Qspect Privacy Policy

Qspect is operated by QCC TECH PTE. LTD., a company incorporated in the Republic of Singapore (“QCC”, “we”, “us” or “our”).

This Privacy Policy explains what personal data we collect when you use Qspect, how we use and protect it, who we may share it with, and what rights you have over your information.

This policy applies to all users of Qspect, including Visitors who browse without creating an account and Registered Users. This policy is designed to comply with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and, to the extent applicable to our users, the EU General Data Protection Regulation (“GDPR”) and other relevant data protection laws.

This Privacy Policy forms an integral part of our Terms of Service. Unless otherwise defined herein, capitalised terms shall have the meanings ascribed to them in the Terms of Service.

By accessing or using Qspect and the Services, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described in this Privacy Policy. Where consent is the relevant legal basis for processing, we will obtain your consent separately as required by applicable law.

• Data you provide directly: When you register for a Qspect account, we collect your email address and a password. You may also choose to provide additional profile information such as your name and company name. When you submit a lead query, we collect the information you enter into the query form, which may include email addresses, phone numbers, website domains, company names, and industry classifications, and any other information you provide in query forms. If you contact our support team, we collect the content of your message and any contact details you provide.
• Data collected by our AI on your behalf: When you submit a query, our AI system may automatically search and retrieve publicly available information from the internet to generate your result. This may include content from publicly accessible company websites, published news articles and press releases, publicly visible posts on social media platforms, and entries in public business registries and commercial databases. Our AI only accesses information that is publicly available without authentication. It does not access private systems, password-protected content, or any database that requires login credentials.
• Data from third-party business data sources: To generate, verify, and enrich Outputs, we may supplement the AI-generated analysis with business information obtained from licensed third-party data providers who compile publicly available corporate records.
• Data collected automatically: Like most web platforms, Qspect automatically collects certain technical and usage data when you access the site. This includes your IP address, browser type and version, device type, operating system, pages visited, session duration, clickstream data, and referring URLs. This data is collected through cookies and similar technologies, which are described further in Section 5.

We use the personal data we collect for the following purposes:

• To provide and operate Services, including processing your Submitted Data, generating AI-powered analytical Outputs, and maintaining your account.
• To keep the platform secure, detect abuse, and prevent fraudulent or unauthorised activity.
• To improve and develop Qspect, including monitoring performance, fixing technical issues, and building new features.
• To respond to your support requests and communicate with you about your account.
• To comply with our legal and regulatory obligations under applicable law.
• To send you important service-related notifications, such as updates to this policy or changes to our terms.

We do not sell your personal data to any third party.

We share information only with the categories of service providers necessary to operate the Services, including:

• AI Providers, who process Submitted Data to generate Outputs. Submitted Data may be transmitted to and processed by AI Providers whose servers may be located outside Singapore. Please see Section 7 for details on international transfers.
• Licensed third-party business data vendors, who may receive only the minimum elements of Submitted Data necessary to retrieve, match, verify, or supplement relevant business information, such as a domain name, company name, or other business identifiers submitted through the Services, for the purpose of generating, verifying, or enriching Outputs.
• Cloud infrastructure and hosting providers, who run Qspect’s servers and are contractually obligated to maintain the security and confidentiality of your data.
• Professional advisors, including lawyers, accountants, and auditors, on a confidential basis as necessary for the provision of their professional services.

All third-party service providers are bound by contractual obligations to process your data only for the agreed purpose and to apply appropriate security measures.

We may also disclose personal data when required to do so by law, by a court order, or by a regulatory authority, or where disclosure is necessary to protect the safety or rights of our users or the public.

In the event that QCC is involved in a merger, acquisition, or transfer of assets, your data may be transferred to the successor entity, and we will notify you in advance of any such change.

Qspect uses cookies and similar technologies to operate the Services, maintain security, and understand how users interact with them. Some cookies are strictly necessary for the Services to function properly, while others may be used for analytics or similar purposes. Where required by applicable law, we will obtain your consent before using non-essential cookies and will provide appropriate choices and controls.

Where applicable, we rely on the following legal bases for processing personal data:

• Contract performance: We process your account data, Submitted Data, and the technical and usage data that is automatically collected as part of delivering the Services to you, including server logs, session data, and security monitoring data.
• Consent: We process your data for marketing communications only with your explicit consent.
• Legal obligation: We process data where necessary to comply with applicable law or regulation.

