Privacy Policy

Introduction

Adamic Systems Pte. Ltd. ("Company", "we", "us", or "our"), a company incorporated under the laws of Singapore, operates the website adamic.io, the application at workspace.adamic.io, and related services (collectively, the "Services").

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our Services. It applies to all users, including visitors to our marketing website and registered users of our application.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

Data Controller

Adamic Systems Pte. Ltd. is the data controller responsible for your personal data. For questions about this policy or our data practices, contact us at [email protected].

Data We Collect

• Account Data: When you create an account, we collect your name, email address, organisation name, and role. Authentication is managed through Supabase, our infrastructure provider.
• Usage Data: We collect information about how you interact with the Services, including pages visited, features used, search queries, and session duration. On our marketing website, this data is collected through Cloudflare Web Analytics (which does not use client-side tracking or cookies) and Google Analytics 4 via Google Tag Manager (which uses first-party cookies for session and traffic analysis).
• Waitlist Data: If you join our waitlist via the marketing website, we collect your email address through Web3Forms, a third-party form processing service.
• Technical Data: We automatically collect your IP address, browser type and version, operating system, device type, and referring URL. Cloudflare processes this data as part of its CDN and security services.
• Communication Data: If you contact us by email or through the Services, we retain the content of those communications along with your contact information.

How We Use Your Data

We process your personal data for the following purposes:

• Service delivery — to provide, maintain, and improve the Services, including personalised media intelligence, search, and analysis features
• Account management — to create and manage your account, authenticate access, and enforce our terms of service
• Security — to detect, prevent, and respond to security incidents, fraud, and abuse
• Communication — to respond to your enquiries, send service-related notifications, and provide product updates
• Analytics — to understand how the Services are used and to improve user experience
• Legal compliance — to comply with applicable laws, regulations, and legal processes

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Services you have requested
• Legitimate interests — processing necessary for our legitimate business interests, such as improving the Services, ensuring security, and preventing fraud, where these interests are not overridden by your rights
• Legal obligation — processing necessary to comply with applicable laws
• Consent — where you have given specific consent, such as joining our waitlist or subscribing to communications. You may withdraw consent at any time.

Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following categories of service providers, all of whom process data on our behalf under appropriate contractual safeguards:

• Supabase (authentication and database) — stores account data and application data
• Google Cloud Platform (infrastructure) — hosts our application services in the Asia-Southeast region
• Cloudflare (CDN and security) — processes technical data for content delivery, DDoS protection, and web analytics
• Google (analytics) — Google Analytics 4 and Google Tag Manager process usage data on our marketing website for traffic analysis and event tracking
• Web3Forms (form processing) — processes waitlist submissions
• LLM providers (AI processing) — Anthropic and Google process article content for analysis features. No personal user data is sent to these providers.

We may also disclose personal data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or others.

International Data Transfers

The Company is based in Singapore. Our infrastructure is primarily hosted in the Asia-Pacific region (Singapore). Some of our service providers may process data in other jurisdictions, including the United States and the European Economic Area.

Where personal data is transferred outside of Singapore, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data — retained while your account is active, and for up to 90 days after account deletion to allow recovery
• Usage and technical data — retained for up to 12 months for analytics and security purposes
• Waitlist data — retained until you unsubscribe or request deletion
• Communication data — retained for up to 24 months after the last interaction

We may retain anonymised or aggregated data indefinitely for statistical and analytical purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit (TLS 1.2/1.3) and at rest
• Row-level security (RLS) for database-level data isolation between clients
• Authentication via secure session tokens with automatic expiry
• Regular security header auditing and TLS configuration testing
• Access controls limited to authorised personnel on a need-to-know basis

No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete personal data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Portability — request a machine-readable copy of your personal data
• Restriction — request restriction of processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw previously given consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies and Tracking

Our marketing website (adamic.io) uses Cloudflare Web Analytics, which is privacy-focused and does not use client-side state, cookies, or fingerprinting. We also use Google Analytics 4 via Google Tag Manager for traffic analysis and event tracking, which uses first-party cookies. You may manage cookie preferences through the cookie consent banner on our website.

Our application (workspace.adamic.io) uses essential cookies and local storage for authentication session management only. These are strictly necessary for the Services to function and cannot be disabled.

We do not use third-party advertising trackers, social media pixels, or cross-site tracking technologies.

Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.

Singapore Personal Data Protection Act

As a Singapore-incorporated company, we comply with the Personal Data Protection Act 2012 (PDPA). Under the PDPA, you have the right to access and correct your personal data, and to withdraw consent for the collection, use, or disclosure of your personal data.

Our Data Protection Officer can be reached at [email protected].

European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the rights described in the "Your Rights" section above.

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify registered users by email or through the Services.

Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy? [email protected]