Antbuildz AI Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how Antbuildz Pte. Ltd. (Antbuildz, we, us or our) handles personal data in connection with Antbuildz.ai, our AI Sales Agent, AI Webstore Suite, AI Agent Console, websites, applications and related business activities.

This Policy applies to Antbuildz AI services and does not govern transactions on the separate Antbuildz.com marketplace, which may have its own privacy notices.

2. Our Data Protection Roles

For account administration, sales, billing, website operations, support and our own business purposes, Antbuildz determines why and how personal data is handled and acts as the responsible organisation under applicable law.

Where a subscriber uploads or connects personal data and instructs Antbuildz to process it through the Services, the subscriber generally determines the purposes and means of that processing. In that context, the subscriber is the responsible organisation or controller and Antbuildz acts as its data intermediary or processor. The Data Processing Addendum governs that processing.

3. Information We Collect

Depending on your use of the Services, we collect account and company details, names, email addresses, telephone numbers, authentication identifiers, preferences, support correspondence, subscription and payment-related records, IP addresses, device information, usage events and security logs. Card details may be handled directly by a payment provider.

For Customers, we also process information they provide or connect: documents, catalogues, knowledge, inventory, conversation and enquiry content, product requirements, lead details, quotations, reservations, bookings and integration data. Customers are responsible for their notices and lawful collection of this information.

4. Sources of Information

We receive information directly from individuals and subscribers, from authorised users and integrations, automatically from use of the Services, and from service providers or business partners where permitted. A subscriber may provide personal data about its personnel, prospects, customers or website visitors; the subscriber is responsible for providing required notices and establishing a lawful basis for that data.

5. How We Use Information

We use personal data as reasonably necessary to:

• provide, configure, host and operate the Services;
• authenticate users and administer accounts, subscriptions and payments;
• process conversations, retrieve approved knowledge, generate responses, capture enquiries and perform configured workflows;
• provide support, communicate about the Services and respond to requests;
• secure the Services, prevent fraud and misuse, troubleshoot and monitor reliability;
• analyse and improve functionality, usability and performance using information we are entitled to use;
• send service communications and, where permitted, relevant business marketing with an opt-out;
• comply with law, enforce agreements and protect rights, safety and property; and
• carry out a corporate transaction such as a merger, financing or sale, subject to appropriate safeguards.

When Antbuildz processes Customer Data as a data intermediary or processor, it does so on the subscriber’s documented instructions, including instructions inherent in use of configured Service features.

6. AI Processing and Private Knowledge

AI features may send relevant prompts, conversation content, retrieved knowledge and technical metadata to contracted AI and infrastructure providers for processing. Providers may change; this Policy does not promise that data stays within Antbuildz infrastructure.

Antbuildz does not intentionally expose private Customer knowledge to unrelated Customers, use it to train another Customer’s Agent, or use private knowledge-base content to train shared Antbuildz models for unrelated Customers. Necessary provider processing remains subject to the applicable agreements and instructions. Customers may request information about material providers and safeguards at help@antbuildz.ai. Information received through Google Workspace permissions is subject to the additional limits in section 7.

Authorised personnel access must be limited to relevant content reasonably needed for customer-requested support, security or abuse investigations, legal duties, platform protection or exceptional operations. We may use aggregated or effectively anonymised information to understand and improve the Services. Access to Google Drive content is subject to the narrower limits in section 7.

7. Google Sign-In, Google Drive and Limited Use

Google Sign-In. If you choose Google Sign-In, Google may provide your Google account identifier, email address, name and profile image, depending on the permissions you grant. We use this information to create or access your Antbuildz AI account, authenticate you and administer that account. Google Drive is a separate, optional connection that you choose within the Services.

Read-only access and storage. When you connect Google Drive, the read-only permission lets Antbuildz list and read files in your connected Drive so that you can browse and select individual files for your Antbuildz AI Agent. It does not let Antbuildz modify or delete your source files in Google Drive. For files you select, we process the file name, type and other information needed to identify and retrieve the file, copy the selected file into Antbuildz's company Google Drive, and ingest its contents into your Customer account's private knowledge base. We retain that imported copy and knowledge so that your Agent can provide the features you configure.

Use, sharing and Limited Use. Selected files, relevant extracts and associated technical information may be processed by contracted cloud, search, AI and infrastructure providers only as needed to deliver the user-facing Agent feature you request. We do not sell this information, use it for advertising, or use it to train general-purpose AI models unrelated to your feature. Information received from Google APIs is not used to create, edit, distribute or facilitate intimate imagery, including non-consensual intimate imagery, or for related abusive activity. We require providers receiving the information to protect it and process it only for the permitted purpose. Antbuildz AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Human access. The ingestion process is automated. Antbuildz personnel do not routinely review selected Google Drive files. Access to specific file content by authorised personnel is limited to cases where you affirmatively request such support or where access is necessary for security or legal purposes, consistent with Google's user-data rules.

