Who this covers
This policy explains what Komunidad Global Pte. Ltd. ("Komunidad", "we", "us") does with personal information when you visit our websites, sign up for a partner account, or use the Komplee and OpsCon platforms.
It is written for two different readers, and the difference matters:
- You, dealing with us directly. You visit the site, open an account, email us, or buy a plan. For that information we are the controller: we decide why it is held and what happens to it. This policy covers it.
- People whose information is inside an application you built. Your client's staff, the sites you monitor, the evidence you upload. For that information you are the controller and we are only the processor, acting on your instructions. What we may and may not do with it is set out in the Data processing page, not here.
If you are a member of the public and an organisation used Komunidad to build something that holds your information, that organisation is the one to ask. We will pass any request we receive straight to them.
What we collect
When you use the website
- Pages you view, the page you arrived from, and roughly where you are, from your IP address
- Browser and device type
- Anything you type into a form on the site
When you open an account
- Name, work email, employer, role and country
- Sign-in details, or the identifier from a Google sign-in
- Billing contact, billing address and tax details
- Payment card details are handled by our payment processor and are never stored on our systems
While you are using the platform
- Which features were used, when, and by which account
- Credit and usage records, so both of us can check a bill
- Security and audit logs: sign-ins, changes to permissions, exports
- Support conversations
Why we hold it
- To run the account and give you the service you signed up for
- To bill you, and to recognise the revenue properly
- To answer support questions
- To keep the service secure, to detect abuse, and to investigate an incident
- To meet an obligation we are under, such as tax or accounting rules
- To tell you about changes to the service, and, where you have agreed to it, to send you things we think are relevant
Where the law requires a stated legal basis, ours is: performance of the contract with you, our legitimate interest in running and securing the service, your consent where we asked for it, and compliance with a legal obligation.
Who else sees it
We do not sell personal information, and we do not share it for anyone else's advertising.
We use a small number of suppliers to run the service. Each one is under a written contract, may only act on our instructions, and only gets what its job requires:
- Cloud hosting and storage: Amazon Web Services
- Payment processing
- Transactional email delivery
- AI inference, under a no-training, zero-retention agreement
- Customer support tooling
We name each of them in our current sub-processor list, which we will send you on request from info@komunidad.co.
The roles are set out on the Data processing page. We will also disclose information where we are legally required to, and we will tell you first unless we are not allowed to.
Where it is held
We are established in Singapore and serve customers worldwide. The platform runs on Amazon Web Services in the Asia Pacific (Singapore) region. Our support and engineering teams work from Singapore and the Philippines.
Where personal information moves between countries we rely on the standard contractual clauses, with the UK addendum where it applies, and on the transfer obligations in Singapore's Personal Data Protection Act and the Philippine Data Privacy Act. We can provide the executed clauses on request.
If your own rules require your data to stay in a particular region, tell us before you build. Regional hosting is arranged case by case and is not the default.
How long we keep it
- Account records: for as long as the account is open, then 12 months
- Billing and tax records: 5 years, because Singapore law requires it
- Security and audit logs: 12 months
- Website analytics: 14 months, if and when we switch analytics on
- Support conversations: 24 months
When a period ends the information is deleted or irreversibly anonymised.
Your rights
Depending on where you live you may have the right to ask for a copy of what we hold, to have it corrected, to have it deleted, to limit or object to what we do with it, to receive it in a portable form, and to withdraw a consent you gave.
Write to info@komunidad.co and we will answer within 30 days. We may need to confirm who you are first. Using these rights costs nothing and we will not treat you differently for it.
If you are not satisfied you can complain to your data protection authority. In Singapore that is the Personal Data Protection Commission, and in the Philippines the National Privacy Commission.
Cookies
This website uses only the cookies it needs to work, such as keeping you signed in and remembering a preference you set. We do not use advertising cookies and we do not track you across other sites.
If we add product analytics later we will say so here, and we will ask for your consent first where the law requires it. You can clear or block cookies in your browser, but parts of the site may then not work.
Children
The platform is for organisations, not for children. We do not knowingly collect information from anyone under 18. If you believe we have, write to us and we will delete it.
Changes
We will post any change here and update the date at the top. If a change materially affects you we will email the account owner at least 30 days before it takes effect.
Contact
Write to info@komunidad.co for anything on this page: a question, a request about your own information, a copy of the signed data processing agreement, or a security questionnaire you need filled in. It reaches the right team in both entities.
- Komunidad Global Pte. Ltd., Singapore. 1 Phillip Street, #05-01 Royal One Phillip, Singapore
- Komunidad Global Services & Operations, Philippines Inc., Philippines. G/F Uptown Eastgate Bldg., 11th Avenue, Bonifacio Global City, Taguig City, Philippines
The named contact details of our official representatives, including our data protection officer and our representatives in Singapore and the Philippines where one is required, are available on request.
