01
Introduction
This Privacy Policy explains how ScienceGuru ("ScienceGuru," "we," "us," or "our"), a product of AutoTrust AI Pte. Ltd. (UEN: 202300999D), collects, uses, discloses, and protects your personal data when you access or use our website, applications, and AI-powered services (collectively, the "Services").
AutoTrust AI Pte. Ltd. is a private company limited by shares, incorporated in Singapore on 9 January 2023. Its registered office is:
60 Paya Lebar Road, #06-28Paya Lebar Square
Singapore 409051
We are committed to complying with Singapore's Personal Data Protection Act 2012 ("PDPA"), guidance issued by the Personal Data Protection Commission ("PDPC"), and applicable guidance concerning personal data in AI systems.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Where consent is our legal basis for processing, we will obtain it as required by the PDPA.
This policy should be read together with our Terms of Service.
02
Changes to this Privacy Policy
We may update this policy to reflect changes to our practices, Services, or applicable law. For material changes, we will provide a prominent notice on our website or send an email notification where appropriate. We encourage you to review this page periodically.
Your continued use of the Services after an update constitutes acknowledgement of the revised policy.
03
Personal data we collect
Under the PDPA, personal data is data about an identifiable individual, whether identification is possible from that data alone or together with other information an organisation has or is likely to have access to.
3.1 Data you provide
| Category | Examples |
|---|---|
| Account and profile data | Name, email address, phone number, profile image, company name, and job title. |
| Payment data | Billing address, payment card type, and the last four digits of a payment card. Full card details are collected and processed by Stripe and are not stored on our servers. |
| User content | Documents, text, prompts, queries, and other content you upload to or generate through the Services, including inputs to AI features. |
| Communications | Support correspondence, survey responses, and feedback. |
3.2 Data collected automatically
| Category | Examples |
|---|---|
| Device and technical data | IP address, device type, operating system, browser type and version, device identifiers, and language settings. |
| Usage data | Pages visited, features used, clickstream events, timestamps, session duration, and referring URLs. |
| Cookie and tracking data | Information collected through cookies, pixels, local storage, and similar technologies. |
3.3 Data from third parties
| Source | Examples |
|---|---|
| Authentication providers | Information from sign-in providers, such as Google or Microsoft, that you use to access an account. |
| Analytics providers | Aggregated or pseudonymised insights about how people interact with the Services. |
| Business partners | Information from partners involved in integrated or co-branded services. |
| Stripe | Transaction status, payment confirmation, and fraud-risk indicators connected with your payments. |
04
How we use personal data
We collect, use, and disclose personal data for the purposes below and purposes directly related to them. We will provide notice and seek consent where required before using data for a new or materially different purpose.
Providing and operating the Services
- Create and manage accounts.
- Provide, maintain, and improve the Services, including AI features.
- Process transactions and manage billing through Stripe.
- Provide support and respond to enquiries.
AI improvement and research
- Analyse interactions with AI features to improve accuracy, relevance, safety, and performance.
- Conduct internal research, testing, and product development.
We do not use the content of your documents or prompts to train general-purpose AI models shared with other users unless you expressly consent. Any use of data for AI improvement is handled in accordance with applicable PDPA and PDPC guidance.
Safety, security, and compliance
- Detect and investigate fraud, abuse, security incidents, and technical problems.
- Enforce our Terms of Service and other agreements.
- Comply with applicable law, court orders, and lawful government requests.
Communications, analytics, and improvement
- Send account verification, service updates, and security alerts.
- Respond to enquiries and requests.
- Send marketing communications only with consent; you may opt out at any time.
- Understand product usage, measure feature and campaign effectiveness, and create aggregated or de-identified business insights.
05
Consent
How consent is obtained
We obtain consent before collecting, using, or disclosing personal data unless an exception under the PDPA applies. Consent may be express, such as selecting a consent checkbox, or deemed from your voluntary provision of data for a stated purpose. Where permitted, consent may also be deemed by notification after notice and a reasonable opportunity to opt out.
Withdrawing consent
You may withdraw consent at any time by emailing privacy@paperguru.ai. We will process the request within a reasonable period and explain relevant consequences, which may include our inability to provide some Services. Withdrawal does not affect processing that was lawful before the withdrawal.
