Privacy Policy

We handle personal data in two different roles:

• As an organisation, for data we collect for our own purposes: website visitors, demo requests, emails to us, and the account and billing details of our subscribing companies.
• As a data intermediary, for data our customers put into the Kryveon app. For example, a restaurant group may add staff names, supplier contacts and delivery details. That data belongs to the customer, who decides how it is used. We process it only to provide the service, in line with our Terms of Service.

If you are a staff member of one of our customers and have a question about your data in the app, please contact your employer first. We will help them respond.

Business records that customers keep in Kryveon, such as purchase orders, stock, recipes, sales and supplier details, may include personal data such as supplier contact names. We handle this as a data intermediary, as described in Section 1.

• To reply to demo requests and enquiries, and to set up trials.
• To create and manage accounts, send invitations and sign-in emails, and keep accounts secure (for example with two-factor authentication).
• To provide, maintain and support the Kryveon service, including Kryn in-app support.
• To process subscriptions, add-ons and usage-based charges, and to send invoices and service notices.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To improve Kryveon, using aggregated or de-identified information wherever possible.
• To meet legal, tax, accounting and regulatory obligations.
• To send product news, only where you have agreed. You can opt out at any time.

We collect, use and disclose personal data with your consent, or where the PDPA otherwise allows it (for example to perform a contract or meet a legal obligation). When you submit the demo form or create an account, you consent to the uses described in this policy.

You may withdraw your consent at any time by emailing hello@kryveon.com. We will tell you what withdrawing would mean. For example, we cannot keep providing an account without an email address. We will act on your request within a reasonable time. Withdrawing consent does not affect our right to keep data where the law requires or allows us to.

We do not sell personal data. We share it only with:

These providers may only use the data to provide their services to us, and must protect it. We may also disclose personal data where the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or reorganised. We will update this list when we change providers.

Some of our service providers store or process data outside Singapore, for example in Japan, the United States or the European Union. When we transfer personal data overseas, we take appropriate steps, such as contractual commitments, to make sure it receives protection comparable to the PDPA.

We use reasonable security arrangements, including:

• Encrypted connections (HTTPS) for kryveon.com and the Kryveon app.
• Strict separation of each company's data at database level, so one company cannot see another's records.
• Role-based permissions, approval levels and two-factor authentication.
• An audit trail of important actions inside the app.
• Access to production data limited to the people who need it.

No system is completely secure. Please keep your password and authenticator safe, and tell us straight away if you suspect your account has been misused.

If a data breach happens, we will act quickly to contain it and assess it. Where the PDPA requires, we will notify the Personal Data Protection Commission and the people affected. Where we hold the data as a data intermediary, we will notify the affected customer without undue delay so they can meet their own obligations.

• Demo requests and enquiries: up to 24 months after our last contact, unless you become a customer.
• Account and app data: while the subscription is active. After a subscription ends, the customer has 30 days to export their data, and we then delete it or make it anonymous within a further 90 days, except where we must keep it.
• Billing and tax records: as long as Singapore law requires, generally 5 years.
• Server and security logs: for a limited period, normally no longer than 12 months.

You may ask for a copy of the personal data we hold about you and how it has been used or disclosed in the past year. You may also ask us to correct it. Many details, such as your name, can be updated directly in the app under My Settings.

Send requests to hello@kryveon.com. We may need to verify your identity, and we may charge a reasonable fee for access requests, which we will tell you about first. We aim to respond within 30 days. If we need longer, we will tell you when to expect a reply.

kryveon.com does not use advertising or tracking cookies. The Kryveon app uses essential cookies to keep you signed in and secure. These are needed for the app to work. If we add analytics in future, we will update this section first.

Kryveon is a business service for companies and their staff. It is not intended for children. We do not knowingly collect personal data from anyone under 18, except where an employer has added a young worker's work details to the app, under that employer's responsibility.

We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If a change significantly affects how we use your personal data, we will tell subscribing companies by email or in the app before it takes effect.

For any question, request or complaint about personal data, please write to our Data Protection Officer at hello@kryveon.com, with "Personal data" in the subject line.

Kryveon Pte Ltd, Singapore. If you are not satisfied with our response, you may contact the Personal Data Protection Commission (pdpc.gov.sg).