Privacy Policy
Last updated: May 2026
1. Our Capacity & Roles
SWOP PTE. LTD. ("Swop Labs", "we", "us", or "our") operates in two distinct capacities under the Singapore Personal Data Protection Act (PDPA):
- As a Data Intermediary (Processor)When you use our SaaS platform, you input data belonging to your own customers or users. In this capacity, we process this data solely on your behalf and according to your instructions. Our responsibilities are governed by the Protection and Retention obligations of the PDPA and the specific terms of our signed Master Service Agreement (MSA) or Data Processing Addendum (DPA).
- As an Organization (Controller)We act as the primary organization only for data we collect for our own business operations, such as billing information, marketing outreach, and website analytics.
2. Data Processing Purposes
We process data strictly to facilitate the following services as requested by our clients:
- Operational Execution: Managing voice call transcriptions and AI-driven responses as instructed by the client business.
- Workflow Integration: Synchronizing data with client-authorized third-party platforms, including CRM systems and booking engines.
- Secure Lead Delivery: Organizing and presenting customer data to clients through secure dashboards and notifications.
- System Integrity: Technical monitoring to ensure high uptime and security of the processing environment.
3. Data Protection Arrangements
In our capacity as a Data Intermediary, we implement rigorous technical and organizational security arrangements designed to protect data against unauthorized access or loss. These measures are defined in detail within our client-facing Master Service Agreement.
- Encryption of all data at rest and in transit.
- Strict tenant-level isolation of processing environments.
- Continuous security monitoring and automated audit logging.
Retention Limitation
We retain data only as long as necessary to fulfill the purposes of our service provision or as legally required by Singapore law.
Requests & Rights
If your data is being processed by us on behalf of one of our clients, please direct any data rights requests directly to that client organization.
4. Service Infrastructure
To provide a resilient AI experience, we utilize Tier-1 global infrastructure providers. All data transfers and processing arrangements are protected by standard contractual clauses ensuring a comparable level of protection to the PDPA.
5. Contact Us
For inquiries regarding our data processing practices or to verify our compliance arrangements, please contact us at: