Last updated: 22 July 2026

Privacy Policy

This is a starter privacy policy for an early KYBFlow landing page. It should be reviewed and completed before KYBFlow collects real customer, UBO, director, shareholder, or compliance case data.

1. Scope

This Privacy Policy explains how KYBFlow may collect, use, disclose, and retain personal data when you visit our website, contact us, subscribe for launch access, or later use KYBFlow services.

2. Personal data we may collect

At the landing-page stage, we may collect:

• Contact details you send to us, such as name, email address, company name, job title, and message content.
• Website analytics data, such as page views, CTA clicks, approximate device/browser information, language, timezone, referrer, and UTM campaign parameters.
• Technical logs, such as IP address, request time, browser user agent, and error diagnostics collected by hosting or security providers.

If KYBFlow launches a full KYB product, we may also process business registry, director, shareholder, authorised representative, and beneficial owner information submitted by customers or received from providers.

3. How we use personal data

We may use personal data to:

• Respond to enquiries and launch-access requests.
• Measure interest in KYBFlow and improve website messaging.
• Understand marketing attribution and conversion performance.
• Operate, secure, troubleshoot, and improve the website.
• Develop and provide KYBFlow services, if and when launched.
• Comply with legal, regulatory, accounting, audit, and dispute-resolution obligations.

4. Analytics and attribution

KYBFlow is wired for Firebase Analytics and Aptabase, matching the analytics family used by the GenTrip web landing page. Analytics is inactive until project keys are configured. When enabled, we may record page views, CTA clicks, legal-link clicks, section views, app version, UTM parameters, browser language, and timezone.

5. Cookies and local storage

The current page may use browser local storage and session storage to remember first-touch and session UTM attribution. Analytics providers may also use cookies or similar technologies when enabled. A production launch should add a consent banner where required.

6. Disclosure

We may disclose personal data to:

• Service providers that host, secure, monitor, analyse, or support the website.
• Analytics providers such as Firebase/Google Analytics and Aptabase, when configured.
• Professional advisers, auditors, insurers, or legal representatives.
• Authorities, regulators, or other parties where required or permitted by law.
• Business counterparties in connection with a merger, acquisition, financing, or restructuring.

7. International transfers

Some service providers may process data outside Singapore. Before production use, KYBFlow should verify provider locations and contractual safeguards for transfers of personal data outside Singapore.

8. Security

We use reasonable administrative, technical, and organisational measures appropriate to the nature of the data. No website or transmission method is completely secure.

9. Access, correction, and withdrawal

You may contact us to request access to, correction of, or deletion of personal data we hold about you, or to withdraw consent where applicable. We may need to verify your identity and may retain information where required or permitted by law.

10. Retention

We keep personal data only as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law. See our Data Retention Policy.

11. Contact

Privacy questions can be sent to [email protected]. Before production, replace this with the business contact information for the person responsible for data protection matters.