Privacy Policy

Last Updated: June 26, 2026

1. Overview

At VOLock SG ("we," "us," or "our"), protecting the privacy of your business data and your client's personal details is our top priority. This Privacy Policy describes how we collect, use, store, and share information when you use our website and software platform.

Our services comply with the Singapore Personal Data Protection Act (PDPA) 2012 and, where applicable, international data protection standards.

2. Information We Collect

We collect information in two categories: account information from you (the interior designer/firm) and digital evidence metadata from your client when they authorize a Variation Order (VO).

A. Interior Designer / Contractor Data:

  • Profile Details: Account email, designer full name, company name, initials, and uploaded brand graphics.
  • Billing & Subscription Data: Pricing subscription records, processed securely by our Merchant of Record, Paddle.com. We do not store full credit card details on our local servers.

B. Homeowner / Client Authorization Data:

When a homeowner signs a VO draft, we collect proof-of-identity metadata to construct a secure digital signature trace:

  • Client name and contact number (provided by the designer).
  • Canvas digital signature image data (drawn on-screen).
  • Client internet protocol (IP) address.
  • Client browser configuration metadata (visitor ID hardware fingerprint) to verify signing device authenticity.
  • Exact server-side authorization timestamps (SGT).

3. How We Use the Information

We utilize the collected information for the following specific business purposes:

  • To generate, format, and display variation order draft details.
  • To bind homeowner approvals with verifiable hardware and timestamp traces (necessary to validate electronic signatures under the Electronic Transactions Act).
  • To compile, display, and export professional PDF packages containing the secure signature traces.
  • To secure and verify accounts, billing plans, and customer support requests.

4. Data Storage and Retention

All account databases, digital signature traces, and VO records are stored securely in cloud systems located in regional servers (Supabase/PostgreSQL) with industry-standard SSL encryption and strict row-level security (RLS) policies.

We retain your account details and generated VO evidence sets as long as your account is active, or as required by law to defend claims.

5. Data Sharing and Subprocessors

We do not sell, trade, or rent personal data to third parties. We share information only with trusted subprocessors necessary to deliver our service:

  • Paddle.com Market Limited: Our reseller and Merchant of Record, who securely manages payment processing, invoices, buyer support, and tax compliance globally.
  • Supabase: For database hosting, authentication, and secure document storage.

6. Your Rights

Under the Singapore PDPA, users and homeowners have the right to request access to and correction of their personal data stored in our systems. If you or a client wish to query, update, or request the deletion of signature logs or VO records, please contact our support desk.

7. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our team at:

Email: support@volocksg.com