Draft: needs Ops and legal review
Privacy
This page explains, in plain language, what [data controller] collects when you use our WhatsApp number or web console, and what we do with it.
What we collect
- Your WhatsApp number and name.
- Order and payment references, such as your ticket number and the payment reference.
- Opt-in records: whether you said yes or stopped offers, when, and for which booth.
- The messages you send to our WhatsApp number.
- If you run a booth or a fair: your business details, fair and booth details, and sign-in details.
- We don't collect NRIC numbers; HitPay verifies booth holders directly.
Why we collect it
- To send your ticket, receipt and order-ready message.
- To pass your questions to booth staff, who reply to you.
- To guide booth holders and organisers, and to run their fairs and booths.
- To send reorder offers, only if you said yes.
- An AI system helps booth holders and organisers. Booth staff answer shopper messages; the AI may suggest a draft reply using the message, which staff check before sending. The AI never sends to shoppers.
Marketing offers are a separate choice
- Your receipt is not an offer, and buying something does not sign you up for offers.
- We only send offers after a shopper clearly says yes. They can reply STOP anytime.
- Offers are only for shoppers of Singapore and Malaysia booths.
Stopping offers, and your details
- Reply STOP or BERHENTI at any time, and we stop sending you offers. Receipts for orders you place still come, and a person still answers if you reply HELP.
- To see, correct or delete your details, or to withdraw your consent, message us on WhatsApp or email us (see our contact page). A person will handle it. We may need to keep some payment and order records where the law requires it.
- If you withdraw consent for us to use your number for orders, we can't send your receipts or pass your messages to booth staff.
- Reply HELP to reach a person who can see, correct or delete your details. We answer within 30 days.
Money
- We never hold booth sales. Shoppers' payments are processed and paid out by HitPay, a licensed payment partner for SGD payments at Singapore fairs, to each booth's own bank account.
- The S$20 booth-weekend pass is the one payment we receive, because it is our own sale.
Who else sees it
- The booth you bought from sees your order and your messages to it.
- We use service providers to run this:
- Meta Platforms Ireland Limited (WhatsApp Business Platform, Cloud API)
- Payments
- HitPay
- Hosts our website and app
- Vercel
- Our database
- Supabase
- Processes booth-holder chats and shopper messages for draft replies
- Vercel (AI Gateway) and our AI model provider, [{AIProvider}, not chosen yet]
- For our ops logs
- Google (Google Sheets, for the pilot ops log)
- Meta (WhatsApp), our AI providers and Google process data outside Singapore, including in the United States and Europe. We only use providers bound by contracts that protect your data to a standard comparable to Singapore's law.
- We do not sell your data.
How long we keep it
- Opt-in and STOP records: while we keep sending offers, plus 12 months.
- Orders and payments: 5 years.
- Messages: 12 months after the fair.
- These periods are a draft, pending lawyer sign-off.
Contact
- For privacy questions, use the WhatsApp number or email on our contact page.
- Data protection officer: [DPO name], [DPO email]