Privacy Policy
Effective Date: November 26, 2025
Last Updated: November 26, 2025
Introduction
AI CTO (“we,” “us,” or “our”) operates ai-cto.com and provides virtual Chief Technology Officer services to small and medium-sized enterprises (SMEs) in Singapore. We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, complete our AI readiness assessment, and engage with our WhatsApp-based advisory services.
Information We Collect
Information You Provide Directly
When you use our services, we collect:
- Name: To personalize our communication and service delivery
- Mobile Number: Used for WhatsApp communication and service delivery
- AI Readiness Assessment Data: Your responses to our assessment questionnaire, including information about your business operations, current technology usage, and AI adoption readiness
- Company Information: Details about your business that you voluntarily share during consultations (industry, size, operational challenges, technology needs)
- Communication Data: Messages, questions, and information exchanged through WhatsApp chat (both with our AI chatbot and live agents)
Information Collected Automatically
- Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages
- Cookies and Tracking Technologies: We use cookies to improve website functionality and analyze usage patterns
How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery: To provide AI readiness assessments, personalized technical guidance, and ongoing CTO advisory services
- WhatsApp Communication: To send assessment results, proactive tips, recommendations, and respond to your inquiries via WhatsApp
- Vendor Recommendations: To match you with appropriate technology solutions and vendors based on your assessment and needs
- Service Improvement: To enhance our AI recommendation engine, platform features, and service quality
- Marketing Communication: To send relevant tips, updates, and recommendations (with your consent, which you can withdraw at any time)
- Analytics: To understand user behavior, measure engagement, and improve our platform
Legal Basis for Processing (PDPA Compliance)
Under Singapore’s Personal Data Protection Act (PDPA), we process your data based on:
- Consent: You provide explicit consent when submitting your information through our assessment form and agreeing to WhatsApp communications
- Legitimate Interests: To deliver the services you requested and improve our platform
- Contractual Necessity: To fulfill our service obligations if you subscribe to premium features
How We Share Your Information
We do not sell your personal data. We may share your information with:
Service Providers
- WhatsApp Business API: For message delivery and communication
- Cloud Infrastructure Providers: For secure data storage and processing
- Analytics Providers: For website and service usage analysis
Vendor Partners
When you express interest in specific technology solutions, we may share relevant business information with recommended vendors to facilitate introductions and obtain quotes. We only share information necessary for the vendor to assess fit and provide proposals.
Legal Compliance
We may disclose your information if required by law, court order, or government authority, or to protect our rights and safety.
Data Retention
- Assessment Data: Retained for the duration of your engagement with our service plus 3 years for analytics and improvement purposes
- WhatsApp Messages: Retained for 2 years for service quality and compliance purposes
- Account Data: Retained while your account is active and for 1 year after account closure or service termination
Your Privacy Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from proactive WhatsApp messages at any time by sending “UNSUB 2233” via WhatsApp
- Withdraw Consent: Withdraw your consent for data processing at any time
- Data Portability: Request your data in a structured, commonly used format
Even after unsubscribing from proactive messages, you can still contact us via WhatsApp, and our chatbot or live agents will respond to your inquiries.
How to Exercise Your Rights
To exercise any of your privacy rights, contact us at:
- Email: [email protected]
- WhatsApp: Send your request via our WhatsApp channel
- Opt-Out: Send “UNSUB 2233” via WhatsApp to stop proactive messages
We will respond to your request within 30 days.
Data Security
We implement industry-standard security measures to protect your personal data:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security audits and monitoring
- Secure cloud infrastructure with reputable providers
However, no method of transmission over the internet is 100% secure. We encourage users not to share highly sensitive business information via WhatsApp.
Cookies Policy
We use the following types of cookies:
- Essential Cookies: Required for website functionality
- Analytics Cookies: To understand how visitors use our site (Google Analytics)
- Marketing Cookies: To track campaign effectiveness and user acquisition sources
You can manage cookie preferences through your browser settings.
Third-Party Links
Our website and communications may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Children’s Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.
International Data Transfers
Your data is primarily stored and processed in Singapore. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in compliance with PDPA requirements.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy on our website with a new “Last Updated” date
- Sending notification via WhatsApp or email (for significant changes)
Your continued use of our services after changes indicates acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
AI CTO
Operated by Hypeworkz Pte Ltd
Email: [email protected]
Website: https://ai-cto.com
This Privacy Policy complies with Singapore’s Personal Data Protection Act (PDPA) and reflects our commitment to transparency and data protection.