Privacy notice

1. Scope

This notice applies to the Inside marketing website, demo and contact requests, marketing communications and related business enquiries. Personal data processed through the Inside product for a customer’s workforce is governed by the applicable customer agreement, product documentation and any separate data-processing terms.

2. Our role and the law that applies

Inside acts as a data controller for personal data we collect directly through this website — enquiries, demo requests, marketing communications and website usage. For personal data processed inside the Inside platform on behalf of a customer's organisation, Inside acts as a data processor (a data intermediary under Singapore law). In that case the customer is the controller, their own privacy notice governs that data, and we process it under their instructions and the applicable customer agreement.

We are based in Singapore and handle personal data in accordance with the Personal Data Protection Act 2012 (PDPA). We collect, use and disclose personal data for reasonable purposes notified to you and with your consent, or where an exception under the PDPA applies.

Where the EU or UK General Data Protection Regulation (GDPR) applies to our processing, we rely on one or more of the following legal bases:

• Consent — for example, when you ask us to contact you or opt in to marketing.
• Performance of a contract — for example, providing the Inside platform to your organisation.
• Legitimate interests — such as improving our services or securing our systems, balanced against your rights and freedoms.
• Compliance with a legal obligation.

3. Personal data we collect

Depending on how you interact with us, we may collect:

• Name and job title
• Business email address and telephone number
• Organisation name, industry, location and workforce size
• Products, modules and implementation needs you ask about
• The nature of your enquiry (for example demo, pricing, support, partnership, investment, media or security review) and any details relevant to it, such as publication, firm or partnership type
• Messages, enquiries and meeting information
• Website usage information such as IP address, browser, device, referring page and pages viewed
• Communication preferences and consent records
• Information you voluntarily provide during a demo, pilot or commercial discussion

Please do not submit employee records, payroll data, identity documents, health information or other sensitive workforce data through the website contact form.

4. How we collect personal data

• Directly from you through forms, email, calls, meetings and events
• Automatically through website logs, cookies and similar technologies
• From your organisation or authorised colleagues
• From public business sources such as company websites or professional profiles
• From service providers supporting forms, scheduling, analytics and communications

5. How we use personal data

• Respond to enquiries and arrange demos
• Understand your organisation’s workforce needs
• Prepare proposals, pilots and implementation discussions
• Operate, secure and improve the website
• Measure website performance and campaign effectiveness
• Send relevant product or event communications where permitted
• Maintain business and consent records
• Prevent misuse, investigate incidents and comply with legal obligations

We process personal data with consent where required and for reasonable business, contractual, security and legal purposes permitted under applicable law, including Singapore’s Personal Data Protection Act 2012.

6. Cookies and analytics

The website may use essential cookies and limited analytics technologies to operate pages, understand usage and improve performance. If optional analytics or advertising technologies are introduced, the site should provide any notice or consent mechanism required by applicable law. You can also control cookies through your browser settings, although disabling essential technologies may affect website functions.

7. When we share personal data

We may share relevant personal data with:

• Hosting, form, calendar, email, analytics and security providers
• Professional advisers and implementation partners under appropriate obligations
• Authorities where required by law or to protect rights and security
• A successor organisation in connection with a merger, acquisition or business transfer

We do not sell personal data. Service providers should receive only the information reasonably needed to perform their services.

8. Where your data is hosted

Inside is a Singapore company and workforce data in the Inside platform is hosted and managed in Singapore data centres. This applies to the cloud product as well: we operate it on Singapore-based infrastructure rather than replicating customer workforce data to other regions.

Our business email provider processes the contact details you submit through the enquiry form on this website, so that we can receive and reply to your message. That provider may operate outside Singapore. Where a cross-border transfer occurs we rely on appropriate safeguards such as standard contractual clauses, and the provider is bound to protect the data and process it only on our instructions. Workforce data held in the Inside platform is not transferred out of Singapore.

9. Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, including responding to enquiries, maintaining commercial records, resolving disputes and meeting legal, accounting or security requirements. Information no longer required should be deleted or anonymised according to our retention practices.

10. Security

We use reasonable administrative, technical and organisational safeguards appropriate to the information and context. No internet service is completely secure, so we cannot guarantee absolute security. If you believe information submitted to us has been compromised, contact us promptly.

11. Your choices and rights

Depending on where you are located, and subject to applicable law, you may ask us to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer have a lawful reason to keep.
• Restrict or object to certain processing.
• Receive a copy of certain data in a portable format (data portability).
• Withdraw consent where we rely on it, or opt out of marketing at any time.

Requests can be made using the contact details below. We may need to verify your identity before responding, and we may be unable to comply fully where a legal or contractual obligation requires us to retain the data. Withdrawing consent does not affect processing already carried out, and may affect our ability to respond to you or provide a requested service.

12. Third-party websites

Our website may link to third-party websites, videos or services. Their privacy practices are controlled by their respective operators. Review their notices before providing personal data.

13. Changes to this notice

We may update this notice as the website, service providers or legal requirements change. The current version and update date will be published on this page.

14. Contact us

For privacy questions, requests or complaints, email hello@inside.software. Please use the subject line “Privacy request” and do not include unnecessary sensitive information.