Privacy, Confidentiality & Business Terms

Last updated: 20 September 2026

This page covers our website, email and attachments, messaging, meetings, proposals, service delivery and other business dealings. It brings together our privacy notice, confidentiality provisions and general terms for business communications.

1. Introduction and scope

HI LABS PTE. LTD. (UEN 202633920K) ("Hi Labs", "we", "us" or "our") is a private limited company incorporated in Singapore providing software development and information technology consultancy services. We are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA").

This Privacy Policy explains how we collect, use, disclose, protect and retain personal data in connection with our website at hilabsstudio.ai (the "Site"), email and attachments, telephone and video calls, messaging platforms, meetings, enquiries, quotations, proposals, contracts, invoices, projects, support and other commercial dealings, whether online or offline. It applies to our interactions with clients, prospective clients, suppliers, contractors, business partners and their representatives, as well as website visitors. "Personal data" has the meaning given to it in the PDPA — data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which we have or are likely to have access.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Contact and identity details — name, business name, role or job title, email address, phone number and address;
• Account and billing data — account identifiers, billing contact details and transaction records relating to the services we provide;
• Correspondence and commercial records — email addresses, message content, attachments, business contact details, meeting notes, quotations, contracts, invoices and records of our dealings with you;
• Project and support information — communications, requirements, files and technical information you share with us in the course of an engagement or a support request;
• Website and technical data — IP address, browser type, device information, pages visited and interactions with the Site, collected through cookies and similar technologies as described in our Cookie Policy.

We do not store complete credit or debit card numbers. Payments are processed by reputable third-party payment providers under their own security standards.

3. How we collect personal data

We collect personal data directly from you (for example, when you email or message us, attend a meeting, exchange documents, request a quote, supply goods or services, or engage our services), automatically through your use of the Site, and, where appropriate, from third parties such as your organisation, business partners or publicly available sources.

4. Purposes for which we use personal data

We collect, use and disclose personal data with your consent, or where consent is deemed to have been given, or where otherwise permitted or required under the PDPA and other applicable laws, for the following purposes:

• providing, operating and improving our services and the Site;
• responding to enquiries and preparing quotes and proposals;
• managing correspondence, engagements, projects, supplier and partner relationships, and ongoing client relationships;
• administering contracts, purchases, invoices and payments, and maintaining correspondence, accounting and business records;
• maintaining the security and integrity of our systems and preventing fraud and misuse;
• handling complaints and disputes, establishing or defending legal claims, and complying with our legal and regulatory obligations; and
• with your consent, sending you updates, newsletters or marketing communications relevant to you (you may opt out at any time).

5. Disclosure of personal data

We do not sell personal data. We may disclose personal data to:

• our service providers and data intermediaries who process data on our behalf (for example hosting, analytics, communications and payment providers), under obligations of confidentiality and security consistent with the PDPA;
• third-party artificial intelligence service providers, where relevant to the services we deliver — we take reasonable steps to restrict the use of your data for training publicly available models;
• professional advisers such as lawyers, accountants and auditors, where reasonably necessary; and
• regulators, law enforcement or other authorities where disclosure is required or authorised by law.

6. Overseas transfers

Some of our service providers may store or process personal data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide the transferred data a standard of protection comparable to that under the PDPA, in accordance with the transfer limitation obligation under the PDPA.

7. Marketing, Do Not Call and spam

We will only send you marketing communications where you have consented, or where otherwise permitted by law, and every marketing message we send will include a means to unsubscribe. We comply with the Do Not Call provisions of the PDPA in relation to telemarketing messages and calls to Singapore telephone numbers, and with the Spam Control Act 2007 in relation to commercial electronic messages. To opt out at any time, use the unsubscribe link in our messages or contact us at hello@hilabsstudio.ai.

8. Cookies and website analytics

The Site uses cookies and similar technologies for functionality, preferences, analytics and, with your consent, marketing. For details, including how to manage your preferences, please see our Cookie Policy.

9. Protection of personal data

We implement reasonable security arrangements to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include encryption in transit and at rest where appropriate, multi-factor authentication, access controls on a need-to-know basis, and periodic review of our safeguards.

10. Retention of personal data

We retain personal data only for as long as it is necessary for the purposes for which it was collected, or as required for legal or business purposes. When personal data is no longer required, we take reasonable steps to securely destroy it or anonymise it.

11. Access and correction

Subject to the exceptions in the PDPA, you may request access to personal data we hold about you and information about how it has been used or disclosed within the preceding year, and you may request the correction of any error or omission in your personal data. We may charge a reasonable fee for access requests as permitted by the PDPA. We will respond to requests as soon as reasonably possible; if we are unable to respond within thirty (30) days, we will inform you in writing of the time by which we will respond.

12. Withdrawal of consent

You may withdraw your consent to our collection, use or disclosure of your personal data at any time by giving us reasonable notice at Legal@hilabsstudio.ai. Upon withdrawal, we will inform you of the likely consequences (for example, that we may no longer be able to provide certain services to you), and we will cease the relevant collection, use or disclosure unless it is otherwise permitted or required by law.

