Privacy Policy.

1. Who we are and this policy

Viabells (“we”, “us” or “our”) is a Singapore-based integration and automation team. We are committed to protecting your privacy and taking reasonable steps to safeguard the personal information entrusted to us.

This policy covers our website, enquiries, business communications and the services and software we provide. “Personal information” means information about an identifiable individual, whether provided directly or identifiable together with other information we have or are likely to access.

Our privacy practices take account of Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other laws that apply to the relevant activity. Project agreements or specific privacy notices may explain additional processing. Where we handle information on a client’s instructions, section 12 explains the distinction between our responsibilities and the client’s.

2. Information we collect

The information involved depends on how you interact with us. We seek information relevant to the enquiry or service, rather than collecting it simply because it is available.

• Enquiry information: your name, company, email address, apps involved, description of the current and proposed workflow, desired timing, and any approximate volume or budget range you choose to provide.
• Communications and business records: information you share by email or during project discussions, including contact details, correspondence, proposals, agreements, support requests and relevant billing records.
• Technical and security information: IP address, browser and device characteristics, operating system, request times, requested pages, referring information where available, and signals used to protect the website and enquiry form from abuse.
• Service information: where an agreed integration requires it, relevant records, events, files, account identifiers, permissions and diagnostic information from the business systems you authorise us to access.

Required enquiry fields are marked on the form. If they are not provided, we may be unable to accept the form or assess the request. Optional fields can be left blank.

Please do not put passwords, API keys, payment card details, identity documents or unnecessary information about customers or employees into the enquiry form. Describe the workflow using examples that do not identify other people where possible. If a project needs sensitive information or account access, we will agree an appropriate method and scope separately.

3. How we receive information

Most information comes directly from you through our forms, email and project conversations. Technical information may be generated when your browser connects to our website or completes a security check.

For agreed services, we may receive information from your authorised colleagues, representatives, connected applications and service providers. If you provide someone else’s personal information, ensure you are authorised to do so and that they have received any notice required for the intended use. We do not obtain access to your app accounts merely because you name them in an enquiry.

4. How we use information

We use information for purposes connected with your interaction with us, including to:

• Respond to questions, understand your workflow, assess feasibility and prepare a scope, proposal or quotation.
• Deliver, configure, test, document and support agreed integrations and software services.
• Communicate about project progress, access arrangements, service issues and important updates.
• Manage our business relationship, agreements, invoicing and necessary administrative records.
• Detect spam, prevent misuse, investigate errors and maintain the security and reliability of our services.
• Improve our website and delivery processes through relevant operational analysis, using aggregated or de-identified information where practical.
• Meet applicable legal obligations, respond to lawful requests and establish or defend legal claims.

We may tailor our response or service recommendations to the needs you describe. Submitting an enquiry does not automatically subscribe you to promotional messages. We do not use personal information accessed through client integrations for our own advertising.

5. Consent and your choices

We notify you of relevant purposes and obtain consent where required. In some circumstances, applicable law permits collection, use or disclosure without consent; we rely on those provisions only where their requirements are met.

You can withdraw consent by contacting us with reasonable notice. We will explain any likely consequences, such as being unable to continue a particular service. Withdrawal applies to future processing that relies on that consent; it does not prevent processing or retention that remains required or permitted by law.

Visiting this website does not by itself constitute consent to unrelated marketing or every possible future use of your information. If we propose a materially different purpose, we will provide an appropriate notice and obtain further consent where required.

6. When we share information

We do not sell, trade or rent your personal information. We may disclose relevant information to the following recipients when needed for the purposes described in this policy:

• Our team and authorised contractors: people who need the information to assess your request, deliver a project or provide support, subject to appropriate confidentiality and access restrictions.
• Website and security providers: Cloudflare provides our website infrastructure, enquiry storage and security services, including Turnstile bot protection.
• Email providers: when enquiry notifications are enabled, the submitted details are sent to our team using Amazon Web Services’ Simple Email Service (Amazon SES). Our mailbox provider also processes emails and replies.
• Platforms involved in your project: information may pass between the apps you authorise as part of an agreed workflow. The systems, data fields and permissions depend on the project scope.
• Professional advisers and authorities: where reasonably necessary for professional advice, legal obligations, lawful requests, dispute resolution or protecting rights and security.

If our business is reorganised or transferred, relevant records may be shared with advisers or a successor, subject to applicable law and appropriate privacy safeguards. We may also share information with a recipient you specifically authorise.

Providers processing information on our behalf are expected to protect it and use it for the authorised service, subject to their applicable terms and legal responsibilities. Some providers also process certain technical information for their own stated purposes, as explained in their privacy notices.

7. International transfers

Our team is based in Singapore, but the internet infrastructure, email services and business apps involved in our work may process or store information in other countries. We do not represent that all information remains in Singapore.

Where the PDPA’s transfer requirements apply, we take appropriate steps to ensure overseas recipients provide a comparable standard of protection, unless a permitted exception applies. Depending on the arrangement, safeguards may include contractual obligations and assessment of the recipient’s protections. Contact us if you need more information about a particular project’s data locations or providers.

