Privacy policy
This policy explains how AI Income Academy Pro Pte. Ltd. ("AI Income Academy Pro", "we", "us") collects, uses, discloses, and protects personal data when you visit aiincomeacademypro.one, register for academy programme programmes, or contact our Singapore team. We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore.
1. Data controller identity
The data controller is AI Income Academy Pro Pte. Ltd., UEN 202918463M, registered in Singapore. Registered address: 11 North Buona Vista Drive, #08-06 The Metropolis, Singapore 138589. General enquiries: [email protected]. Privacy-specific enquiries: [email protected]. Telephone: +65 6963 4158 (Mon–Fri 09:00–18:00 SGT).
We operate an executive AI academy programme academy for senior managers and professional executives. We are not a degree-granting university. Programme registration may require professional and organisational details appropriate to vocational AI training.
2. Personal data we collect
Depending on your interaction with us, we may collect: (a) identity and contact data — name, work email, telephone, job title, organisation, billing address; (b) programme data — pathway preferences, dietary or accessibility requirements, attendance records, assessment submissions, completion certificates; (c) communication data — messages sent via contact forms, email correspondence, briefing notes; (d) technical data — IP address, browser type, device identifiers, pages viewed, referral URLs, cookie identifiers; (e) payment data — transaction references processed by our payment partners (we do not store full card numbers on our servers).
Where you submit data about other individuals (e.g. registering colleagues for a corporate cohort), you represent that you have authority to provide their data and have directed them to this policy.
3. Purposes of collection, use, and disclosure
We collect and use personal data for purposes including: administering academy programme registrations and delivering vocational AI training; responding to academy programme enquiries and corporate briefing requests; issuing invoices, processing payments, and maintaining financial records; communicating schedule changes, materials, and alumni forum invitations; improving our website and understanding visitor behaviour through analytics (where consented); complying with legal obligations, regulatory requests, and dispute resolution; protecting our rights, participants, and facilitators from fraud or misuse.
We may disclose personal data to: facilitators and contractors bound by confidentiality obligations; payment processors and accounting service providers; IT hosting providers maintaining our Singapore-hosted infrastructure; professional advisers (legal, audit) when required; public authorities when compelled by applicable law. We do not sell personal data to third-party marketers.
4. Legal bases under the PDPA
Our primary legal basis is consent — obtained through unchecked PDPA consent checkboxes on forms and cookie banners. For existing participants, we may rely on deemed consent for reasonable purposes related to programme delivery you have engaged us to provide. We may process data without consent where permitted by PDPA exceptions, including vital interests, national interests, or legal claims. You may withdraw consent by contacting [email protected]; withdrawal does not affect prior lawful processing and may limit our ability to deliver programmes.
5. Cookies and similar technologies
We use essential cookies for site functionality and, with your consent, analytics cookies to measure traffic patterns. See our cookie policy for categories, retention, and opt-out instructions. Cookie preferences are stored for six months unless you clear browser storage earlier.
6. Retention
Enquiry records: up to 24 months from last contact unless a programme relationship continues. Programme and certificate records: up to 7 years after completion for audit, tax, and dispute purposes. Marketing suppression lists: retained until you request deletion. Server logs: up to 90 days. Payment records: per statutory accounting requirements in Singapore. When retention ends, we delete or irreversibly anonymise data where feasible.
7. Cross-border transfers
Our website and email systems may involve service providers with processing facilities outside Singapore. Where we transfer personal data overseas, we take steps reasonably required under the PDPA to ensure recipients provide a comparable standard of protection, including contractual clauses or selecting providers in jurisdictions recognised for adequate protection.
8. Security measures
We implement administrative, technical, and physical safeguards appropriate to vocational AI training data — including access controls, encrypted transport (HTTPS), staff confidentiality training, and vendor due diligence. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we review incidents promptly and notify affected individuals and the PDPC where required.
