Privacy Policy

Adtomatic Digital Pte. Ltd. (“Adtomatic”, “we”, “us”, “our”) is a Singapore-registered technology company. We provide two software platforms:

• InstaReview.ai — an AI-powered voice feedback and online reputation management tool for SMEs.
• Cyber Essentials — a self-guided PDPA compliance software platform for training DPOs, conducting internal gap analyses, and managing compliance checklists and alerts.

This Policy applies to our website (adtomatic.com) and both software platforms.

Any personal data inadvertently submitted to our platforms by customers, their employees, or end-users is done so outside the intended use of the Service. Adtomatic expressly disclaims all responsibility and liability for personal data stored in our platforms contrary to this policy and contrary to the intended purpose of the Service.

When you register for, enquire about, or use our Services, we may collect the following information about your business and its representatives:

• Business name and registered address
• Contact person name, email address, and phone number
• Country and industry type
• Account login credentials (stored in encrypted form)
• Usage data — how you interact with our platform features
• Payment and billing information (processed via third-party payment providers; we do not store card details)
• Communications you send us via email, contact forms, or WhatsApp

We collect this information for the purpose of providing our Services, communicating with you, processing payments, and improving our platforms.

When your customers use InstaReview.ai (by scanning a QR code or tapping an NFC stand at your premises), the following applies:

• Voice recordings are submitted by your customers and processed by AI for transcription and sentiment analysis.
• Feedback data is associated with your business account for the purpose of providing real-time insights and alerts to your team.
• InstaReview.ai is not designed to collect, store, or process the names, contact details, or any other PII of the individuals leaving feedback. Feedback is processed as anonymous voice input.
• As the business deploying InstaReview.ai, you are responsible for displaying appropriate data collection notices to your customers and for ensuring that collection is conducted in accordance with PDPA requirements.
• Adtomatic is not liable for any claims by your customers arising from inadequate notice or consent practices on your part.

The Cyber Essentials platform is a self-guided compliance tool used internally by your organisation. The following applies to data within Cyber Essentials:

• You may input information about your organisation's data practices, policies, and internal processes as part of the gap analysis and checklist features.
• You must not enter personal data of your customers, employees, or any other individuals into the Cyber Essentials platform. The platform is designed for organisational compliance management, not personal data processing.
• Adtomatic will not be liable for any personal data you or your team members input into the platform outside its intended use.

We use the information we collect about your business to:

• Provide, operate, and maintain our Services
• Process your subscription and payments
• Communicate with you about your account, updates, and support requests
• Send you product updates, compliance tips, and newsletters (you may opt out at any time)
• Improve and develop our platform features
• Comply with our own legal and regulatory obligations

We do not sell your information to third parties. We do not use your information for any purpose other than those stated above.

We may share your business information with trusted third-party service providers who assist us in delivering our Services, including:

• Cloud hosting and infrastructure providers (e.g. AWS)
• AI processing services used for voice transcription (e.g. ElevenLabs, other AI APIs)
• Payment processing platforms
• Email and communication services

All third-party providers are contractually required to handle your information securely and only for the purposes we specify. We do not authorise third parties to use your information for their own marketing or commercial purposes.

We implement appropriate technical and organisational measures to protect information in our systems against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission, access controls, and regular security reviews.

Adtomatic will not be held responsible for:

• Personal data breaches arising from your failure to implement adequate data protection measures within your own organisation.
• Regulatory penalties or third-party claims resulting from your non-compliance with the PDPA, regardless of your use of Cyber Essentials.
• Personal data you or your team members input into our platforms outside the intended scope of the Service.

We retain business account information for as long as your account is active or as required to provide our Services. Upon account termination, we will delete or anonymise your data within a reasonable period, except where retention is required by law.

Voice feedback data processed through InstaReview.ai is retained only for as long as necessary to provide real-time insights and reporting. We do not retain raw voice recordings indefinitely.

As an individual whose personal data we hold, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent for marketing communications at any time

To exercise these rights, contact us at info@adtomatic.com. We will respond within 30 days.

Our website uses essential cookies to enable core functionality. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences, though disabling cookies may affect the functionality of our website.

We may update this Privacy Policy periodically. Material changes will be communicated by posting the updated Policy on our website with a revised “Last updated” date. Your continued use of our Services after such changes constitutes acceptance.

For any questions, access requests, or concerns about this Privacy Policy, contact our team at: