Privacy Policy

R8DOR ("R8DOR", "we", "us", or "our") respects your privacy and is committed to protecting the personal data and business information entrusted to us.

R8DOR provides AI expenditure intelligence, usage analytics, governance, and performance measurement services that help organisations understand the cost, value, and risks associated with artificial intelligence adoption.

This Privacy Policy explains how we collect, use, process, disclose, retain, and protect information when you:

• Visit our website at https://r8dor.io.
• Register for or use our platform and related services.
• Connect AI tools, development environments, or other third-party systems.
• Subscribe to communications, attend events, or engage with our team.
• Participate in product evaluations, demonstrations, or pilot programmes.

We aim to collect only the information necessary to deliver our services, protect customer data, and maintain transparency in how information is handled.

R8DOR operates from Singapore and provides software services to organisations and professionals internationally.

Legal Entity

R8DOR Pte Ltd

Registered Address

79A Toa Payoh Central 18-05 Singapore 311079

Website

https://r8dor.io

Data Protection Officer

Jenny Vaz

Privacy Contact

jenny@r8dor.io

For personal data collected directly by R8DOR, we generally determine the purposes and means of processing.

Where R8DOR processes personal data on behalf of enterprise customers, those customers generally determine the purposes for which their data is processed, and R8DOR acts as their service provider or data intermediary, as applicable.

We may collect the following categories of information, depending on how you interact with our services.

3.1 Account and Contact Information

When you register, request access, or contact us, we may collect:

• First and last name.
• Business email address.
• Organisation name.
• Account authentication information, including securely processed password credentials.
• Job title, business contact details, and correspondence where provided.

3.2 Organisation and Subscription Information

To evaluate suitability and provide our services, we may collect:

• Organisation and team size.
• Estimated monthly AI token consumption.
• Estimated monthly AI expenditure.
• Subscription, billing, and service configuration information.
• Product preferences and implementation requirements.

3.3 AI Usage and Governance Information

Where authorised by a customer and supported by enabled integrations, R8DOR may process:

• AI model and provider identifiers.
• Token consumption and associated expenditure.
• Timestamps, usage frequencies, and consumption patterns.
• User, team, project, and organisational identifiers.
• Development activity and output metrics.
• Usage attribution, performance indicators, and governance signals.
• Technical metadata needed to assess expenditure, efficiency, and risks.

These records may relate to identifiable individuals, including employees, contractors, and authorised users.

Such information will be treated as personal data where an individual can be identified from it, alone or in combination with other reasonably available information.

3.4 Technical and Website Information

When you interact with our website or platform, we may automatically collect:

• IP address.
• Browser and device information.
• Operating system.
• Access timestamps and request logs.
• Authentication and security events.
• Website usage information.
• Cookies and similar technical identifiers, where implemented.

3.5 Communications

We may retain information you provide through enquiries, support requests, feedback, events, partnership discussions, or other business communications.

R8DOR uses personal data and related information for legitimate and disclosed business purposes, including:

Service Delivery

• Creating and managing accounts and workspaces.
• Providing AI expenditure visibility and analytics.
• Generating governance insights and usage reports.
• Monitoring authorised integrations and service performance.

Security and Governance

• Authenticating users and managing access permissions.
• Detecting suspicious or unauthorised activity.
• Investigating service incidents and security threats.
• Maintaining appropriate audit and accountability records.

Customer Support

• Responding to enquiries and technical issues.
• Managing service requests.
• Communicating operational changes and service updates.

Product Improvement

• Evaluating platform reliability and performance.
• Understanding feature usage.
• Improving analytical methods and user experience, using appropriately protected data.

Business Communications

• Responding to demonstration and partnership requests.
• Sending requested newsletters, event information, and product updates.
• Providing marketing communications where permitted by applicable law and user preferences.

Legal and Regulatory Compliance

• Meeting applicable legal and contractual obligations.
• Responding to valid legal requests.
• Protecting our legal rights and the integrity of our services.

We will not use personal data for unrelated purposes without an appropriate lawful basis or further notification and consent where required.

R8DOR recognises that AI interactions may involve confidential information, proprietary source code, trade secrets, intellectual property, and commercially sensitive materials.

Our approach is to generate governance intelligence without retaining customer prompts or uploaded files.

Where AI interaction content must be processed to produce supported analytics, such processing is intended to generate relevant governance signals rather than maintain a repository of customer content.

Customer prompts, uploaded documents, and source materials are not intended to be stored as retained analytical records.

R8DOR may retain derived information necessary to provide its services, including token counts, expenditure, attribution, operational metadata, and governance indicators, in accordance with the applicable customer agreement and retention arrangements.

Customers retain ownership of their data and intellectual property. R8DOR does not acquire ownership of customer intellectual property merely because it is processed through the service.

R8DOR will not use customer prompts, uploaded files, or proprietary source materials to train third-party or general-purpose AI models without the customer's express authorisation.

R8DOR enables organisations to understand AI expenditure and usage across individuals, teams, projects, and business activities.

Consequently, authorised enterprise customers may obtain insights associated with identifiable users.

These insights are designed to support expenditure management, accountability, operational improvement, and AI governance.

Enterprise customers are responsible for establishing an appropriate legal basis for monitoring and analytics involving their personnel, including providing required employee notices and complying with applicable employment and data protection laws.