9. Your rights under the PDPA
Subject to exceptions in the PDPA, you may: request access to personal data we hold about you; request correction of inaccurate or incomplete data; withdraw consent to processing based on consent; request information about how we have used or disclosed your data over the past year. Submit requests to [email protected]. We respond within 30 days where practicable and may charge a reasonable fee for manifestly unfounded or excessive requests.
If you believe we have breached the PDPA, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg after giving us reasonable opportunity to resolve the matter.
10. Children's data
Our academy programmes are designed for learners and corporate decision-makers. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data, contact us for deletion.
11. Third-party links
Our site may link to external resources (e.g. PDPC, mapping services). We are not responsible for the privacy practices of third-party sites. Review their policies before submitting personal data.
12. Automated decision-making
We do not make solely automated decisions with legal or similarly significant effects on individuals. AI tools may assist internal operations but executive programme admissions involve human review.
13. Marketing communications
With consent, we may send information about 2026 pathway intakes and alumni forums. You may opt out via unsubscribe links or by emailing [email protected]. Transactional messages related to programmes you have registered for will continue as necessary.
14. Data breach notification
If a data breach likely to result in significant harm occurs, we will notify the PDPC and affected individuals as required by Singapore law, describing the nature of the breach, data involved, and remedial steps.
15. Changes to this policy
We may update this policy to reflect legal, operational, or programme changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use after changes constitutes acknowledgement where permitted by law.
16. Contact
Privacy enquiries: [email protected] · AI Income Academy Pro Pte. Ltd. · 11 North Buona Vista Drive, #08-06 The Metropolis, Singapore 138589 · +65 6963 4158
17. Definitions
"Personal data" means data about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access, as defined in the PDPA. "Processing" includes collection, use, disclosure, and storage. "Programme data" means information generated through your participation in academy programme modules, including attendance, assessments, and certificates.
18. Anonymised and aggregated data
We may create anonymised or aggregated statistics about website usage and programme feedback for internal reporting. Anonymised data that cannot reasonably identify you is not personal data under the PDPA and may be retained indefinitely for quality improvement and pathway curriculum design.
19. Corporate programme sponsors
When your employer sponsors your participation, we may share completion status and capstone titles with your sponsor's designated HR or learning contact, as stated in the corporate agreement. We do not share peer discussion content or confidential exercises without consent.
20. Data protection officer contact
For PDPA matters, email [email protected] with the subject line "PDPA request". Include your full name, organisation, and the nature of your request (access, correction, withdrawal, complaint). We verify identity before disclosing personal data to prevent unauthorised access.
21. Website log files
Servers may automatically record IP addresses, timestamps, requested URLs, and user-agent strings for security monitoring and capacity planning. Logs are retained up to 90 days unless investigation requires longer retention. Logs are not used for behavioural advertising.
22. Your responsibilities
Provide accurate registration information. Do not submit sensitive personal data unrelated to programme administration (e.g. national ID numbers, health records) via the contact form unless we explicitly request them. Use secure work email addresses where possible.
23. Policy archive
Previous versions of this policy may be available on request for participants who enrolled under earlier wording. The Last updated date at the top of this page reflects the current build.
24. International participants
Regional executives attending Singapore pathways remain protected under this policy. If your home jurisdiction grants additional privacy rights, contact us to discuss how we can accommodate lawful requests without contradicting Singapore law.
25. Questions before registration
Corporate legal and compliance teams may request a data processing summary before sponsoring cohorts. Email [email protected] with "Corporate privacy review" in the subject line and allow five business days for a tailored response.
26. Withdrawal of marketing consent
If you previously opted into alumni or intake emails, you may withdraw marketing consent at any time without affecting core programme correspondence. Unsubscribe links are included in marketing messages. Transactional emails about confirmed registrations will still be sent as necessary for service delivery.
This policy is reviewed at least annually and whenever material changes to our data practices occur. Contact [email protected] with any questions before you submit personal data through our forms.