Privacy policy.

Introduction

This Privacy Policy explains how Ravenstack Pte. Ltd. ("Ravenstack", "we", "us", or "our") collects, uses, stores, and shares information in connection with our website at ravenstack.com and its subdomains (the "Site") and the bespoke AI design, build, and advisory services we provide to our clients (together with the Site, the "Service"). Ravenstack is a company incorporated in Singapore (UEN 202131628D).

By accessing or using the Service, you signify that you have read, understood, and agree to the collection, use, and disclosure of information as described in this Privacy Policy and our Terms of Service.

Information we collect

• Inquiry & contact information — your name, business email address, company name, role, and the contents of any message, brief, or project details you send us when you contact us or start a project.
• Engagement materials — information, documents, data, and credentials you choose to share with us during an engagement so that we can scope, design, and deliver the AI systems you have commissioned. The handling of this material is also governed by the separate written agreement (e.g. an NDA or master services agreement) for that engagement.
• Billing & transaction information — for paid engagements, the contact, company, and payment details needed to invoice and account for our services. We do not store full payment-card numbers.
• Usage & technical data — log data, IP address, device and browser information, and how you interact with the Site, used to operate, secure, and improve it.
• Cookies & analytics — small data files saved by your browser that help us understand Site usage and remember your preferences. You can control cookies through your browser settings.

How we use information

We use the information we collect to:

• respond to your inquiries and communicate with you about a potential or active engagement;
• scope, design, build, deliver, and support the bespoke AI systems you commission;
• operate, maintain, secure, and improve the Site and our Service;
• issue invoices, process payments, and keep proper business and accounting records; and
• detect, prevent, and address fraud, abuse, and security issues, and comply with our legal obligations.

AI processing

Ravenstack designs and builds AI systems, and we use third-party AI providers (such as Anthropic's Claude) both to operate our own Service and as part of the systems we deliver to clients. Where you submit content for these features, it is processed to generate results for you. We do not use the engagement materials or other content you provide to train generalized or foundation AI models, and our AI providers do not train their foundation models on data submitted through their business APIs.

How we share information

We do not sell your personal information. We share it only with service providers ("subprocessors") that help us run the Service, and only under confidentiality and data-protection obligations:

• Amazon Web Services — hosting and infrastructure;
• Cloudflare — edge security and content delivery;
• Anthropic — AI research, drafting, and model services; and
• email, analytics, and payment/accounting providers used to communicate with you and administer engagements.

We may also disclose information to comply with applicable law or valid legal process, to protect rights, property, and safety, or in connection with a merger, acquisition, or sale of assets. Engagement materials covered by a separate written agreement are handled in accordance with that agreement.

Data retention

We retain personal information for as long as needed to provide the Service, maintain our business relationship with you, and fulfill the purposes described in this Policy, after which we delete or anonymize it within a reasonable period unless a longer period is required by law (for example, tax and accounting records). Engagement materials are retained or returned in accordance with the relevant engagement agreement. You may request deletion as described below.

Security

We protect information using encryption in transit, access controls, and other administrative and technical safeguards appropriate to its sensitivity. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you of material incidents as required by applicable law.

Your rights

Depending on your location (including under Singapore's Personal Data Protection Act (PDPA), the EU/UK GDPR, and the California Consumer Privacy Act (CCPA)), you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to withdraw consent. To exercise these rights, contact us at inquiry@ravenstack.com.

International transfers

We are based in Singapore and use service providers that may process data in other countries. Where required, we rely on appropriate safeguards for such cross-border transfers.

Children

The Service is intended for business use by adults and is not directed to anyone under 18. We do not knowingly collect personal data from children.

Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date and, where appropriate, notified to you.

Contact us

Ravenstack Pte. Ltd. (UEN 202131628D)
114 Lavender Street, #10-07, CT Hub 2, Singapore 338729
Privacy inquiries: inquiry@ravenstack.com