13. Data breach notification

We maintain processes to assess and respond to data breaches. Where a data breach is notifiable under the PDPA — that is, it results in, or is likely to result in, significant harm to affected individuals, or is of a significant scale — we will notify the Personal Data Protection Commission ("PDPC") and, where required, affected individuals, in accordance with the timelines prescribed under the PDPA.

14. Third-party websites

The Site, our emails and other communications may contain links to websites or platforms operated by third parties. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

15. Contacting us and complaints

If you have any questions, requests or complaints regarding this Privacy Policy or our handling of your personal data, please contact our Data Protection Officer:

• Data Protection Officer: Legal@hilabsstudio.ai
• General enquiries: hello@hilabsstudio.ai
• Post: HI LABS PTE. LTD., 51 Lorong 21 Geylang, #04-03 Space 21, Singapore 388466

We will investigate and endeavour to resolve any complaint within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission, Singapore (www.pdpc.gov.sg).

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically. Changes to the business communication terms below apply prospectively and do not amend an existing contract without the agreement required by that contract and applicable law.

17. Confidentiality of emails and business information

Our emails, attachments and other business communications may contain confidential, commercially sensitive or legally privileged information intended for the named recipients. Confidential information includes non-public proposals, pricing, designs, source code, credentials, business plans, client or supplier information and project materials that are marked confidential or should reasonably be understood to be confidential from their nature or the circumstances.

Intended recipients should use this information only for the purpose for which it was shared, protect it with reasonable care and limit disclosure to people who need it for that purpose and are subject to appropriate confidentiality obligations. Any legally binding confidentiality duties arise under applicable law or an agreed obligation, including an NDA or service agreement; an email footer alone does not create an agreement.

If you receive a communication in error, please notify the sender promptly and delete it and its attachments. Please do not use, copy, forward or disclose the information. Where retention is legally required, retain only what is required and keep it protected. Accidental disclosure is not intended to waive confidentiality or any applicable legal privilege; labelling a communication does not itself make it legally privileged.

Confidentiality restrictions do not apply to information lawfully in the public domain, already lawfully known without restriction, independently developed, or lawfully received from another source without a duty of confidence. Disclosure is permitted where authorised or legally required, including protected reporting to regulators or law enforcement. Where lawful and practicable, give prior notice of compelled disclosure and disclose only what is required.

18. General terms for business communications

Scope and agreement. These provisions concern emails, attachments, messages, discussions, quotations, proposals, demonstrations and other commercial communications involving Hi Labs. They apply as contractual terms only to the extent validly incorporated into an agreement and accepted under applicable law. Receiving an email, visiting this page or remaining silent does not by itself constitute acceptance of commercial terms or consent to marketing.

Agreed contracts take priority. Any applicable signed or otherwise binding service agreement, statement of work, NDA, data processing agreement, accepted quotation or other specific agreement takes priority over this page to the extent of a conflict. Project scope, fees, payment terms, delivery dates, support, warranties, intellectual property rights and liability are governed by the relevant agreement. This page does not replace or unilaterally amend it.

Proposals and authority. Preliminary discussions, draft proposals, estimates and demonstrations are for evaluation unless expressly offered as binding. An engagement or change to it requires agreement by authorised representatives in accordance with the applicable contract and law. Electronic communications can form a binding agreement when the legal requirements are met; an email signature alone does not establish authority to commit Hi Labs.

Intellectual property and permitted use. Sharing a proposal, attachment, demonstration, software or other material does not transfer intellectual property ownership or grant rights beyond the stated purpose or applicable agreement. Materials may be reviewed and shared internally on a need-to-know basis for evaluating or carrying out the intended business relationship, subject to confidentiality and any agreed licence. Further reproduction, publication, commercial exploitation or use to train AI models requires the relevant rights holder's permission or another lawful basis.

Accuracy, security and verification. Preliminary information and AI-assisted outputs may contain errors and should be checked before material decisions are made. This does not reduce any agreed service standard or responsibility. Electronic communications can be delayed, altered, intercepted or contain harmful content. Use appropriate security precautions and independently verify unusual payment instructions, changes to bank details and sensitive requests through an established contact channel.

Rights and liability. Responsibility and remedies for our services remain governed by the applicable agreement and law. Nothing on this page excludes or limits liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any liability, consumer protection, right or remedy that cannot lawfully be excluded or limited.

Applicable law. Where these business communication terms are validly agreed, they are governed by Singapore law and subject to the non-exclusive jurisdiction of the Singapore courts, unless the applicable agreement provides otherwise. Mandatory protections under applicable law remain unaffected. Website use is also addressed in our Website Terms of Use.

19. Email footer reference and contact

Where a Hi Labs email refers to our “confidentiality provisions and T&C”, it refers to sections 17 and 18 of this page. The privacy notice above explains our handling of personal data across those communications and our wider business dealings.

Questions about these provisions or a misdirected communication may be sent to the original sender or Legal@hilabsstudio.ai. General enquiries: hello@hilabsstudio.ai.