Privacy Policy

Version 1.0
Effective 30 June 2026
Last updated 30 June 2026

1. Overview

Podyx Pte. Ltd. ("Podyx", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, why, how we use and share it, how long we keep it, and the rights you have. We aim for clarity, not surprises.

This policy applies to:

• Studios and their staff who use our platform (our customers and prospects).
• Visitors to our marketing and product websites.

It does not cover personal data that a Studio collects about its own customers ("End Users") through the Services. For that data the Studio is the controller and Podyx acts only as its processor under our Data Processing Agreement. See Section 11.

2. Who is responsible for your data

The controller of the personal data described in this policy is Podyx Pte. Ltd., UEN 202403560C, registered at 160 Robinson Road, #14-04, Singapore 068914.

For privacy questions or to exercise your rights, contact our Data Protection Officer at privacy@podyx.com, or write to us at the address in Section 14.

3. The personal data we collect

Account and profile data. Name, business name, email address, phone number, password (stored hashed), role, and preferences, collected when you create an account, start a trial, or configure your Studio.

Billing data. Plan, billing records, and the limited payment metadata our payment processor returns to us. We do not store full card numbers; card payments for your Podyx subscription are handled by our payment processor.

Usage and device data. How you interact with the Services, including log data, IP address, browser and device type, pages viewed, and actions taken, collected through cookies and similar technologies.

Support and communications data. Messages, attachments, and records of your contact with our support and sales teams, including chat and email.

Marketing data. Information you give us through forms, demos, events, or our community, and your communication preferences.

4. How we collect personal data

We collect data directly from you when you sign up, configure your Studio, pay, contact support, or fill in a form; automatically through cookies and similar technologies when you use our sites and the Services; and from third parties such as our payment processors.

5. How we use personal data and our legal bases

We use personal data to: provide, operate, and secure the Services; set up and bill your subscription; provide support; communicate with you about your account and service changes; understand and improve how the Services are used; send marketing where permitted, which you can opt out of at any time; detect and prevent fraud, abuse, and security incidents; and comply with legal obligations.

Where GDPR applies, our legal bases are: performance of our contract with you; our legitimate interests in running and improving our business (balanced against your rights); your consent (for example, certain cookies and marketing); and compliance with legal obligations. Where Singapore's PDPA applies, we rely on consent and the exceptions the PDPA permits, including legitimate and business-improvement purposes.

6. How we share personal data

We share personal data only as needed and with appropriate safeguards. Our service providers (sub-processors) currently include:

• Amazon Web Services — cloud hosting and storage.
• Stripe and Square — subscription billing and payment-related processing.
• Google — calendar and maps services.
• Intercom — customer support and in-product messaging.
• Resend — transactional and notification email.

We also share personal data with professional advisers and authorities where required by law, legal process, or to protect our rights, users, or the public, and in connection with a merger, acquisition, financing, or sale of assets, subject to this policy. An up-to-date sub-processor list is available on request.

We do not sell your personal data.

7. International data transfers

Our platform is hosted on Amazon Web Services, and personal data is currently processed and stored in the United States (AWS US East region). The region may change over time as we operate the Services. Because our company is in Singapore and our customers are international, your personal data may be transferred across borders.

Where we transfer personal data internationally, we use a lawful transfer mechanism, such as an adequacy decision or the relevant Standard Contractual Clauses, and apply appropriate safeguards.

8. How long we keep personal data

We keep personal data for as long as your account is active and as needed to provide the Services. After you cancel, we retain your account data for one hundred and eighty (180) days, during which it can be exported, and then permanently delete it, unless we are required to keep specific records longer to meet a legal, tax, accounting, or dispute-related obligation. Aggregated or anonymised data that no longer identifies you may be kept for analytics.

9. How we protect personal data

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No system is perfectly secure, but we work to protect your data and to respond promptly to incidents. Our security measures for End User data we process on behalf of Studios are detailed in the DPA.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. You can manage much of your data in the Services, and you can opt out of marketing using the unsubscribe link or by contacting us. To exercise any right, email privacy@podyx.com. We will respond within the time the law requires. You also have the right to complain to your data protection authority, such as the PDPC in Singapore or your EU or UK supervisory authority.

11. End Users' personal data

When a Studio uses the Services to collect and manage data about its own customers, the Studio is the controller of that data and decides how it is used. Podyx processes that data only on the Studio's instructions, as its processor, under our Data Processing Agreement. If you are an End User and want to access, correct, or delete your data, contact the Studio you booked with. We will support the Studio in responding to your request.

12. Cookies and similar technologies

We use cookies and similar technologies on our sites and in the Services to keep you signed in, remember preferences, measure performance, and, with your consent where required, for analytics and marketing. You can manage non-essential cookies through our cookie banner or your browser settings.

13. Children

The Services are for businesses and are not directed to children. We do not knowingly collect personal data from children. Studios are responsible for any age requirements that apply to their own End Users.

14. Changes and how to contact us

We may update this policy from time to time. We will post the updated version with a new version number and date and, for material changes, give notice through the Services or by email. Prior versions are available on request.

Questions, requests, or complaints: privacy@podyx.com, or Podyx Pte. Ltd., Attention: Data Protection Officer, 160 Robinson Road, #14-04, Singapore 068914.