Disconnecting and deletion. Disconnecting Google Drive ends future access to the source Drive connection. It does not automatically delete files already copied into Antbuildz's company Google Drive or the knowledge ingested from them. To request removal of imported files and related Agent knowledge, contact help@antbuildz.ai from the email address associated with your Antbuildz AI account and identify the affected workspace and files. We may verify your authority before acting. We delete active imported copies and associated ingested content in response to a valid request, subject to legal requirements and protected backup lifecycles. For instructions, see the Google Drive file management guide.

8. How We Share Information

Antbuildz does not sell Customer Personal Data. We may disclose personal data to:

• cloud, hosting, AI, infrastructure, security, communications, support and analytics providers that help operate the Services;
• payment providers for subscription and billing transactions;
• integrations enabled or requested by a subscriber;
• professional advisers, auditors, insurers and transaction counterparties under confidentiality duties;
• government authorities, courts or other parties where disclosure is legally required or reasonably necessary to protect rights and safety; and
• a successor in connection with a merger, restructuring, financing or sale.

We do not disclose Customer Data to a third party for that third party’s independent purposes unless instructed by the Customer, permitted by the agreement, or required by law.

9. International Data Transfers

The Services may involve processing in countries other than the country where data was collected. Where Singapore’s Personal Data Protection Act 2012 applies, Antbuildz uses legally recognised measures intended to ensure transferred personal data receives a standard of protection comparable to the protection under the PDPA. Other transfer mechanisms may apply for customers in other jurisdictions as agreed in the DPA.

10. Data Retention

We retain personal data for as long as reasonably necessary to provide the Services, maintain relevant account history, fulfil the collection purpose, meet legal, accounting or security requirements, resolve disputes and protect the Services. Conversation history and Customer Content may remain during an active account where needed to provide the Service. Account closure does not mean every record is immediately erased.

When no longer reasonably required for a business or legal purpose, data will be deleted, anonymised or otherwise cease to be retained as personal data. Backups may retain data temporarily after active deletion under protected lifecycle processes. Customer-directed processing and return or deletion are governed by the DPA.

Google Drive disconnection does not itself remove imported company Drive copies or ingested knowledge. Customers may request deletion as described in section 7. Protected backups may retain data temporarily after active deletion under the lifecycle processes described above.

11. Security

Antbuildz uses commercially reasonable administrative, organisational and technical measures designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. No system is completely secure, and we cannot guarantee absolute security. Subscribers are responsible for access controls, user permissions, endpoint security and the security of systems they connect.

12. Your Rights and Choices

Depending on applicable law, an individual may request access to or correction of personal data, withdraw consent, object to or restrict certain processing, request deletion, or exercise portability or complaint rights. These rights may be subject to exceptions.

If Antbuildz processes your data for a subscriber, contact that subscriber first because it controls the processing. Antbuildz will assist the subscriber as required by the DPA. For data Antbuildz handles for its own purposes, send a request to help@antbuildz.ai. We may verify identity and authority before acting.

You may opt out of marketing emails through the unsubscribe method provided or by contacting us. Service and transactional communications may still be sent where necessary.

To manage a Google Drive connection or request removal of imported files, see the Google Drive file management guide or contact help@antbuildz.ai. Disconnecting the source Drive account and deleting imported content are separate actions.

13. Children’s Privacy

The Services are business services and are not directed to children. We do not knowingly solicit personal data from children for their own use of the Services. Subscribers must not configure the Services to collect children’s personal data without appropriate legal authority, notices and safeguards.

14. Third-Party Services and Links

Third-party websites and integrations have their own privacy practices. This Policy does not govern processing independently controlled by those third parties. Review their notices before providing personal data.

15. Changes to This Policy

We may update this Policy to reflect legal, operational or Service changes. We will publish the revised date and provide additional notice where a change is material or required by law.

16. Cookies and Analytics

Cookies, local storage and similar technologies can support authentication, security, preferences and requested features. Antbuildz uses Google Analytics where enabled to understand website visits and usage; it may process device identifiers, page interactions and technical information through Google infrastructure.

Non-essential analytics that require consent must not load before consent is obtained. Where offered, use the consent controls to accept, reject or withdraw consent; browser settings can also delete or block stored data. Blocking essential storage may affect account access. Our website should remain usable without non-essential analytics. Third-party services opened or embedded at your request may use their own technologies and notices.

17. Communications

Where permitted by applicable law, we may send product updates, offers, feature information and information about related Antbuildz services. Use the unsubscribe link in marketing emails or contact us to opt out. Necessary account, payment, security and service messages are transactional and do not depend on marketing consent.

18. Contact Us

For privacy questions, requests or complaints, contact Antbuildz Pte. Ltd., UEN 202007699D, at help@antbuildz.ai. We will direct requests to the responsible privacy contact. You may also complain to the competent data-protection authority, including Singapore’s Personal Data Protection Commission where applicable.