Privacy Policy
1. Introduction
This Privacy Policy explains how Artemis Labs Pte. Ltd. (trading as Business With AI, "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit https://www.businesswithai.io (the "Website"), purchase or use our products and services, communicate with us, or otherwise interact with our business.
We are a private limited company incorporated in Singapore with our registered office at 9 Raffles Place, #29-05, Republic Plaza, Singapore, 048619. We operate globally and serve customers in many jurisdictions, including Singapore, the United States, the United Kingdom, the European Economic Area, and elsewhere.
This Policy is designed to comply with the Singapore Personal Data Protection Act 2012 (PDPA), the EU and UK General Data Protection Regulations (GDPR and UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy laws. By using the Website or our services, you acknowledge that you have read and understood this Policy.
2. Who We Are and How to Contact Us
The data controller responsible for your personal data is:
Artemis Labs Pte. Ltd. 9 Raffles Place, #29-05, Republic Plaza, Singapore, 048619 Email: hello@businesswithai.io
For any questions about this Policy, to exercise your privacy rights, or to contact our Data Protection Officer, please email hello@businesswithai.io. We will respond within the timeframes required by applicable law.
3. Personal Data We Collect
We collect personal data that you provide directly, data generated through your use of the Website and services, and data obtained from third parties. The categories of personal data we collect include:
3.1 Information You Provide Directly
Identity and contact data: your name, business name, billing and shipping address, email address, telephone number, and country of residence.
Account credentials: username, password, and security question answers (passwords are stored in hashed form only).
Transaction and payment data: products or services purchased, order history, billing records, and tax identification information where required. Full payment card numbers are processed directly by our payment processors and are not stored on our servers.
Communications: the content of emails, support tickets, chat messages, survey responses, and any other correspondence you send us.
Marketing preferences: your subscription status for newsletters, promotional emails, and marketing communications.
User-generated content: any reviews, testimonials, comments, or other materials you submit through the Website.
3.2 Information Collected Automatically
Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, language settings, and time zone.
Usage data: pages visited, referring URLs, search terms, click patterns, time spent on pages, and other interactions with the Website.
Cookies and similar technologies: data collected through cookies, web beacons, pixels, local storage, and similar tracking technologies. See Section 9 for details.
Location data: approximate geographic location inferred from IP address. We do not collect precise GPS location data.
3.3 Information from Third Parties
Payment processors: transaction confirmations, payment status, and fraud prevention data from Stripe, PayPal, and similar providers.
Authentication providers: basic profile information if you choose to log in using a third-party service such as Google.
Analytics and advertising partners: aggregated audience data, attribution data, and ad performance metrics from providers such as Google and Meta.
Publicly available sources: business contact information from public registries, professional networking sites, and similar sources, where this is permitted by law.
3.4 Sensitive Personal Data
We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, or genetic data. If you voluntarily submit such information to us, you consent to our processing of it for the purpose for which you provided it.
4. How We Use Your Personal Data
We use personal data for the following purposes:
Providing the Website and services: creating and managing your account, processing orders, delivering products and services, and providing customer support.
Payments and billing: processing transactions, issuing invoices and refunds, and preventing fraudulent payments.
Communications: responding to your enquiries, sending transactional emails such as order confirmations and service notifications, and providing important account or legal updates.
Marketing: sending newsletters, promotional offers, and information about products or services that may interest you, where you have consented or where we are otherwise permitted to do so.
Personalisation: tailoring content, recommendations, and offers based on your preferences and usage patterns.
Analytics and improvement: understanding how visitors use the Website, measuring the effectiveness of our marketing, and improving our products, services, and user experience.
Security and fraud prevention: protecting our Website, users, and business from fraudulent, unauthorised, or illegal activity.
Legal and regulatory compliance: complying with applicable laws, responding to lawful requests from authorities, and enforcing our terms and contracts.
Business operations: internal record keeping, audits, business planning, and corporate transactions such as mergers or acquisitions.
5. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases for processing your personal data:
Contract: where processing is necessary to perform a contract with you, such as fulfilling an order or providing access to your account.
Legitimate interests: where we have a legitimate business interest, such as improving our services, preventing fraud, or marketing to existing customers, and your rights and freedoms do not override that interest.
