Flex International Hub - Privacy Policy for Fintech Company Users

This Privacy Policy explains how we collect, use, and share your company's and your representative's personal data in compliance with Singapore's Personal Data Protection Act (PDPA) and other applicable global regulations.

1. Data We Collect

• Data You Provide: Full Name (of representative), Email, Password, Company Name, Legal Registration Number, Funding Stage, Mission Statement, Company Tags, and your uploaded Pitch Deck.
• Technical Data: IP address, browser type, device information, cookies, and usage logs (collected via our backend, e.g., Supabase).

2. How We Use Your Data (Purpose)

We use your data for the following purposes, for which we seek your consent:

• To create and secure your account.
• To verify your company's legal status against official registries.
• To display your Public Profile Data, Brand Assets, and Pitch Deck to all other Users to facilitate connections.
• To recommend relevant Investors and talent (CFtP Users) to you.
• To analyze platform usage and create anonymized, aggregated trend reports for GFI's research.
• To communicate with you about service updates.

3. Data Sharing and Disclosure

We share your data with the following parties:

• ALL Other Registered Users: Your Public Profile Data and Pitch Deck are visible to all Users.
• Service Providers: We share data with third-party vendors who help us operate the Platform, such as our cloud and database provider (Supabase).
• International Transfers: Our service providers may be located outside of Singapore. When we transfer your data, we will ensure that it is protected to a standard that is comparable to the protection under the PDPA.
• Legal Authorities: If required by law, subpoena, or to protect our legal rights.

4. Data Security and Retention

We implement reasonable technical and organizational measures to protect your data from unauthorized access, use, or disclosure. In the event of a data breach, we will take steps to assess and mitigate the harm and will notify you and the relevant authorities as required by law.

We retain your data for as long as your account is active, and as required to comply with our legal obligations. Following the 14-day termination notice period, your data will be securely deleted or anonymized in accordance with our internal data retention schedule.

5. Your Rights (PDPA & GDPR)

Subject to applicable law, you (as a representative) have the right to:

• Access the personal data we hold about you.
• Correct any inaccuracies in your data.
• Withdraw Consent at any time by terminating your account. You acknowledge that withdrawing consent does not affect the legality of data processing that occurred before your withdrawal and does not recall Pitch Decks or data already downloaded by other Users.
• Request Deletion of your data, subject to our legal obligations.

To exercise these rights, please contact our Data Protection Officer at info@globalfintechinstitute.org.