R8DOR will process such data according to applicable agreements, authorised configurations, and relevant legal obligations.

Our analytics should not be treated as a sole or definitive measure of an individual's productivity, professional competence, or employment performance.

We may disclose personal data to:

• Hosting, infrastructure, and cloud service providers.
• Authentication, security, monitoring, and technical support providers.
• Payment and billing service providers, where applicable.
• Authorised integration and technology partners.
• Professional advisers and auditors under appropriate confidentiality obligations.
• Regulators, courts, or public authorities where legally required.

Enterprise administrators may access information relating to their organisation and authorised users according to configured permissions.

We do not sell personal data to data brokers or third parties for their independent advertising purposes.

Where third parties process personal data on our behalf, we seek to establish appropriate contractual, confidentiality, and security safeguards.

R8DOR adopts a risk-based approach to protecting information against unauthorised access, disclosure, alteration, loss, and misuse.

Security arrangements may include, as appropriate:

• Encryption of data in transit and at rest.
• Authentication and access control measures.
• Role-based access restrictions.
• Segregation of customer information.
• Access logging and monitoring.
• Secure credential and secrets management.
• Security testing, vulnerability management, and incident response procedures.
• Restricted access to systems and operational records.

We continually assess appropriate security measures in light of evolving technology, threats, and service requirements.

No internet-connected platform can guarantee absolute security. However, R8DOR is committed to implementing reasonable and proportionate safeguards appropriate to the nature and sensitivity of the data processed.

R8DOR retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, or meet legitimate business requirements.

Retention periods may vary depending on:

• The type and sensitivity of information.
• Customer contracts and service configurations.
• Operational and security requirements.
• Applicable regulatory and accounting obligations.

When information is no longer required, R8DOR will take appropriate steps to delete, anonymise, or securely dispose of it.

Following account closure or termination of services, customer data will be handled according to the applicable contractual terms, retention requirements, and deletion procedures.

Certain information may remain temporarily in backups or be retained where required by law.

R8DOR may use infrastructure and service providers operating across multiple jurisdictions.

Where personal data is transferred outside Singapore, we will take steps to comply with the transfer requirements of the Singapore Personal Data Protection Act and other applicable laws.

These may include contractual protections, security controls, and other legally recognised safeguards to ensure an appropriate standard of protection.

Where the European Union or United Kingdom data protection laws apply, relevant international transfer mechanisms will be used as required.

R8DOR may use cookies and similar technologies for:

• User authentication and session management.
• Website functionality and preferences.
• Security and fraud prevention.
• Performance monitoring and analytics, where enabled.

Some cookies are essential for our services to function.

Where non-essential cookies or tracking technologies require consent under applicable law, we will provide appropriate information and consent choices.

Users may also manage certain cookie preferences through their browser settings. Disabling essential cookies may affect website or platform functionality.

Depending on your jurisdiction and the nature of our relationship with you, you may have rights to:

• Request access to personal data held about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent where processing depends on consent.
• Request deletion of personal data where applicable.
• Object to or request restriction of certain processing activities where legally available.
• Request portability of eligible personal data where the applicable law provides this right.
• Raise concerns or complaints about the handling of personal data.

Where R8DOR processes information solely on behalf of an enterprise customer, requests concerning that information may need to be directed to the relevant customer. We will provide reasonable assistance in accordance with our contractual and legal obligations.

Requests may be submitted to our Data Protection Officer using the contact details in Section 17.

We may need to verify your identity before fulfilling a request. We will respond within the timelines required by applicable law.

Where you subscribe to R8DOR newsletters, register for events, or otherwise agree to receive communications, we may send information relating to:

• AI governance and expenditure management.
• Product developments.
• Research, insights, and educational content.
• Events, demonstrations, and related services.

You may unsubscribe from marketing emails using the unsubscribe mechanism provided or by contacting us directly.

Unsubscribing from marketing communications will not prevent us from sending essential account, security, or service-related notifications.

R8DOR may integrate with third-party AI platforms, development tools, and enterprise systems at the customer's direction.

Connections to these services may involve exchanging information necessary for authentication, authorisation, usage reporting, and supported functionality.

Each third-party provider may have its own privacy policy, terms, and data-handling practices.

Our website may also contain links to external websites. R8DOR is not responsible for the privacy practices of independent third parties.

We encourage users to review the relevant policies before connecting external systems or sharing information.

R8DOR is designed for professional and organisational use and is not directed at children.

We do not knowingly solicit personal data from children for independent account registration.

If we discover that personal information has been collected from a child in circumstances requiring parental or guardian consent, we will take appropriate corrective action in accordance with applicable law.

R8DOR maintains procedures for assessing and responding to suspected or confirmed personal data breaches.

Where a breach is subject to mandatory notification requirements, we will notify the appropriate regulators, customers, and affected individuals as required by applicable law.

We will also take reasonable steps to contain incidents, investigate their causes, mitigate potential harm, and implement corrective measures.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how information is handled, please contact:

We will review privacy enquiries and complaints and respond in accordance with applicable legal requirements.

Individuals may also contact the Personal Data Protection Commission of Singapore or another competent supervisory authority where appropriate.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or legal requirements.

The current version will be published on our website with its latest revision date.

Where changes materially affect the handling of personal data, we will provide additional notice or obtain consent where required by applicable law.

Continued use of our services does not replace any consent or other legal requirement applicable to a material change.