06
Disclosure of personal data
We do not sell your personal data. We may disclose data to the following recipients for the purposes described in this policy:
- Service providers supporting payment processing, cloud hosting, analytics, performance monitoring, customer support, communications, security, and fraud prevention.
- Business partners involved in integrated or co-branded features that you choose to use.
- Parties to a corporate transaction such as a merger, acquisition, restructuring, or sale of assets, subject to appropriate notice.
- Legal and regulatory authorities where disclosure is required or permitted by law, needed to enforce agreements, or necessary to protect rights, property, or safety.
- Other parties with your express consent.
Our service providers are contractually required to protect personal data and may use it only for the purposes for which it was disclosed.
07
Cross-border transfers
Personal data may be transferred to, stored in, or processed outside Singapore where our providers or infrastructure operate. For example, Stripe may process payment information in the United States or other jurisdictions.
In accordance with Section 26 of the PDPA, we take steps to ensure overseas recipients provide protection comparable to the PDPA. These steps may include binding contractual safeguards, transfers to jurisdictions with comparable legal protection, or your informed consent where appropriate.
08
Data retention
We retain personal data only as long as needed for the purpose for which it was collected or as required by law. Factors include the duration of your account or business relationship, legal and regulatory obligations, audit and record-keeping needs, and the establishment, exercise, or defence of legal claims.
When data is no longer required, we delete or anonymise it. Data that has been anonymised so that it can no longer identify an individual may be retained and used indefinitely.
10
Data protection and security
We use reasonable physical, technical, and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, modification, loss, or disposal. Measures include encryption in transit and at rest, access controls, role-based permissions, security testing, staff training, and incident-response procedures.
No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials and controlling access to your devices and accounts.
11
Your rights under the PDPA
Access
You may request access to personal data we hold about you and information about its use or disclosure during the previous year. We aim to respond within 30 days or another period permitted under the PDPA. A reasonable administrative fee may apply.
Correction
You may ask us to correct personal data that is inaccurate, incomplete, or misleading. Where required, corrected data will be sent to organisations to which it was disclosed during the previous year.
Withdrawal of consent
You may withdraw consent for a specific purpose at any time, subject to the consequences described in Section 5.
Data portability
Where the PDPA data-portability provisions apply, you may request transfer of qualifying personal data to another organisation in a commonly used machine-readable format, subject to applicable conditions.
How to exercise your rights
Email privacy@paperguru.ai or submit a request through the privacy request form. We may verify your identity before processing a request.
12
Children's personal data
The Services are not intended for children under 13, and we do not knowingly collect their personal data. If we learn that data from a child under 13 was collected without appropriate parental or guardian consent, we will take steps to delete it promptly.
For users aged 13 to 18, we may require parental or guardian consent where PDPA or PDPC guidance indicates that the individual may not have sufficient understanding to provide valid consent. Concerns may be sent to privacy@paperguru.ai.
13
Data Protection Officer
AutoTrust AI Pte. Ltd. is in the process of appointing a Data Protection Officer. Until the appointment is complete, our privacy team handles data-protection questions, concerns, and complaints.
- Company
- AutoTrust AI Pte. Ltd. (UEN: 202300999D)
- privacy@paperguru.ai
- Address
- 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
When a DPO is formally appointed, this policy will be updated with the relevant contact details.
14
Third-party links and services
The Services may link to third-party websites or services that we do not operate or control. This policy does not govern those third parties. Review their privacy terms before providing personal data. For payment processing, see the Stripe Privacy Policy.
15
Aggregated and anonymised data
We may create aggregated, de-identified, or anonymised information by removing elements that identify an individual. Data that cannot identify an individual is not personal data under the PDPA and may be used or disclosed for lawful purposes, including analytics, research, and service improvement.
16
Governing law
This Privacy Policy is governed by the laws of the Republic of Singapore. Disputes arising from or connected with this policy are subject to the exclusive jurisdiction of the courts of Singapore.
17
Contact us
For questions or concerns about this policy or our data practices, contact:
- Company
- AutoTrust AI Pte. Ltd.
- UEN
- 202300999D
- Product
- ScienceGuru
- privacy@paperguru.ai
- Address
- 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
- Website
- scienceguru.ai