Privacy Policy

Who we are

[OPERATING COMPANY LEGAL NAME] (UEN [UEN]), [REGISTERED ADDRESS], Singapore. Data protection officer: [DPO NAME], [CONTACT E-MAIL].

Two roles

For the business records companies keep in their workspace (their customers, contacts, shipments and documents), the company is in control and Optivis processes the data on its behalf, under our Data Processing Agreement.

For our own customers' account and billing details, Optivis is responsible, as described here.

What we collect

Account details: names, work e-mail addresses, roles, sign-in times and the IP addresses of sign-ins and security-relevant actions.

Billing details: company name, billing contact and address, and tax number; card details are handled by Stripe and never reach us.

Service data: the audit log of changes in each workspace, and technical logs kept to run and secure the service.

Why we use it

To provide and secure the service, bill for it, send service e-mails (verification, password resets, billing notices) and help when you ask for support. We don't sell personal data or use it for advertising.

Where it's kept

Data is stored in Singapore. Some sub-processors (listed on our sub-processors page) process limited data elsewhere, under safeguards required by the PDPA.

How long

Workspace data is kept while the workspace exists, and deleted 30 days after an administrator asks for the workspace to be deleted. Backups roll over within [BACKUP RETENTION]. Billing records are kept as tax law requires.

Your rights

You can ask to access or correct your personal data, or withdraw consent, by writing to [CONTACT E-MAIL]. If your data is in a company's workspace, we'll pass your request to that company.