Skip to content
HomeLegalPrivacy Policy

Dagsis Privacy Policy

Singapore PDPA & GDPR Aligned
OFFICIAL LEGAL DOCUMENT
UEN: 202641491D

Dagsis Privacy Policy

Entity: DAGSIS AI PTE. LTD.•Singapore Incorporated

Introduction

DAGSIS AI PTE. LTD. of 06-137, Block 555, Pasir Ris Street 51, Singapore-510555, with company registration (UEN) number 202641491D, is committed to protecting and respecting your privacy.

We are committed to the protection of the personal data we process in line with the data protection principles set out in the Personal Data Protection Act 2012 of Singapore, as amended ("PDPA"), and, where applicable to our clients and their end users in other jurisdictions and any other relevant data protection legislation in place from time to time in the territories in which we or our clients operate. Consideration has also been given to other State, Federal, and international data protection laws applicable to us which are not referenced here.

We have aligned our company data protection compliance programme to the core requirements of the PDPA, as the primary regulation governing our operations as a Singapore-incorporated company, while also having regard to the GDPR as an internationally recognised standard of data protection.

This Privacy Policy explains how we treat personal information processed on our platform, Dagsis AI, what we collect when you visit our website, contact us by email, phone, or through one of our social channels, or through other communications. It also explains what information we collect automatically when you visit our website and the information we collect when you use our services.

Please also be aware that our clients have their own privacy policies on their respective websites.

Our work is predominantly as a Processor (or "Data Intermediary" under the PDPA) for our clients; however, DAGSIS is the Controller for our employee data and for the contact details of our clients. As a company incorporated in Singapore, we are subject to the jurisdiction of, and to enforcement action by, the Personal Data Protection Commission of Singapore ("PDPC").

As an information-led business, we place great importance on ensuring the quality, confidentiality, integrity, and availability of the data we hold, and in meeting our data protection obligations when processing personal data. We are committed to protecting the security of your personal data. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use, or disclosure.

What information do we process?

Information provided by our clients

The categories of personal data processed by us varies between clients, but may include:

  • Name
  • Email Address
  • Telephone number
  • Business name
  • Location data
  • Personal data processed on our Dagsis platform, determined by the Controller

Information provided to us via our website

We process all information you provide to us via our website, by telephone, email, or otherwise. This includes information you provide when you register for our services as a client, enquire about a product or service, use one of the social media functions linked to our website, or when you report a problem with our website.

The categories of personal data processed may include:

NameEmail AddressTelephone numberLocation data

Cookies

DAGSIS uses cookies on our website. Cookies are small text files. They are downloaded to your device when you visit a website, unless you have set your browser to reject them.

We use cookies to remember your preferences and improve your overall experience of our site.

Type of CookiePurpose
Session CookiesSession cookies support essential website functions, such as maintaining your signed-in session and enabling transactions. They are stored temporarily in your browser and generally expire when the browser session ends.
Third-party cookiesThird-party analytics cookies help us understand how visitors use our website and improve its performance. Depending on the provider and configuration, information collected may include device and browser details, online identifiers, and website usage data. We obtain consent for these cookies where required by applicable law.

To learn more about cookies, and what you can do to opt out of receiving them, please visit: https://www.allaboutcookies.org/

Purposes and bases for processing your personal data

We may use your data for the following purposes and on the following lawful bases:

PurposesLawful Bases for Processing
Responding to correspondence from youIt is in our legitimate interest to respond to enquiries made through our website, by telephone, email, through our social channels, or any other means.
Processing data to facilitate client service requirementsWe process personal data under written instruction, bound by the contract between us and our client.
Business management, forecasting, and statistical purposesIt is our legitimate interest to identify areas for managing current business relationships, develop our services, and for managing our business.
Providing AI-assisted responses through customer-configured agents and knowledge basesWe process customer content and end-user personal data on the client's documented instructions to provide the contracted services. This processing supports indexing, information retrieval, and response generation; it does not involve using that data to train general-purpose AI models.
Improving our website and the overall website visitor and user experienceIt is our legitimate interest to allow analytics and search engine providers to help improve and optimise our website.
Improving our website and the overall website visitor and user experience (Cookies)We use cookies on our website with your consent.
Prevention and detection of crime including money laundering, fraud, or other crimesWe have a legal obligation to report any such activity to the relevant authorities and regulators.
Responding to suggestions and complaints in order to continually improve the services we provideIt is in our legitimate interest to provide the best service to users of our website and to increase features in order to continually improve and expand the services we provide.
Understanding website usage and improving website performance and user experienceWhere analytics involves cookies or similar technologies requiring consent, we obtain your consent before using those technologies. Any separate processing of website usage data is carried out on the basis permitted by applicable law for that activity.

Sharing your information

If sharing your personal data becomes necessary for the purposes of providing our services to you, we will only share it where appropriate safeguards are in place, with supplementary measures, to ensure your personal data is protected to the same standard expected under the PDPA.

We may, on occasion, engage the services of a third-party sub-Processor. Any such third party will act under our written instructions and will adhere to strict data protection obligations, including the implementation of appropriate technical and organisational measures.

