Privacy Policy

Fluxo Pte. Ltd. (“Fluxo”, “we”, “us”) is a Singapore company that builds custom software and runs its own software products. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (“PDPA”). This policy explains what we collect through fluxo.com.sg and in our business dealings with you, why we collect it, and the choices you have.

What this policy covers

This policy covers the fluxo.com.sg website and the enquiries, proposals and correspondence we have with prospective and existing clients. It does not cover our software products. Each Fluxo product (for example, Selka at selka.sg) has its own privacy policy and terms, and those govern how that product handles data. Work we build for a client is governed by the agreement signed for that engagement, including any data protection terms in it.

What we collect

• When you use our contact form: your name and email address, and, if you choose to give them, your company name and phone number, plus the message you write and the page you sent it from.
• To protect the form from spam: a one-way hashed version of your IP address (we do not store the address itself) and your browser’s user agent string.
• When you email or message us: whatever you choose to send, including your contact details and the content of the conversation. This includes messages sent through the WhatsApp link on our site.
• When you work with us: business contact details, project information, and billing records needed to quote, deliver and invoice the work.
• Site usage statistics: aggregated page-view data (see “Analytics and browser storage” below).

Please don’t send us sensitive personal data (such as NRIC numbers or health information) through the contact form.

Why we use it

• To reply to your enquiry and follow up on the conversation you started.
• To prepare proposals and quotations, deliver the work you engage us for, and invoice for it.
• To keep the website and contact form secure and free of spam and abuse.
• To understand, in aggregate, which pages are useful so we can improve the site.
• To keep business records and meet our legal, accounting and tax obligations.

We use your data only for the purposes above, or for other purposes we tell you about and you agree to. We do not sell your personal data, and we do not add you to a marketing list because you filled in the contact form.

Analytics and browser storage

We use Vercel Web Analytics to count page views. According to Vercel’s documentation, it does not use third-party cookies, identifies visits by a hash of the incoming request that is discarded after 24 hours, and gives us aggregated statistics (such as page, referrer, country, device type and browser) rather than data about individual visitors.

The site stores your light or dark theme choice in your browser’s local storage so it is remembered next time. It stays on your device and is not sent to us. Our fonts are loaded from Google Fonts, which means your browser connects to Google’s servers to download them.

Who we share it with

We share personal data only where needed for the purposes above:

• Service providers who host and run our systems on our behalf, including Vercel (website hosting and analytics), Supabase (the database behind our internal enquiry system), and our email and messaging providers.
• Professional advisers such as our accountants, auditors and lawyers, where needed.
• Authorities or other parties where the law requires or permits us to disclose it.

Transfers outside Singapore

Some of our service providers store or process data on servers outside Singapore. When personal data is transferred overseas, the PDPA requires us to ensure the recipient is bound by legally enforceable obligations to protect it to a standard at least comparable to the PDPA. We do this by using providers that are bound by contractual data protection terms.

How we protect it

We make reasonable security arrangements to protect personal data. Data sent through our website is encrypted in transit, access to our internal systems is limited to the people who need it, and our enquiry system is protected by access controls at the database level. No system is completely secure, but we take care to reduce the risk of unauthorised access, loss or misuse.

How long we keep it

We keep personal data only for as long as it serves the purpose it was collected for, or as needed for legal or business reasons such as accounting and tax records. Enquiries that do not lead to a project are deleted or anonymised once they are no longer needed. Records of client engagements are kept for as long as required by law and by our agreements with clients.

Withdrawing consent

You can withdraw your consent for us to collect, use or disclose your personal data at any time by emailing us at the address below. Once we receive your notice, we will let you know the likely consequences (for example, that we can no longer continue a conversation or deliver a project), and then stop using the data for the purposes you withdrew consent for, unless the law requires or permits us to keep using it. Withdrawing consent does not by itself mean all records are deleted; we may still need to keep some records as described under “How long we keep it”.

Access and correction

You can ask us for a copy of the personal data we hold about you and how it has been used or disclosed in the past year, or ask us to correct data that is wrong or incomplete. Send your request to our Data Protection Officer. We may need to verify your identity first. We will respond as soon as reasonably possible. If we cannot respond within 30 days of receiving your request, we will tell you in writing within that time when we will be able to respond. We may charge a reasonable fee for an access request, but only after giving you a written estimate first.

Data Protection Officer

For any question, request or complaint about how we handle personal data, contact our Data Protection Officer:

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows the current version. Please also read our Terms of Use.