Intellectus Universe Pte. Ltd. and its affiliates (“Intellectus Universe”, “we”, “us”, or “our”) respect your privacy and are committed to protecting your personal data. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect your personal data when you use our websites, applications, products, and services that display or link to this Policy, including ai2bundle.co (the “Platform” and together with our services, the “Services”).

We process personal data in accordance with applicable laws, including the Singapore Personal Data Protection Act 2012 (“PDPA”). Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read, understood, and agree to this Policy (including any updates). If you do not agree, please do not use the Services.

In some cases, a specific privacy notice may apply to particular features or services. In such cases, that notice should be read together with this Policy.

1. How we collect and use your personal data

1.1 Personal data we collect

We collect personal data only for purposes described in this Policy. “Personal data” means information that, alone or in combination, can identify an individual.​

You may be required to provide certain personal data to use specific features of the Services. If you choose not to provide such data, some features may not be available.

Depending on your interactions with us, we may collect:

• Account and subscription information:
  Name, email address, password, country, account ID, subscription plan details, renewal and expiry dates, and account preferences.​

• Contact and identity information (mainly for higher‑tier plans, billing, fraud prevention, or compliance):
  Name, nationality, address, phone number, company name, position, identification documents or numbers (e.g. NRIC/FIN, passport, or other government IDs) where legally permitted and necessary.

• Corporate customer information:
  For non‑individual users (e.g. firms buying multiple seats): company name, registration/identification number, billing contact, and relevant business documents where needed for KYC or risk assessment.

• Payment and transaction information:
  Subscription history, invoices, transaction amounts and dates, partial card details or payment method metadata as provided by payment processors (we do not store full card numbers), and records of failed or refunded payments.​

• Usage and interaction data:

  • Inputs and outputs you submit to or receive from integrated AI tools (e.g. prompts, file uploads, chat logs, generated outputs) processed via our Platform (“AI Content”).

  • Plan consumption data, such as number of requests, token usage, or other metering relevant to fair use and quotas.

  • Logs of your interactions with the Platform (e.g. clicks, pages visited, timestamps, features used).​

• Device and technical data:
  IP address, device identifiers, browser type and version, operating system, language settings, time zone, referral URLs, access logs, and diagnostic information.​

• Communications and support data:
  Messages you send via our contact form or email, support tickets, feedback, survey responses, and marketing preferences.​

• Information from third parties:
  We may receive information from payment processors (e.g. Stripe), identity verification providers, analytics and advertising partners, or public databases for fraud prevention, compliance, marketing analytics, or service improvement.​

We may collect non‑personally identifiable information (non‑PII) for analytics and service improvement. Where non‑PII is combined with personal data, we treat it as personal data.​

1.2 How we use personal data

We use your personal data for purposes including:​

• Providing and operating the Services

  • Registering and managing your account.

  • Enabling you to subscribe to and use our AI bundle plans.

  • Routing your prompts and inputs to selected third‑party AI providers and returning outputs to you.

  • Enforcing usage limits, quotas, and fair use policies tied to your plan.

• Improving and securing the Services

  • Monitoring performance, troubleshooting, and enhancing features.

  • Conducting analytics to understand usage patterns and improve user experience.

  • Detecting, preventing, and addressing security incidents, abuse, or fraud.

• Communicating with you

  • Responding to inquiries and support requests.

  • Sending service‑related notices (e.g. changes to terms, billing notifications, security alerts).

  • Providing updates about new features, offers, or promotions (you may opt out of marketing communications at any time).​

• Business operations and compliance

  • Managing billing, accounting, and internal reporting.

  • Complying with legal obligations, regulatory requirements, and law enforcement requests.

  • Protecting our rights, property, users, and the public.​

• Research and development

  • Aggregating or de‑identifying data to analyze trends, train internal models for quality, or develop new services, without attempting to re‑identify individuals except where required by law.​

Where required by law, we rely on one or more legal bases to process personal data, including consent, performance of a contract (providing the Services), compliance with legal obligations, and legitimate interests (e.g. security, prevention of misuse, product improvement).​

1.3 Use of AI Content for model improvement

We are primarily an AI bundle and access layer and not the underlying AI model provider. AI Content may be transmitted to and processed by third‑party AI providers (such as OpenAI and others you select) in accordance with their privacy policies and terms.​

• We do not train our own large language models using your AI Content, except on an aggregated or de‑identified basis for internal quality, abuse detection, or analytics.

• Third‑party AI providers may use your content as permitted under their own terms and privacy policies; you should review those documents if you are concerned about training or retention practices.

Where providers offer opt‑out mechanisms for using content for training, we will reasonably support or pass through such options where technically and contractually feasible.