We engage third-party service providers to support hosting infrastructure, website performance and management, error monitoring, customer support, and other service functions. Where these providers process personal data on our behalf, they do so under written contracts requiring appropriate confidentiality, security, and data protection measures.

AI subprocessors & Model Training Protection

Dagsis uses third-party model and infrastructure providers as subprocessors to deliver AI functionality (e.g., AI/ML indexing services, cloud storage providers such as AWS S3, email delivery services).

Subprocessor access to customer content and end-user data is limited by contract and service configuration, and only to the extent necessary to provide the service.

Zero Training Guarantee: Customer content and end-user conversations are NOT used to train general-purpose AI models. They are processed solely to build and maintain search indexes for the customer's own AI agents and to operate the service.

Our website includes links to social media platforms and messaging services (e.g., WhatsApp, Facebook, Instagram). Once you navigate away from our site via one of the links, the site may collect your IP address and may set a cookie on your device. When you use one of these links, you are sharing information with another website or service, and this Policy will no longer apply. Please read the privacy policies provided by the particular service website you are directed to, before posting any personal information using these links.

Payments made through our website or our platform are processed by Stripe. When you make a payment, certain personal data (such as your name, billing address, payment amount, and payment method) are collected and processed directly by Stripe for the purpose of completing the transaction and preventing fraud. Stripe acts as a Processor when facilitating payment transactions on our behalf and as an independent Controller for certain other processing activities, including fraud prevention and meeting its own legal and regulatory obligations. Further information about Stripe’s handling of personal data is available in Stripe’s Privacy Policy.

Channel Integration Data Handling

Dagsis allows users to connect supported social media and messaging accounts through OAuth authentication or other API authentication methods supported by the relevant platform. Depending on the connected channel, permissions granted, and features used, we may access and process account identifiers, message content, sender and recipient information, attachments, timestamps, and related message metadata.

This information is stored in our databases and storage infrastructure to provide messaging, communication management, automation, and AI-assisted features. Service providers engaged to support these functions process the information under written contracts and only as necessary to provide their services.

DAGSIS may use data from connected accounts to provide AI-assisted features for the benefit of the user whose account is connected or presented within Dagsis. This data is not used to train generalised AI models, and is not transferred to third parties except as necessary to provide these features. Data from connected accounts is not used for marketing purposes. You may disconnect a connected account at any time through your channel or account settings. Disconnection stops further data synchronisation, and we cease using the authentication credentials associated with that connection. Where supported by the relevant platform, access permissions are also revoked. Information already stored is handled in accordance with the “Data retention” section of this Privacy Policy.

Direct Linked Device / QR Session Data Notice:Where a client connects a messaging account via QR code device linkage (such as WhatsApp Web session), message events from that line are processed in memory solely to execute AI agent response logic for incoming queries. Unrelated private communications are discarded and are not retained in our persistent database. Clients are advised to deploy agents on a dedicated business communication line.

Your rights

Where Dagsis acts as Controller of your personal data, you may submit requests concerning your rights directly to us. Where we process your personal data on behalf of a client as a Processor or Data Intermediary, the relevant client is responsible for responding to such requests. In these circumstances, please contact that client directly. If we receive your request, we will refer it to the relevant client and assist them in accordance with our contractual obligations and applicable law.

The PDPA, and, where applicable to you, the GDPR or other relevant data protection law, provides you with certain rights in relation to the processing of your personal data, including to:

  • Access: Request access to personal data about you. This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully.
  • Correction: Request correction of any personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Portability: Request personal data provided by you to be transferred, in certain circumstances, to another organisation in a structured, commonly used, and machine-readable format ("data portability"), where this is technically feasible.
  • Deletion & Objection: Request the deletion or anonymisation of personal data that is no longer necessary for the purpose for which it was collected, or object to processing carried out on the basis of our legitimate interests, subject to applicable exceptions.

Exercising Your Rights

To exercise any of the rights listed above, or to raise a concern or complaint regarding the handling of your personal data, you may contact our Data Protection Officer (DPO) at arvinder.kaur@dagsis.ai

Our appointed DPO is responsible for overseeing the protection of your personal data and addressing requests and enquiries relating to its collection, use, disclosure, and retention.

If at any time you decide that you no longer wish to be contacted for marketing purposes, or if you would like to exercise any of your rights as set out above, you can contact us at support@dagsis.ai. If you are concerned about how your personal data is handled, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) or, where applicable, another relevant supervisory authority in your jurisdiction.

Data retention

We retain personal data for as long as necessary to provide our services and fulfil the purposes described in this Privacy Policy.

Disconnected Channels:Personal data previously collected through that account will be retained for up to 30 days after disconnection and securely deleted thereafter.
Account Termination:Knowledge-base content and conversation history will be securely deleted within 30 days after account deletion or subscription end.

Where we process personal data on behalf of a client, retention and deletion are also governed by that client’s documented instructions and our contractual obligations.

Children's data

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16.

If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us at support@dagsis.ai. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to remove that information from our servers.

Contact Us

You can contact us in relation to data protection and this Policy by emailing: