This page sets out the terms of use for our websites and our privacy policy: what personal data we collect, how we use it, who we share it with, and the choices you have.
Who we are. Anaboo.AI Pte Ltd, 9 Jln Jintan, KimSia Court #12-15, Singapore 229006, registered in Singapore (UEN 201131483K) ("Anaboo", "we", "us"). We provide AI strategy, implementation, and training services, delivered through the Anaboo AIOS Framework.
What this covers.
- Our website at www.anaboo.ai (the "Site")
- The Anaboo AIOS client portal at aios.anaboo.ai (the "Portal")
- Personal data we handle while delivering consulting and implementation services (the "Services")
Client engagements are governed by our Client Terms of Engagement and Terms and Conditions. Software modules we license carry their own licence agreement, shipped with each module.
1. Terms of Use
By using the Site or the Portal you agree to these terms.
The content of the Site is general information. It is subject to change without notice and does not constitute legal, financial, tax, or regulatory advice. You are responsible for checking that any information meets your requirements before acting on it.
The Site and its content, including design, layout, graphics, text, and downloadable material, are owned by or licensed to Anaboo and protected by copyright. You may print or quote extracts for personal, non-commercial use with acknowledgement of the source. You may not redistribute or commercially exploit the content without our written permission.
We aim to keep the Site available and accurate, but we give no warranty that it will be uninterrupted or error-free, and we are not liable for it being temporarily unavailable.
We may refuse, suspend, or cancel access to the Site or the Portal at any time, including where these terms are breached.
Our Services are for businesses and are not available to anyone under 18 years of age.
These terms, and any dispute arising from use of the Site or the Portal, are governed by the laws of the Republic of Singapore.
2. Privacy Policy
We comply with Singapore's Personal Data Protection Act 2012 (PDPA). Where they apply to a particular engagement or user, we also work to the standards of Australia's Privacy Act 1988 and the UK GDPR.
2.1 What We Collect
Information you give us
- Enquiry, booking, and audit forms on the Site: your name, email address, phone number, company details, and anything you include in your message.
- Newsletter sign-up: your email address.
- Portal accounts: your name and email address. Portal accounts are created by invitation when you become a client.
- Anything you send us directly by email, phone, or messaging.
Information collected automatically
- Site analytics: pages visited, how you arrived, browser and device type, and approximate location derived from your IP address. Section 2.6 lists the tools involved and how to opt out.
- Portal activity: sign-ins, lesson progress, module downloads, and licence activations.
- Form protection: our forms include anti-bot checks (a hidden honeypot field and, where enabled, Cloudflare Turnstile).
Client data under an engagement
When we deliver Services we may access business data you share with us, such as customer records, financial information, documents, and system access. We use this data only to deliver the agreed work, we act on your instructions, and the confidentiality, data protection, and deletion terms in our Client Terms of Engagement apply.
2.2 How We Use Personal Data
- To respond to enquiries and provide the Services you ask for
- To run the Portal, including your account, course content, and module licences
- To send our newsletter and relevant updates, which you can unsubscribe from at any time using the link in each email
- To operate, secure, and improve the Site and the Portal
- To keep the accounting and legal records we are required to keep
- To detect and prevent fraud, abuse, and misuse of our systems
We do not sell personal data. We do not share personal data with advertising networks, and we do not do interest-based advertising.
2.3 Legal Bases
Depending on the context, we process personal data because: it is needed to perform a contract with you; you have consented (for example, the newsletter); it is needed to comply with a legal obligation; or it is in our legitimate interests as a business (responding to enquiries, securing our systems, keeping business records), balanced against your rights.
2.4 Who We Share It With
We share personal data with service providers who run parts of our infrastructure, limited to what each needs to do its job:
- Vercel hosts the Site and the Portal and provides aggregate visitor analytics.
- Google Analytics measures Site traffic. See section 2.6.
- GoHighLevel is our CRM. Form submissions from the Site are delivered here so we can respond and manage the relationship.
- Beehiiv sends our newsletter and holds the subscriber list.
- Supabase provides the Portal's database and sign-in service, holding Portal accounts, lesson progress, and licence records.