2. Cookies and similar technologies

We use cookies and similar technologies (such as pixels, tags, and local storage) to operate and improve the Services.​

• Essential cookies: Required for login, session management, and security.

• Preference cookies: Remember your settings and choices.

• Analytics cookies: Help us understand how users interact with the Platform and improve performance.

• Marketing cookies: Used (where applicable) to measure campaigns and provide more relevant content.

You can manage cookies through your browser settings. If you disable certain cookies, some parts of the Services may not function properly. For general information on cookies, you may refer to public resources such as AboutCookies.org.​

3. How we share your personal data

We do not sell your personal data. We share personal data only as described below or as otherwise notified to you at the time of collection.​

We may disclose personal data:

• Within Intellectus Universe
  Among our affiliates and related entities for legitimate business, operational, and support purposes in accordance with this Policy.​

• With service providers and subprocessors
  With trusted third parties who perform services for us, such as:

  • Cloud and hosting providers (e.g. infrastructure and database hosting).

  • Payment processors (e.g. Stripe) for billing and payment processing.

  • Third‑party AI providers who process your AI Content to generate outputs.

  • Analytics, security, and logging providers.

  • Customer support and communication tools.

  These parties are contractually required to process personal data only on our instructions and to implement appropriate safeguards.

• With business partners
  Where we jointly offer services, bundles, or promotions with partners, we may share limited information necessary to administer such programs, in accordance with applicable law.

• For legal and safety reasons
  We may disclose personal data to government authorities, regulators, law enforcement, or other parties if we believe in good faith that such disclosure is necessary to:

  • Comply with applicable law, court order, or legal process.

  • Protect our rights, safety, or property, or those of our users or the public.

  • Detect, prevent, or address fraud, security issues, or violations of terms.​

• In corporate transactions
  In connection with a merger, acquisition, financing, reorganisation, bankruptcy, or sale of all or part of our assets, your personal data may be transferred to the relevant third party as part of the transaction, subject to confidentiality obligations and continued protection of your personal data.​

• With your consent or at your direction
  We may share your personal data with third parties when you explicitly consent or request us to do so.

4. Your rights and choices

Subject to applicable laws (including the PDPA and, where relevant, foreign data protection regimes), you may have the following rights regarding your personal data:​

• Access: Request access to personal data we hold about you.

• Correction: Request correction of inaccurate or incomplete personal data.

• Deletion: Request deletion of personal data, subject to legal and operational retention requirements.

• Restriction/Objection: Object to or request restriction of certain processing activities.

• Withdrawal of consent: Where processing is based on consent, withdraw such consent at any time, without affecting prior processing.

• Data portability: Where required by law, request a copy of certain personal data in a structured, commonly used format.

We may need to verify your identity before processing your request, and we may refuse or limit requests where allowed by law (e.g. where they are manifestly unfounded or excessive, or affect the rights of others).​

To exercise your rights, please contact us using the Contact Information section below.

For training data or content used by third‑party AI providers, you may also need to follow those providers’ own processes for accessing or deleting data they hold.

5. How we protect and retain your personal data

We implement reasonable physical, technical, and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction.​

These measures may include:

• Use of secure servers, encryption in transit and at rest where appropriate.

• Access controls and least‑privilege principles.

• Employee confidentiality obligations and training.

• Regular system monitoring, logging, and security reviews.​

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account.​

We retain personal data only for as long as is reasonably necessary to fulfil the purposes set out in this Policy, including:​

• Providing and maintaining the Services and your account.

• Meeting legal, accounting, or reporting obligations.

• Resolving disputes and enforcing agreements.

Retention periods may vary depending on the type of data and our legal obligations. When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.​

6. Children’s privacy

The Services are not intended for children. We do not knowingly collect personal data directly from children in violation of applicable laws.​

• In Singapore and most jurisdictions we operate in, you must be at least 18 years old (or the age of majority in your jurisdiction) to create an account or subscribe to our Services.

• If you are between 13 and 18 (or relevant local age of majority), you should only use the Services with the consent of a parent or legal guardian and in compliance with our Terms and Conditions.​

If you believe we may have collected personal data from a child in violation of this Policy, please contact us using the details below and we will take appropriate steps, including deletion where required.​

7. Third‑party services and links

Our Platform may contain links to or integrations with third‑party websites, services, content, or AI tools that are not operated or controlled by us.​

Your interactions with those third parties, including any personal data you provide directly to them, are governed by their own privacy policies and terms, not this Policy. We encourage you to review the privacy practices of each third party before providing any personal data.​

8. International transfers

As a Singapore‑based technology company, we may process and store personal data in Singapore and other countries where we or our service providers operate. This may involve transferring your personal data to jurisdictions that may have different data protection laws than your home country.​

Where required by law, we will ensure that appropriate safeguards are in place for such transfers, which may include:​

• Contractual protections (such as standard contractual clauses).

• Relying on your express consent.

• Other legally recognised transfer mechanisms.

By using the Services and providing personal data, you acknowledge that your data may be transferred to and processed in these jurisdictions, subject to appropriate safeguards.​

9. Marketing, analytics, and your choices

We may use your personal data for marketing and analytics, such as:​

• Sending you information about new features, promotions, or events.

• Measuring the effectiveness of campaigns.

• Analysing user behaviour to improve our Services.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us. Even if you opt out of marketing, we may continue to send you non‑marketing communications (e.g. service, billing, or security notices).​

You may also manage certain analytics and advertising cookies through your browser or device settings.

10. Updates to this Policy

We may update this Policy from time to time to reflect changes in law, our business, or the Services.​

When we make material changes, we will update the “Effective” date above and may provide additional notice (such as via email or in‑app notification) where required by law. Your continued use of the Services after any update constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should stop using the Services.​

11. Notices

All notices to us must be communicated via our contact form or sent to our registered address at 12 Woodlands Square, #13-79, Woods Square, Singapore 737715. We may provide notices to you via email to the address associated with your account or by posting on the Platform.

12. Connected accounts (Google, Microsoft and Zoom)

GovernanceApp, our corporate secretarial platform at governanceapp.ai2bundle.co, lets each member choose to connect their own Google, Microsoft or Zoom account. Connecting is optional and is done by the member personally. The firm's most senior member can switch each of these features on or off for the whole firm.

12.1 What we access, and why

Google account

• Your email address: to show which account is connected and to send emails from it.

• Gmail (send only): to send the emails you ask GovernanceApp to send from your own Gmail, such as documents for your client, signature requests, reminders and meeting invitations. This permission allows sending only; GovernanceApp has no access to read, search or change the emails in your mailbox.

• Google Drive (files you choose): to open the files you select to import into GovernanceApp, and to save the copies you ask us to save to your Drive. Access is limited to those files.

• Google Calendar (events): to create calendar events, with a Google Meet link where you choose one, for the meetings you schedule in GovernanceApp.

Microsoft account (Outlook, OneDrive / SharePoint and Teams)

• Your basic profile: to show which account is connected.

• Send mail: to send the emails you ask GovernanceApp to send from your own mailbox. This permission allows sending only.

• Files: to let you browse your files and open the ones you choose to import, and to save the copies you ask us to save.

• Calendar: to create calendar events, with a Teams meeting link where available, for the meetings you schedule.

Zoom account

• Your basic profile and meetings: to create the Zoom meetings you schedule in GovernanceApp.

12.2 How we use this information

We use information from connected accounts only to provide the features you use, at your request, and to keep the service secure. In particular, information from connected accounts:

• is used solely to provide and improve the user-facing features described above;

• is kept out of advertising, and is never sold or rented;

• is kept out of the training, development or improvement of any artificial intelligence or machine-learning model, whether ours or a provider's;

• is read by people only with your permission, where needed for security (for example, investigating abuse), to comply with applicable law, or for our internal operations in aggregated and anonymised form.

If you import a file and ask GovernanceApp's AI features to work on it, the file's content is sent to our AI service providers solely to produce the result you asked for, under zero-data-retention terms.

Google API Services User Data Policy. GovernanceApp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12.3 How we store and protect it

The access keys that let GovernanceApp act for your connected account are stored encrypted (AES-256-GCM) on our servers in Cloudflare's Asia-Pacific region (Singapore). The emails, files and calendar events themselves stay in your own Google, Microsoft or Zoom account. A file you import, or a document you create, is kept with your firm's other GovernanceApp records under section 5.

12.4 Disconnecting

You can disconnect any account at any time in GovernanceApp under Setting ▸ Connector; the stored access keys are deleted immediately. You can also remove GovernanceApp's access from your own account settings:

• Google: https://myaccount.google.com/permissions

• Microsoft work or school account: https://myapps.microsoft.com · personal account: https://account.live.com/consent/Manage

• Zoom: Zoom App Marketplace ▸ Manage ▸ Added Apps

For any question about connected accounts, contact us at https://www.ai2bundle.co/contact.

13. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your data protection rights, please contact us:

Intellectus Universe Pte. Ltd. | UEN: 202556427R
12 Woodlands Square, #13-79
Woods Square
Singapore 737715
Contact form: https://www.ai2bundle.co/Contact
Website: https://www.ai2bundle.co