This Privacy Policy describes how BuyWhere Technologies Pte. Ltd. ("BuyWhere", "we", "us", or "our") collects, uses, and protects personal data when you use our website at buywhere.ai and our API services. We comply with Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who We Are

BuyWhere Technologies Pte. Ltd. is a company incorporated in Singapore. We operate the BuyWhere product catalog API — an agent-native data platform for AI commerce, starting with Singapore.

Data Controller: BuyWhere Technologies Pte. Ltd., Singapore
Contact: privacy@buywhere.ai

2. Data We Collect

We collect the following categories of personal data:

We do not collect sensitive personal data (e.g. financial account numbers, health data, or government ID numbers).

3. How We Use Your Data

We use your data for the following purposes:

We process your data on the lawful bases of: (a) performance of a contract (API service delivery), (b) legitimate interests (security, fraud prevention, analytics), and (c) consent (where we ask for it explicitly).

4. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above, or as required by law. API usage logs are retained for up to 12 months. Contact inquiry data is retained for up to 3 years. You may request deletion at any time (see Section 7).

6. Cookies

Our website uses strictly necessary cookies to deliver the service. We do not use tracking or advertising cookies. Server access logs may be retained for security and debugging purposes.

7. Your Rights

Under the PDPA and, where applicable, the GDPR, you have the right to:

To exercise these rights, email privacy@buywhere.ai with your request. We will respond within 30 days.

8. International Transfers

Your data may be processed outside Singapore where our infrastructure providers operate. We ensure appropriate safeguards are in place (including standard contractual clauses where required by the GDPR) for all cross-border transfers.

9. Security

We implement industry-standard security measures including HTTPS/TLS encryption, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related queries or data requests:

Email: privacy@buywhere.ai
General: hello@buywhere.ai
Company: BuyWhere Technologies Pte. Ltd., Singapore