Consent: where you have given us specific, informed, and freely given consent, such as for marketing emails or non-essential cookies. You can withdraw consent at any time.
Legal obligation: where processing is required to comply with a law to which we are subject, such as tax, accounting, or anti-money-laundering rules.
Vital interests: in rare cases where processing is necessary to protect a person's life or physical safety.
Where the Singapore PDPA applies, we collect, use, and disclose personal data with your consent (express or deemed) or where permitted under the PDPA, including the legitimate interests, business improvement, and research exceptions in the First and Second Schedules of the PDPA.
6. How We Share Personal Data
We do not sell personal data in the traditional sense. We share personal data only as described in this Policy, including with the following categories of recipients:
Service providers: third parties that perform services on our behalf, including hosting providers, email and communications platforms, payment processors, customer support tools, analytics providers, advertising platforms, and professional advisers. These providers are bound by contract to process personal data only on our instructions and to protect it appropriately.
Payment processors: Stripe, PayPal, and similar providers that handle payment transactions directly with you. Their use of your payment information is governed by their own privacy policies.
Analytics and advertising partners: providers such as Google Analytics and Meta, which help us understand Website usage and deliver targeted advertising. See Section 9 for details on cookies and tracking.
Authorities and legal recipients: courts, regulators, law enforcement, or other public authorities where we are legally required or permitted to disclose personal data, or where disclosure is necessary to protect our rights, safety, or property or that of others.
Corporate transactions: actual or prospective buyers, investors, or successors in connection with a merger, acquisition, financing, reorganisation, or sale of all or part of our business. We will require any such recipient to honour the terms of this Policy.
Professional advisers: lawyers, accountants, auditors, and insurers, where reasonably necessary for the conduct of our business.
With your consent: any other party to whom you direct or authorise us to disclose your personal data.
7. International Data Transfers
Because we operate globally, your personal data may be transferred to, stored in, and processed in countries other than the one in which you reside, including Singapore, the United States, and other jurisdictions where our service providers operate. The data protection laws in these countries may differ from those in your home country.
When we transfer personal data internationally, we put appropriate safeguards in place, including:
Standard Contractual Clauses: for transfers from the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement / Addendum, supplemented by additional measures where required.
PDPA transfer obligations: for transfers from Singapore, we take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA.
Adequacy decisions: where the destination country has been recognised as providing adequate protection by the relevant authority.
You may request a copy of the safeguards we use for international transfers by contacting us at hello@businesswithai.io.
8. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting, tax, or reporting requirements. Specifically:
Account data: for the duration of your account plus a reasonable period thereafter to handle disputes, comply with legal obligations, and maintain business records.
Transaction and tax records: for at least five years from the end of the relevant financial year, in line with Singapore tax and accounting requirements, and longer where other jurisdictions impose longer periods.
Marketing data: until you unsubscribe or withdraw consent, after which we retain a suppression record to honour your opt-out.
Support and correspondence: for a reasonable period after the matter is resolved, typically up to three years.
Website logs and analytics: for up to 26 months in identifiable form, after which they are aggregated or deleted.
When personal data is no longer needed, we will securely delete or anonymise it, except where retention is required by law.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Website, remember your preferences, analyse traffic, and deliver relevant advertising. The categories of cookies we use are:
Strictly necessary cookies: required for the Website to function, such as session, security, and load-balancing cookies. These cannot be disabled.
Functional cookies: remember your preferences and settings, such as language and region.
Analytics cookies: help us understand how visitors interact with the Website. We use Google Analytics and similar tools.
Advertising cookies: used by us and our advertising partners (including Meta and Google) to deliver and measure targeted advertising on the Website and on third-party platforms.
Where required by law, we will ask for your consent before placing non-essential cookies via our cookie banner. You can change your preferences at any time using the cookie settings on the Website. Most browsers also allow you to refuse or delete cookies through browser settings, although doing so may affect Website functionality.
We do not currently respond to Do Not Track browser signals. Where required by law, we will treat Global Privacy Control signals as a valid opt-out of sale or sharing of personal information for cross-context behavioural advertising.
10. Your Privacy Rights
Subject to applicable law, you have the following rights in relation to your personal data:
Access: request confirmation of whether we process your personal data and obtain a copy of that data.
