specific data residency arrangements.

6. Data Retention

Content Data is retained for the duration of your subscription. Upon termination, your data is available for export for 30 days, after which it is permanently deleted. Usage and Technical Data may be retained in anonymised form for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your data.
• Rectify inaccurate data.
• Request deletion of your data.
• Object to or restrict processing.
• Data portability.

To exercise these rights, contact support@gimmefylabs.com.

8. Cookies & Tracking

We use essential cookies for authentication and session management. We use privacy-respecting analytics to understand Platform usage. We do not use third-party advertising trackers.

9. International Transfers

Data may be processed in jurisdictions where our AI providers operate. We ensure adequate safeguards through contractual protections (Standard Contractual Clauses where applicable) and provider compliance certifications.

10. Children’s Privacy

gimmefy is a B2B platform designed for business use. We do not knowingly collect data from individuals under 18.

11. Changes to This Policy

We may update this Privacy Policy with 30 days notice. Material changes will be communicated via email to your Organisation’s designated contact. The “Last updated” date at the top reflects the most recent revision.

12. Contact

For privacy-related questions or data requests, contact us at support@gimmefylabs.com.

gimmefy Labs Pte. Ltd. · Singapore · UEN 202341234A