Contents
1. Who we are
SGBP ("SGBP", "we", "us", "our") is a brand operated by Talonoid Technologies (Indian Private Limited Company, India). Singapore Private Limited registration in progress (planned 2026)
We provide the Sector AI Workflow Playbook — a productized AI workflow service for Singapore SME owners. The website https://sgbp.tech is the primary point of presence for this service. This Privacy Policy explains what personal data we collect from you, how we use it, and the rights you have over it.
We are committed to compliance with Singapore's Personal Data Protection Act 2012 (PDPA), the EU/UK General Data Protection Regulation (GDPR / UK GDPR) for visitors from those regions, and India's Digital Personal Data Protection Act 2023 (DPDPA) for our home jurisdiction.
2. What we collect
2.1 Information you give us directly
- When you book a 30-minute call via Calendly: your name, email, WhatsApp number, business name, sector, sub-niche, staff count, and your free-text answer to "what's the single biggest time-eater in your week."
- When you click the WhatsApp link: your phone number and any messages you send become available to us through WhatsApp (operated by Meta Platforms Inc.).
- When you email us: your email address and message content.
2.2 Information we collect automatically
- Site analytics — page views, referrer, anonymised approximate location (country / city), device type, browser. We use Plausible Analytics, which is cookieless, GDPR-friendly, and stores no personal identifiers.
- Server logs — IP address, user agent, request URL, timestamp. Retained for 14 days for security and operational debugging.
- Ads measurement (only if you accept cookies) — Meta Pixel and Google Analytics 4 may be loaded after you accept cookies, to measure ad campaign performance. At the time of writing these are inactive — they will become active when ad campaigns launch (we will continue to gate them behind explicit cookie consent).
2.3 Information we do NOT collect
- We do not collect payment information on this site (we don't take payments here — payment is handled separately after a discovery call).
- We do not use session-replay tools (Hotjar, FullStory, etc.).
- We do not sell, rent, or trade your personal data to anyone.
- We do not profile you for credit, employment, or insurance purposes.
3. How we use the data
- Deliver the service — to schedule and conduct your 30-minute call, follow up on WhatsApp, and (if you become a paying client) build and ship your sector playbook.
- Improve the service — to understand which sectors are most engaged, which pages convert, and which sources are most read.
- Measure ad effectiveness — to see which Meta / Google / LinkedIn ad creatives produce real conversations vs spend.
- Comply with law — to respond to legitimate legal requests, prevent fraud, and protect our rights.
4. Legal basis (GDPR / PDPA)
Where applicable, we rely on the following legal bases:
- Performance of a contract — to schedule your call, deliver the playbook, follow up.
- Legitimate interests — to operate the website, prevent fraud, measure non-personal site analytics.
- Consent — to load advertising cookies (Meta Pixel, GA4). You can withdraw consent at any time via the cookie banner or by emailing us.
- Legal obligation — to retain records where required.
5. Third-party processors
We work with the following service providers. Each has its own privacy policy linked below.
| Provider | Purpose | Privacy policy |
|---|---|---|
| Calendly LLC | Booking scheduler (when you book a call) | View → |
| WhatsApp / Meta Platforms Inc. | Messaging when you click the WhatsApp link | View → |
| Plausible Analytics | Privacy-friendly site analytics (no cookies, no personal data) | View → |
| Meta Platforms Inc. (Facebook Pixel) | Ad measurement when you accept cookies (currently inactive — will activate when ad campaigns go live) | View → |
| Google LLC (GA4) | Site usage analytics when you accept cookies (currently inactive) | View → |
| Hetzner / Contabo / VPS host | Web hosting infrastructure | — |
| Anthropic, OpenAI, n8n, Make, Zapier, etc. | Vendor stacks documented in delivered playbooks (not for processing your data on this site) | — |
6. Cookies + tracking
We use the minimum cookies necessary to operate the site, plus optional advertising cookies that load only with your consent. See our full Cookie Policy for the cookie list, controls, and how to opt out.
Embedded third-party content (Calendly booking iframe, WhatsApp link) may set its own cookies when you actively engage with them. Those cookies are governed by the respective service's privacy policy.
7. Ads platforms (Meta / Google / LinkedIn)
We advertise on Meta (Facebook + Instagram), Google, and may use LinkedIn in the future. To measure whether our ads produce real outcomes, those platforms can — with your cookie consent — receive:
- Pixel events — page views, button clicks, booking-modal opens, WhatsApp clicks.
- Conversions API (CAPI) events — server-side reporting when a Calendly booking is confirmed (limited to anonymised hashes — not your raw email or phone).
- Custom Audience matching — if you provide your email/phone elsewhere (e.g. for a paid client), we may upload a one-way hash of those identifiers to suppress you from cold ad targeting (so you don't see the same ad again).
You can opt out of ad personalisation at any time:
- Meta: Meta Ads Preferences
- Google: Google My Ad Center
- LinkedIn: LinkedIn Ad Settings
8. International data transfers
Our processors may store data outside Singapore — typically in the European Union, the United States, India, or other regions where the platform operates. Where transfers occur, we rely on the recipient's published Standard Contractual Clauses, adequacy decisions, or equivalent safeguards under PDPA / GDPR.
9. Data retention
- Calendly booking data — kept for the duration of our engagement plus 24 months for follow-up; you can request earlier deletion.
- WhatsApp messages — kept on WhatsApp's servers per their policies; retained on our side for the duration of our engagement plus 24 months.
- Server logs — 14 days.
- Plausible analytics — aggregated, no personal identifiers.
- Marketing cookies / Pixel events — typically 90 days at the platform level.
10. Your rights
Depending on where you are located, you have rights to:
- Access — know what personal data we hold about you.
- Correct — fix inaccurate data.
- Delete — request erasure (where lawful).
- Restrict / object — to certain processing.
- Portability — receive a copy of your data in a portable format.
- Withdraw consent — for cookie-based advertising or marketing emails.
- Lodge a complaint — with your local supervisory authority (e.g. PDPC Singapore, your data protection authority in the EU/UK, or DPDPA authority in India).
Email privacy@sgbp.tech to exercise any of these rights. We respond within 30 days.
11. Children
Our service is for SG SME owners (typically 30–55 years old). We do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, contact us and we will delete it.
12. Security
We use HTTPS (TLS 1.3) on all pages, store credentials in environment variables (never in source code), and rely on reputable processors that maintain SOC 2 / ISO 27001 / equivalent certifications where applicable. No system is perfectly secure; if we discover a breach affecting your data, we will notify you within 72 hours where required by law.
13. Changes to this policy
We update this policy when our services or legal obligations change. The "Effective" + "Last updated" dates at the top of this page reflect the most recent revision. Material changes will be communicated via email to clients and a notice on the homepage.
14. Contact us
For privacy questions, data requests, or complaints:
- Email — privacy@sgbp.tech
- WhatsApp — Message us on WhatsApp
- Address — Talonoid Technologies, India / Singapore
Once SGBP completes Singapore Pte Ltd incorporation, we will register a Data Protection Officer with PDPC Singapore and update this policy accordingly.
This policy is provided in plain English for clarity. It is a legal document and reflects our commitments to you. If any term is unclear, contact us — we'll explain.