1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This includes your name, email address, company information, and payment details.

We also collect information automatically when you use our services, including log data, device information, and usage patterns.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, process transactions, send you technical notices and support messages, and respond to your comments and questions.

3. Third Parties and Subprocessors

We engage third-party service providers ("subprocessors") to help us operate the Service. These currently include: cloud infrastructure hosting (Amazon Web Services), payment processing (Stripe), product analytics, and messaging-channel providers (e.g. Meta/WhatsApp, and other channel partners you connect). Subprocessors are only permitted to process personal data to provide services to us and are bound by confidentiality and data protection obligations consistent with this Policy. We do not sell your personal data to third parties. This is not an exhaustive list — a complete, current subprocessor list is available on request by contacting us (see Section 11).

4. Overseas Transfer of Personal Data

Fiko is operated by a Singapore-registered company, but our infrastructure and some subprocessors are located outside Singapore, including in the United States (our primary hosting region is AWS us-east-1). As a result, personal data may be transferred to, stored in, or processed in jurisdictions other than Singapore. Where we transfer personal data overseas, we take steps to ensure recipients are bound by legally enforceable obligations to protect that data to a standard comparable to the protection required under Singapore's Personal Data Protection Act (PDPA), including through contractual data protection terms with our subprocessors.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. All data is encrypted at rest and in transit.

6. AI and Data Processing

Customer conversations are processed using AI for translation and suggested replies. Your internal knowledge base (product docs, API specs, etc.) is processed on isolated, private AI systems that do not share data with other customers or train shared models.

7. Data Retention

We retain personal data for as long as necessary to provide the Service and fulfil the purposes described in this Policy — typically for the duration of your account, and for a reasonable period afterward where needed to comply with our legal, tax, accounting, or dispute-resolution obligations, or to resolve disputes and enforce our agreements. Backups are retained on a rolling schedule for disaster-recovery purposes and are not indefinite. You can request deletion of your data at any time, subject to these legal retention requirements — see Section 8.

8. Your Rights

Subject to applicable law — including Singapore's PDPA, and GDPR/CCPA where they apply to you — you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; withdraw any consent you previously gave us (for example, for marketing communications or non-essential website cookies — see our Cookie Policy); request deletion of your personal data, subject to our legal retention obligations above; and request a copy of your data in a commonly used format. Contact us at [email protected] to exercise these rights — we aim to respond within a reasonable time and in any case within the timelines required by applicable law.

9. Meta Platform Applications

The following applications are registered on the Meta platform and operate under this Privacy Policy:

Fiko Automation — a Meta-registered app used to connect Facebook Pages and Instagram accounts to the Fiko platform, enabling automated messaging, AI-powered replies, and conversation management on behalf of our customers.
Sky Luck Technologies Pte. Ltd — the legal entity behind Fiko, registered as a Meta Business Partner responsible for the platform's compliance with Meta's Platform Policies.

Through these Meta applications we access data permitted by the permissions you grant during the Facebook/Instagram OAuth flow (e.g. pages_messaging, instagram_manage_messages). We use this data solely to deliver the Fiko service — routing messages, generating AI replies, and presenting conversation history in the dashboard. We do not sell or share this data with third parties and do not use it to train shared AI models. You may revoke our access at any time through your Facebook or Instagram settings.

10. Data Protection Officer

In accordance with Singapore's PDPA, we have designated a Data Protection Officer responsible for ensuring our compliance with data protection law. You can reach our Data Protection Officer at [email protected] (mark your message "Attn: Data Protection Officer") for any questions about this Policy, to exercise your rights under Section 8, or to raise a data protection concern.

11. Data Breach Notification

If a data breach occurs that is likely to result in significant harm to affected individuals or is of a significant scale, we will notify Singapore's Personal Data Protection Commission and affected individuals as soon as practicable, in accordance with the PDPA's Data Breach Notification Obligation.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected] or via the contact page.