Privacy Policy

Last updated: September 17, 2026

1. Data Controller

The data controller for this Service is:

  • Company Name: GanttAI
  • Registered Address: 1 Raffles Place, #20-01, One Raffles Place Tower 1, Singapore 048616
  • Privacy Contact Email: privacy@ganttai.tech
  • Data Protection Officer: Not applicable

2. Personal Information We Collect

2.1 Information You Provide

  • Account Information: Name, email, password (encrypted storage)
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment processor (see Section 5)
  • Communication Records: Emails, support tickets, and feedback you send to our support team

2.2 Information We Collect Automatically

  • Device and Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request time, error logs, performance data

3. How We Use Your Personal Information

Purpose Legal Basis
Providing and maintaining the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot identify specific individuals.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes

You can adjust preferences through browser settings or our Cookie Management Center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including "selling" as defined by applicable laws such as CCPA. We only share information in the following circumstances:

  • Service Providers: Cloud computing, payment processing, customer support, analytics, and other suppliers, bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor Waffo and is not stored on our servers.
  • Legal and Regulatory Requirements: As required by law, court orders, or legitimate requests from competent authorities
  • Business Transactions: In cases of merger, acquisition, etc., with advance notice and ensuring protection obligations continue
  • With Your Consent: For other purposes upon your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS / HTTPS
  • Storage Security: Sensitive data such as passwords is encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits and Vulnerability Scanning

In the event of a security incident affecting your rights, we will notify you within 72 hours of discovery in accordance with legal requirements. Please keep your account credentials secure and do not share them with others.

7. Personal Information Retention Period

Data Type Retention Period Post-expiry Handling
Account informationDuring active period; 90 days after account deletionDelete or anonymize
Transaction recordsAs required by law, typically 7 yearsDelete or archive
Support records2 yearsSecurely delete
Security audit logs12 monthsSecurely delete

8. Your Data Rights

To exercise the following rights, please contact us. We will process your request within 30 calendar days.

Right Description
Right to be informedUnderstand what data we collect and how we use it
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of data under specific conditions
Right to restrict processingPause data processing under specific circumstances
Right to data portabilityObtain your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for processing based on consent

If you believe we have not properly handled your data, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to our services via email or in-app notifications. You may unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Opting out does not affect service-necessary notifications (such as billing and security alerts).

10. International Data Transfers

Our servers and partners may be located in Singapore and the United States. When transferring data across borders, we ensure data security through:

  • Signing data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Transferring only to recipients that provide equivalent protection levels
  • Other safeguards such as adequacy decisions or BCR

11. Children's Privacy

This Service is intended for users who are at least 18 years of age. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integration with third-party services. This Policy applies only to information we directly collect. We are not responsible for third parties' data practices and recommend reviewing their policies before use.

13. Changes to This Policy

For material changes, we will notify you at least 15 days in advance through platform announcements or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

  • Privacy Contact Email: privacy@ganttai.tech
  • Customer Support Email: support@ganttai.tech
  • Company Name: GanttAI
  • Mailing Address: 1 Raffles Place, #20-01, One Raffles Place Tower 1, Singapore 048616
  • Service Hours: Monday to Friday, 09:00–18:00 UTC+8