Data Protection Explainer

Our Privacy Policy is the full, legally complete document. This page is the shorter, practical answer to the question a security-minded prospect or their IT team actually asks: concretely, how is our data protected, where does it live, and what control do we have over it. If anything here ever seems to conflict with the Privacy Policy, the Privacy Policy governs.

Freemansland Creatives Pte Ltd (UEN 202321157G), registered in Singapore at 10 Ubi Crescent, #05-32, Ubi Tech Park, Singapore 408564, is the data controller for personal data processed through Decisionlore. Our Data Protection Officer is reachable at nick@freemanslandcreatives.com.

Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Your company's account records, documents, and application data are hosted on a managed database and storage provider in the Singapore region. Every workspace is isolated from every other workspace at the database level using row-level security, not just application code, so isolation doesn't depend solely on our code behaving correctly. Multi-factor authentication is required for admin accounts, and sensitive actions are recorded in an append-only audit log. The full technical detail lives on our Security page.

Your own workspace's staff, department heads, and admins see what their role entitles them to inside your workspace. A small number of platform administrators at Freemansland Creatives Pte Ltd can access data across workspaces for support, troubleshooting, and security investigations; every such access is logged. That access is never available to staff at any other company using Decisionlore.

We use a small set of outside providers to run Decisionlore: database and hosting, the AI language model that drafts answers, and document-embedding for search, each bound by data-protection obligations and permitted to process data only to provide their service to us. The full table, by category, purpose, and region, is on our Privacy Policy. Where a provider sits outside Singapore, we rely on contractual safeguards for that transfer.

While your subscription is active, we keep your data. After cancellation, workspace data is retained for 30 days and then permanently deleted; you can request earlier deletion at any time by contacting us. Audit logs are kept 12 months for security and compliance, separately from your account data.

Two self-service controls live in the app under Settings → Privacy & my data, and both act on your own account immediately, not on a delayed schedule:

• Download my data: a real export endpoint returns your profile, conversations and messages, quiz attempts, and certificates as a JSON or Markdown file you can read or keep.
• Delete my account: permanently and immediately deletes your account, your conversation and quiz history, and your certificates (their public verification pages stop working once deleted), and removes your login. If you are your workspace's only admin, you'll need to add another admin first, and this can't be used to delete the platform owner's own account.

Your company's shared documents and knowledge base belong to the workspace as a whole rather than to any one person's account; a workspace admin can request a full company export by contacting us at nick@freemanslandcreatives.com.

In the event of a breach affecting your data, we will notify you within 72 hours of becoming aware. If you believe you've found a security vulnerability rather than a data question, please use our Vulnerability Reporting process instead of this page.

You may access, correct, or request deletion of your personal data, withdraw consent for non-essential processing, or lodge a complaint with Singapore's PDPC. The full list of rights and how each one works is set out in our Privacy Policy. For questions, concerns, or a PDPA request: nick@freemanslandcreatives.com.