Last updated: September 2026
TokenWave AI Pte. Ltd. ("TokenWave AI", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use our website and our services, why we collect it, how we use, disclose and protect it, and the rights available to you. It is published in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").
1. Personal Data We Collect
Data you give us: your name, email address, phone number, organisation details and anything you write in our contact, consultation or newsletter forms; and, if you apply for a role, your CV, employment history, current and expected salary, notice period and any profile links you include.
Data collected automatically: only if you accept analytics cookies - general usage information such as browser, device type, pages viewed, time on page and approximate location, gathered through Google Analytics with IP anonymisation switched on.
2. Why We Use Your Personal Data
We use personal data to reply to enquiries and session requests; to deliver, administer and improve our services; to assess job applications and keep in touch with candidates; to send updates you have signed up for; to understand how visitors use our website; and to keep our website and systems secure and meet our legal obligations.
3. Consent and Purpose
We collect, use and disclose personal data with your consent, which you give when you submit a form or accept analytics cookies, or where the PDPA otherwise permits, for example to respond to a request you have made or to comply with the law. We use your personal data only for the purposes we have notified to you. You may withdraw your consent at any time by contacting our Data Protection Officer; we will tell you the likely consequences of withdrawal, and withdrawal does not affect processing carried out before it.
4. Data Shared for AI Projects
Data you provide for an AI project is used for that project alone, is governed by a written agreement, and is never used to train models for any other client unless you give explicit written permission. Where your requirements call for it, project data is processed inside your own cloud or on-premise environment.
5. Cookies and Site Analytics
We use Google Analytics to understand how people use this website. Analytics cookies are placed only after you accept them in the cookie banner. You can change your mind at any time by clearing this site's data in your browser, or block cookies entirely in your browser settings.
6. Disclosure to Third Parties
We never sell or rent personal data. We disclose it only to reliable service providers that help us run our business - such as website hosting, email and analytics providers - under suitable confidentiality obligations, or where the law, a court order or a public authority requires it.
7. Overseas Transfers
Some of our service providers may process data overseas. Where this happens, we take appropriate steps, as required by the PDPA, to ensure that your personal data receives a standard of protection comparable to that under the PDPA - for example through contractual obligations with the recipient.
8. Protecting Your Data
We make reasonable security arrangements, including access controls, encryption in transit and restricted access on a need-to-know basis, to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss or similar risks. If a data breach occurs, we will assess it and notify the Personal Data Protection Commission and affected individuals where the PDPA requires.
9. How Long We Keep Data
We retain personal data only for as long as it serves the purposes for which it was collected or is required for legal or business purposes. Enquiry records are kept for as long as needed to manage our relationship with you. Job applications and CVs are retained for up to 12 months so we can consider you for future openings, unless you ask us to delete them sooner. When personal data is no longer needed, we delete it or anonymise it.
10. Access, Correction and Withdrawal
Subject to the PDPA, you may: request access to the personal data we hold about you and information about how it has been used or disclosed in the past year; request correction of any error or omission in your personal data; and withdraw your consent for its collection, use or disclosure. We may charge a reasonable fee for access requests and will tell you the fee in advance. Visitors from the European Union may also have rights under the GDPR. To exercise any right, contact our Data Protection Officer below.
11. Minors
This website and our services are aimed at organisations and adults. We do not knowingly collect personal data from anyone under 18. If you think a minor has given us personal data, contact us and we will erase it.
12. Data Protection Officer
If you have any questions, requests or complaints about how we handle your personal data, please contact our Data Protection Officer:
Data Protection Officer
TokenWave AI Pte. Ltd.
Singapore
Email: info@your-domain.com
Phone: +65 0000 0000
We will acknowledge your request promptly and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC).
13. Updates to This Policy
We may revise this policy periodically. Any revision will appear on this page with a new "Last updated" date, and we will flag material changes on our website.
14. How to Reach Us
For any other questions about this Privacy Policy, email info@your-domain.com or visit our contact page.