- Resend sends transactional email such as Portal invitations.
- Cloudflare provides bot protection on forms where Turnstile is enabled.
We may also disclose personal data to professional advisers under confidentiality, where required by law or a valid legal process, or as part of a sale or restructure of the business, in which case we require the acquirer to protect it consistently with this policy.
Where subcontractors work on your project, they are bound to confidentiality and data protection obligations no less strict than ours.
2.5 AI Processing
AI is central to our Services, so we are specific about what that means for your data:
- We use third-party AI platforms, principally Anthropic's Claude models, and others where agreed for a specific project. We tell clients which platforms their project uses.
- Data from Site visitors and newsletter subscribers is not sent to AI models.
- Under an engagement, business data you ask us to process may be sent to AI platforms as part of the agreed work. The platform's own terms and privacy policy also apply, and we flag material restrictions to you.
- AIOS installations run on your own accounts and subscriptions with AI providers. You contract with those providers directly, usage is billed to you, and their terms govern that processing.
- We do not train AI models on your data. Where an AI platform offers settings that limit the use of your data for model training, we apply them on accounts we control and recommend you do the same on yours.
- We design our systems for human review of AI output before it is relied on, in line with our Human-Enabled AI approach.
- We do not use automated decision-making, including AI, to make decisions that have a legal or similarly significant effect on an individual without human review. A person makes the final call on anything that matters, including hiring. If that ever changes, this policy will disclose the kinds of decisions involved and the personal information used, as the Australian Privacy Act requires from 10 December 2026.
2.6 Cookies and Analytics
The Site and the Portal use:
- Essential cookies, needed for things to work, such as keeping you signed in to the Portal.
- Analytics. Google Analytics sets cookies to measure how visitors use the Site. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser. Vercel Analytics is cookie-free and aggregate only.
We do not use advertising or cross-site tracking cookies.
2.7 Where Data Is Stored
Our service providers run infrastructure in the United States, Singapore, Australia, the United Kingdom, the EU, and other regions, so personal data may be transferred to and stored in countries other than your own. Where the law of your jurisdiction requires it, we rely on the protections in our contracts with these providers for such transfers.
2.8 How Long We Keep It
We keep personal data only as long as it is needed:
- Enquiries and CRM records: for as long as the relationship is live and for a reasonable period after, so we can respond if you come back to us.
- Newsletter subscriptions: until you unsubscribe.
- Portal accounts: while your account is active. We delete or anonymise account data on request, subject to licence records we need to keep.
- Accounting and engagement records: at least five years, as Singapore tax and companies law requires.
- Client data processed under an engagement: returned or deleted within 30 days of termination, as agreed, unless the law requires us to retain it.
2.9 Your Rights
You can ask us to: access the personal data we hold about you; correct it; delete it; stop sending you marketing; or withdraw consent where processing is based on consent. Where the UK GDPR applies, you also have rights to portability, restriction, and objection.
To exercise any of these, contact us using the details in section 2.13. We respond to rights requests within 30 days. If we cannot fulfil a request for a lawful reason, we explain why to the extent the law allows.
If you are unhappy with our response, you can complain to the regulator: the PDPC in Singapore, the OAIC in Australia, or the ICO in the United Kingdom.
2.10 Security
We protect personal data with technical and organisational measures, including encryption in transit (TLS), access controls, separated environments for client work, and confidentiality obligations for everyone who works with us. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as applicable law requires.
You are responsible for keeping any Portal password or sign-in method confidential. Tell us immediately if you believe your account has been compromised.
2.11 Children
The Site, the Portal, and the Services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
2.12 Changes to This Page
We update this page from time to time and show the date of the latest revision below. Material changes will be flagged on the Site. Continued use of the Site or the Portal after a revision takes effect means you accept the updated version.
2.13 Contact
Data protection contact: Brett Alegre-Wood, Data Protection Officer
Anaboo.AI Pte Ltd, 9 Jln Jintan, KimSia Court #12-15, Singapore 229006
Email: legal@anaboo.ai
Include full details of your request or complaint so we can deal with it quickly. We aim to respond to rights requests within 30 days.
Last update: 18 July 2026