For personal data about third-party individuals that you include in Submitted Data, you are the data controller. You must identify your own legal basis for collecting and submitting that data to us.

Our primary servers are located in Singapore. If you access Qspect from other countries with laws or regulations governing personal data collections, use, and disclosure that differ from Singapore laws, you understand and agree that through your continued use of Qspect your personal data and Submitted Data may be transferred to Singapore and if so, you consent to that transfer. Submitted Data may also be transmitted to AI Providers and third-party data vendors whose servers may be located in other countries. Where data is transferred outside Singapore, we take steps to ensure it receives a level of protection consistent with the PDPA.

Outputs are produced dynamically each time you submit a query. QCC does not retain Outputs at the system level for any secondary purpose. We do not use Outputs to train AI models, share them with other users, or exploit them for any commercial purpose of our own.

If your account includes a query history feature, you expressly consent to and instruct us to store those Outputs within your account solely for your convenience. This data remains associated with your account alone and will be permanently deleted when you close your account.

We retain personal data only for as long as is necessary for the purposes described in this policy.

Account data, including your registration information and profile details, is retained for the duration of your account and deleted immediately after you close it.

Submitted Data follows the same schedule. If your account includes query history, that data is deleted at the same time as your account.

Technical and usage log data is retained for the time until you close your account.

In limited circumstances, we may retain certain data beyond these periods where we are required to do so by law or regulation, for example to satisfy record-keeping obligations or to preserve evidence in connection with legal proceedings. Once data is no longer needed, we permanently delete it or irreversibly anonymise it so that it can no longer be used to identify anyone.

You have the following rights in relation to your personal data:

• Access: You can request a copy of the data we hold about you and information about how it has been used.
• Correction: You can ask us to correct any data that is inaccurate or incomplete.
• Withdrawal of consent: Where we process your data based on your consent, you can withdraw that consent at any time, without affecting any processing already carried out.
• Deletion and objection: In certain circumstances, you can request the deletion of your personal data or object to specific types of processing.

If you are located in the EU or EEA, you may also have the right to data portability, the right to restrict processing, and rights related to automated decision-making under the GDPR.

To exercise any of these rights, please contact our Data Protection Officer using the details below. We will respond within 30 days, or within the timeframe required by applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission of Singapore, or with the relevant supervisory authority in your jurisdiction.

In accordance with PDPA, we have appointed a Data Protection Officer responsible for overseeing our data protection compliance. You can contact our DPO for any privacy-related enquiries, requests to exercise your rights, complaints, or to report a suspected data breach.

Data Protection Officer

QCC TECH PTE. LTD.

Email: dpo@qcc.com

Address: 55 Ayer Rajah Crescent #01-26, Singapore 139949

We implement reasonable technical and organisational safeguards designed to protect personal data, which may include encryption in transit, secure storage measures, access restrictions for authorised personnel, authentication controls for administrative systems, and security testing or reviews as appropriate.

While we take these obligations seriously, no online system can be guaranteed to be completely secure, and we cannot provide an absolute assurance of protection against all threats.

If we experience a data breach that is notifiable under the PDPA, meaning one that is likely to result in significant harm to affected individuals or that is of a significant scale, we will notify the Personal Data Protection Commission of Singapore within 3 calendar days of becoming aware of the breach and will notify affected individuals as soon as practicable thereafter.

Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours. We will in all cases take immediate steps to contain the breach and prevent further harm.

Qspect is intended for users who are at least 18 years of age. We do not knowingly collect personal data from anyone under this age. If we become aware that personal data has been collected from a child, we will delete it promptly. If you believe a child has created an account or submitted data through our platform, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Where changes are material, we will notify you by posting a prominent notice on the platform or by sending an email to the address associated with your account, and the updated policy will take effect as of the date stated. We encourage you to review this page periodically. Your continued use of Qspect after the effective date of any update constitutes your acceptance of the revised policy.

For general enquiries about this Privacy Policy or about how we handle personal data, you can reach us at:

QCC TECH PTE. LTD.

55 Ayer Rajah Crescent #01-26, Singapore 139949

Email: qspect@qcc.com