Correction: request that we correct inaccurate or incomplete personal data.
Deletion: request deletion of your personal data in certain circumstances.
Restriction: request that we restrict the processing of your personal data in certain circumstances.
Portability: receive a copy of your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller where technically feasible.
Objection: object to processing based on legitimate interests, and to direct marketing at any time.
Withdrawal of consent: withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal.
Lodge a complaint: complain to a supervisory authority, including the Personal Data Protection Commission of Singapore (PDPC), your local data protection authority in the EEA or the UK, or the California Privacy Protection Agency.
To exercise any of these rights, email hello@businesswithai.io. We may need to verify your identity before responding. We will respond within 30 days, or such longer period as is permitted by applicable law. There is generally no charge for exercising your rights, although we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.
11. Notice to California Residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides you with the following additional rights:
Right to know: the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes, and the categories of third parties with whom we share it.
Right to delete: personal information we have collected from you, subject to certain exceptions.
Right to correct: inaccurate personal information.
Right to opt out of sale or sharing: of personal information for cross-context behavioural advertising.
Right to limit use of sensitive personal information: where applicable.
Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.
Categories of personal information collected, sources, purposes, and recipients are described in Sections 3, 4, and 6 of this Policy. In the past 12 months, we have collected personal information in the categories of identifiers, customer records, commercial information, internet or other electronic network activity information, geolocation data (approximate), and inferences.
We do not sell personal information for monetary value. However, our use of advertising cookies and similar technologies that share data with advertising partners may be considered a "sale" or "sharing" under the CCPA/CPRA. You can opt out of this sharing by using the "Do Not Sell or Share My Personal Information" link on the Website (where applicable) or by enabling Global Privacy Control in your browser.
We do not knowingly sell or share the personal information of consumers under 16 years of age. To exercise your CCPA/CPRA rights, email hello@businesswithai.io. You may also designate an authorised agent to make a request on your behalf, subject to verification.
12. Notice to Residents of Other U.S. States
Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, may have rights similar to those described in Sections 10 and 11, including the right to access, correct, delete, port, and opt out of targeted advertising, sale, or profiling. To exercise these rights, contact us using the email address above. If we deny your request, you may have the right to appeal our decision; appeals can be submitted by replying to our denial.
13. Children's Privacy
The Website and our services are intended for users aged 18 and over and are not directed at children under 13 (or under 16 in the EEA and the UK). We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us immediately and we will take steps to delete it.
14. Data Security
We implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include encryption in transit (TLS), access controls, hashed password storage, regular security reviews, and engaging service providers that maintain industry-standard security practices.
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and notifying us promptly of any suspected unauthorised use of your account.
In the event of a personal data breach that is likely to result in significant harm or risk to affected individuals, we will notify the relevant authorities and affected individuals as required by applicable law, including the PDPC in Singapore and supervisory authorities under the GDPR and UK GDPR.
15. Third-Party Websites and Services
The Website may contain links to third-party websites, plugins, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site or service you visit.
16. Marketing Communications
We may send you marketing communications by email or other electronic means where you have provided consent or where we are otherwise permitted to do so by law. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email we send you, by adjusting your account preferences (where available), or by contacting us using the email address in Section 2. Opting out of marketing will not affect transactional or service-related communications, such as order confirmations or important notices about your account.
17. Automated Decision-Making and Profiling
We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. We may use automated tools to personalise content, recommend products, prevent fraud, and analyse usage patterns; these tools do not make decisions that have legal or similarly significant effects on you without human involvement.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Policy on the Website with a new effective date and, where appropriate, by sending you a direct notice. Your continued use of the Website or our services after the effective date of an updated Policy constitutes acceptance of the changes.
19. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of the Republic of Singapore, without regard to its conflict of laws principles. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore, except that this does not limit any mandatory rights you may have under the laws of your country of residence.
20. Contact Us
If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us at:
Artemis Labs Pte. Ltd. 9 Raffles Place, #29-05, Republic Plaza, Singapore, 048619 Email: hello@businesswithai.io Website: https://www.businesswithai.io
This Privacy Policy was last updated on 26 April 2026.