Privacy Policy
At a glance
We collect only what we need to run TidyAcc. Your business’s records stay yours. We never sell personal data or use it for advertising. Our server is in Malaysia. Contact our Data Protection Officer at admin@tidyacc.com.
1. Who we are
TidyAcc is project-accounting software for contractors, run by its founding team in Singapore. This policy covers our website (www.tidyacc.com) and the TidyAcc app (app.tidyacc.com). We follow Singapore’s Personal Data Protection Act (PDPA).
Data Protection Officer: email admin@tidyacc.com with the subject “Privacy”.
2. What we collect
- Account details: your name, email, phone number, role and company details.
- Your business records: the customers, suppliers, staff and amounts in your quotations, invoices, bills, receipts and projects.
- Files you upload: such as supplier bills, receipts and your company logo.
- Sign-in and security records: IP address, browser type, sign-in times and sign-in method (password, Google or Microsoft).
- Messages you send us by email or WhatsApp.
We do not ask for NRIC or passport copies, and we never need your card details.
3. How we use it
- To run TidyAcc and show your business its records.
- To sign you in and keep accounts secure.
- To send service emails, such as invitations, password resets and the documents you choose to send.
- To answer your questions and fix problems.
- To meet legal requirements.
We do not sell personal data. We do not use it for advertising. We will not send you marketing without asking first.
4. Records your business puts in
Your business decides what goes into its TidyAcc records, and we look after them on its behalf. If your details appear in a TidyAcc customer’s invoice or other record, please contact that business first. We will help them answer you.
6. Where your data is stored
The TidyAcc app and its database run on a Hostinger server in Kuala Lumpur, Malaysia. Because this is outside Singapore, Hostinger is bound by its data-processing agreement to protect the data to a standard comparable to the PDPA. Data travels over encrypted connections, and nightly backups are encrypted.
7. AI bill reading
TidyAcc can read supplier bills with AI to save typing. This is optional and switched off unless your company asks for it. When it is on, only the bill you choose is sent to an outside AI service to be read. That service may be outside Singapore. We only use AI services that do not train their models on your bills and that protect data to a standard comparable to the PDPA. Always check what the AI reads before saving.
8. How long we keep it
We keep your data while your account is open. When it closes, we keep it for 30 days so you can ask for an export, then delete it. Backup copies are overwritten within about 8 weeks. We may keep basic billing records for as long as the law requires.
9. Your choices and rights
You can ask to see or correct your personal data, or withdraw your consent, by emailing admin@tidyacc.com with the subject “Privacy”. We will reply within 30 days. If you are unhappy with our answer, you can contact Singapore’s Personal Data Protection Commission (PDPC).
11. Changes and contact
If we make important changes to this policy, we will tell you before they apply.
Questions? Email admin@tidyacc.com or WhatsApp +65 8571 1832. Please never send passwords or sign-in codes by email or WhatsApp.