8. Cookies and security technologies

Cookies are small files stored by a browser. Similar technologies can include local storage, pixels and beacons. The current website does not include advertising pixels, behavioural advertising tools or third-party visitor analytics scripts, and does not use your browsing activity to personalise advertisements.

We use Cloudflare Turnstile to protect the enquiry form. It evaluates browser, device and network signals to distinguish people from automated abuse. Cloudflare also processes these signals to improve its bot detection. Security services may use necessary cookies or similar technologies depending on their configuration. See the Cloudflare Turnstile Privacy Notice for details.

You can manage cookies and site permissions in your browser. Blocking security scripts or necessary technologies may prevent the protected form from working. If we introduce optional analytics or marketing technologies, we will explain their purposes and provide choices or obtain consent where required before using them.

9. Protecting your information

We implement appropriate technical and organisational measures designed to reduce the risk of unauthorised access, disclosure, alteration or loss. Measures relevant to our website include encrypted connections in production, server-side form validation, bot protection and separation of server credentials from public website code.

For project work, access should be limited to what the agreed workflow needs. We favour scoped permissions and appropriate handling of credentials rather than asking for unrestricted access through a public form. We also take reasonable steps to keep personal information accurate when it is used to make decisions affecting you or disclosed to another organisation.

No internet transmission or electronic storage method is completely secure. If we become aware of a data incident, we will assess it, take appropriate action and notify affected individuals or authorities when required by applicable law. If you suspect a security or privacy issue, please contact us promptly without sending additional sensitive information.

10. How long we keep information

We retain information for as long as reasonably necessary for the purpose for which it was collected and for applicable legal or business requirements. The period varies by record type; submitting an enquiry does not trigger a universal automatic deletion deadline.

• Enquiry records and correspondence may be needed to respond, follow up and document the proposed work.
• Project and support records may be needed during delivery, handover, agreed maintenance and resolution of issues.
• Contracts, billing and dispute-related records may need longer retention for accounting, legal obligations or claims.
• Security records and backup copies may follow the relevant operational and provider retention cycles.

When information no longer serves a relevant purpose and retention is no longer necessary for legal or business reasons, it should be deleted or anonymised. A legal hold or unresolved dispute may require particular records to be preserved. Information awaiting removal from backups remains subject to applicable safeguards.

11. Access, correction and privacy requests

Subject to applicable law and its exceptions, you may request access to personal information we hold about you and information about how it has been used or disclosed, ask us to correct inaccuracies, or withdraw consent with reasonable notice. You can also ask us to consider deletion of information that is no longer needed. A deletion request is assessed against applicable obligations and is not an unconditional right to erase every record.

Send your request to contact@viabells.com, describing the information and action involved. We may request proportionate information to verify your identity or authority before releasing or changing records. Please do not send identity documents unless we agree a suitable method.

We respond as soon as reasonably possible. If an access or correction request cannot be completed within 30 days, we will provide a written response within that period explaining when we expect to respond. If a reasonable access fee is applicable, we will explain it in advance. Where a request cannot be fulfilled, we will explain the reason to the extent permitted by law.

You may raise a complaint with us or contact Singapore’s Personal Data Protection Commission. Information about the framework is available in the PDPC’s guidance for individuals.

12. Data in client integrations

An integration may involve a client’s customer, employee, order, support or other business records. Where we process these records solely on the client’s behalf, the client determines the purposes and authorised workflow. Our role may be that of a data intermediary or processor, depending on the applicable law and agreement.

The client is responsible for having the appropriate authority, notices and permissions for its processing. Project terms should define the connected systems, relevant data, access, support responsibilities and arrangements for return or deletion. We handle this information within the agreed instructions and applicable obligations; this website policy does not replace a project’s data processing agreement.

If your information is held by one of our clients, direct your request to that organisation first. We will assist the client as appropriate under our agreement. Listing a platform on this website does not mean we receive data from every account on that platform.

13. Marketing communications

If we send promotional updates, we do so with the consent or other permission required by applicable law. You can opt out using an available unsubscribe method or by emailing us. We will act on your request within the applicable timeframe.

Opting out of marketing does not stop necessary replies to your enquiry, project communications or service and security notices. We do not make agreement to unrelated marketing a condition of submitting an enquiry.

14. Children’s privacy

Our website and services are intended for business users and are not directed at children under 13. We do not knowingly collect personal information directly from children through this website. This describes our intended audience, rather than a statement that the same legal age threshold applies everywhere.

If you believe a child has provided information to us, contact us with the relevant details. We will investigate and take appropriate steps to remove the information or otherwise handle it in accordance with applicable law.

15. External links and policy changes

Our website may link to other websites and business platforms. Their operators control their own information handling. Review the relevant privacy notices before providing information or granting access to those services.

We may update this policy to reflect changes to our services, providers, practices or legal requirements. The revised policy will be posted here with an updated effective date. Where appropriate or legally required, we will provide additional notice of material changes and obtain any necessary consent. A policy update does not itself authorise an unrelated new use of information previously collected.