Privacy Policy

1. Overview

At VOLock SG ("we," "us," or "our"), protecting the privacy of your business data and your client's personal details is our top priority. This Privacy Policy describes how we collect, use, store, and share information when you use our website and software.

Our services comply with the Singapore Personal Data Protection Act (PDPA) 2012 and, where applicable, the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information in two categories: account information from you (the designer/firm) and digital evidence data from your client when they authorize a Variation Order (VO).

A. Interior Designer / Contractor Data:

• Profile Details: Account email, designer full name, company name, initials, and compressed avatar URL.
• Billing Data: Pricing subscription records, handled securely by our checkout handler (Lemon Squeezy). We do not store credit card details directly on our servers.

B. Homeowner / Client Authorization Data:

When a homeowner signs a VO draft, we collect proof-of-identity metadata to construct a secure digital signature trace:

• Client name and phone number (provided by the designer).
• Canvas digital signature image files (drawn on-screen).
• Client internet protocol (IP) address.
• Client browser configuration metadata (e.g., visitor ID fingerprint generated via user agent/WebGL configuration) to verify signing device hardware.
• Exact server-side authorization timestamps.

3. How We Use the Information

We utilize the collected information for the following specific business purposes:

• To generate, format, and display variation order draft details.
• To bind homeowner approvals with verifiable hardware and location traces (necessary to validate electronic signatures under the Electronic Transactions Act).
• To compile, display, and export professional PDF packages containing the secure signature traces.
• To secure and verify accounts, billing plans, and store preferences.

4. Data Storage and Retention

All account databases, digital signature traces, and VO records are stored securely in cloud systems located in regional servers (Supabase/PostgreSQL) with standard industry-standard SSL encryption and strict row-level security (RLS) policies.

We retain your account details and generated VO evidence sets as long as your account is active, or as required by law to defend claims.

5. Data Sharing and Third Parties

We do not sell, trade, or rent personal data to third parties. We share information only with trusted subprocessors necessary to deliver our service:

• Supabase: For database hosting, authentication, and secure document storage.
• Lemon Squeezy: Our billing partner and Merchant of Record, who securely manages payment details, invoices, and subscriptions.

6. Your Rights

Under the Singapore PDPA, users and homeowners have the right to request access to and correction of their personal data stored in our systems. If you or a client wish to query, update, or request the deletion of signature logs or VO records, please contact us at our support helpdesk.

7. Contact Information

If you have any questions about this Privacy Policy, please contact our Data Protection Officer at: raffyyudha18@gmail.com, Jakarta, Indonesia.