Ophilus Alpha Privacy Policy

The current public demo does not require an account and is not designed to collect names, account details, prompts, uploads, voice, chat, precise location, payment information, saved projects, or other user-submitted content. Ophilus does not currently offer features for saving, downloading, publishing, or sharing demo Output.

The website may nevertheless handle limited personal data in the following circumstances:

• Enterprise enquiries and communications. If you submit the enterprise cooperation form or contact us, we receive the information you choose to provide, such as company name, contact name, contact details, industry, and cooperation interests.
• Essential technical processing. Our hosting, network, and security systems may automatically process IP address, browser and device information, request timestamps, error information, and security logs as technically necessary to deliver and protect the website and demo. Ophilus does not currently use this information to create advertising profiles.
• Feedback or research participation. If we specifically invite you to provide feedback or participate in research, we will receive the information you choose to provide and may give an additional notice where appropriate.

Please do not provide sensitive personal data, confidential information, or regulated data through the public website or demo.

We use the limited personal data described above to:

• operate, deliver, maintain, secure, and troubleshoot the Services;
• respond to enterprise, research, legal, and other enquiries;
• evaluate potential business or research cooperation;
• detect, investigate, and prevent misuse, attacks, and security incidents;
• comply with legal obligations and lawful requests;
• establish, exercise, or defend legal claims; and
• protect the rights, safety, and property of Ophilus and others.

Where Singapore's Personal Data Protection Act 2012 ("PDPA") applies, we collect, use, and disclose personal data with consent, deemed consent, or another basis permitted by the PDPA. Where other data-protection laws apply, our legal bases may include consent, steps taken at your request, performance of a contract, compliance with law, and our legitimate interests in operating and securing the Services and responding to business enquiries.

Ophilus may use non-personal technical information, generated world data, performance results, and other data that does not identify an individual to test, train, evaluate, and improve our machine-learning and AI systems.

The current public demo is not designed to retain user-linked prompts, uploads, voice, chat, or saved interaction histories for model training. If we introduce collection of User Materials or identifiable demo interaction data for model training or product improvement, we will update this Policy and provide an appropriate notice before that collection begins. Separate enterprise or research agreements may establish different data-use terms.

We disclose personal data only as reasonably necessary to:

• Affiliates and affiliated personnel, including operational and technical personnel located in China who help develop, operate, maintain, secure, and support the Services under Ophilus's instructions;
• Service providers that provide hosting, cloud infrastructure, network delivery, security, communications, form processing, and technical support under appropriate restrictions;
• Professional advisers, such as lawyers, auditors, insurers, and accountants;
• Authorities or other parties where required by law or reasonably necessary to enforce our agreements, investigate misuse, address security incidents, or protect rights, safety, and property; and
• Parties to a corporate transaction, such as a merger, financing, acquisition, reorganisation, or sale of assets, subject to applicable law.

We do not sell personal data for money and do not currently use personal data for targeted advertising.

It is not generally necessary for this Policy to name every infrastructure vendor. We disclose the relevant categories above and maintain appropriate internal records. If Ophilus later enables a provider that independently collects data for analytics or advertising, we will identify that processing and provide any required choices or consent.

Ophilus is based in Singapore. The Services are developed and maintained with affiliated personnel and service providers in other countries, including China. Personal data from enterprise enquiries, communications, or essential technical systems may therefore be accessed or processed in Singapore, China, and other countries where our providers operate.

Where required, we use contractual, organisational, and technical measures intended to ensure an appropriate level of protection. Under the Singapore PDPA, we take steps to ensure that personal data transferred outside Singapore receives protection comparable to that required in Singapore.

The current website may use cookies, local storage, or similar technologies that are technically necessary to operate the website and demo, maintain security, and remember essential settings.

Ophilus does not currently use advertising cookies or intentionally use non-essential cookies to profile visitors. If we introduce non-essential analytics or advertising technologies, we will update this Policy, identify the material processing, and implement consent or opt-out controls where required.

You can control or delete browser storage through your browser settings, although doing so may affect essential functionality.

We keep enterprise enquiries, communications, research responses, and any related personal data only for as long as reasonably necessary to respond, evaluate the relationship, comply with law, resolve disputes, and protect our rights.

Essential technical data may be retained for a limited period by Ophilus or its infrastructure providers for delivery, troubleshooting, and security. Retention depends on the nature of the data and applicable provider settings. When personal data is no longer needed, we delete it, anonymise it, or cease retaining documents containing it, as required by applicable law.

We use reasonable administrative, technical, and organisational measures designed to protect personal data against unauthorised access, collection, use, disclosure, modification, or disposal. No system or transmission method is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or information about our handling of your personal data; to object to certain processing; to withdraw consent; and to complain to a relevant data-protection authority. These rights may be subject to legal exceptions, and we may need to verify your identity.

Under the Singapore PDPA, you may request access to personal data in our possession or control and information about how it was used or disclosed during the preceding year, subject to applicable exceptions. You may also request correction and withdraw consent with reasonable notice.

Ophilus's Singapore entity handles all privacy questions and requests for the current alpha. Contact [email protected] to exercise a right.

The Services are intended only for people who are at least 18 years old and have reached the age of legal majority where they live. We do not knowingly collect personal data from anyone who does not meet this requirement. If you believe such a person has provided personal data to us, contact us so we can investigate and take appropriate action.

The Services are intended for eligible international business, research, and technical users, except persons and territories restricted by applicable sanctions, export controls, or other laws. This does not mean that the Services are offered or legally available in every country.

The Services may link to third-party websites. Their privacy practices are governed by their own policies, not this Policy.

We may update this Policy by posting the revised version and changing the "Last updated" date. If a change materially affects how we handle personal data, we will provide additional notice or obtain consent where required.

Questions, requests, or complaints about personal data may be sent to:

Data Protection Officer
OPHILUS YAHAHA (SINGAPORE) PTE. LTD.
Email: [email protected]

You may also lodge a complaint with the Personal Data Protection Commission of Singapore or another authority with jurisdiction.