Privacy Policy

1. Introduction

Innovative X Pte Ltd(“we”, “us”, “our”) operates OneStop Business Portal (“the Platform”). We are committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it.

2. Data We Collect

• Identity data: Full name, mobile number (WhatsApp-verified), email address
• Profile data: User type(s), business profile details, district/area
• Listing data: Business listings, photos, asking price, and associated fields
• Transaction data: Coin purchases, subscription payments, invoice records
• Usage data: Pages visited, listing views, watchlist activity, enquiry history
• Communication data: WhatsApp OTP sessions, enquiry messages, notification logs

3. How We Use Your Data

• To verify your identity via WhatsApp OTP and maintain your account
• To display your listings to potential buyers, investors, or partners
• To process payments and issue invoices
• To send watchlist match alerts, expiry reminders, and platform notifications via WhatsApp and email
• To facilitate enquiries between buyers and sellers
• To improve platform features and prevent fraud
• To comply with our legal and regulatory obligations under Singapore law

4. Legal Basis for Processing

We collect and use your personal data on the basis of your consent (given at registration), the performance of a contract (your use of Platform services), and our legitimate business interests (platform security, fraud prevention, and service improvement).

5. Sharing of Data

We do not sell your personal data. We may share it with:

• Payment processors (HitPay) — solely to process your payments
• WhatsApp messaging provider (360dialog) — solely to deliver OTPs and alerts to your number
• Email service providers — solely to deliver transactional emails
• Cloud infrastructure providers — for secure hosting of the Platform
• Law enforcement or regulators — where required by Singapore law

All third-party providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection laws.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our services. If you request account deletion, we will remove your data within 30 days, except where retention is required by law (e.g. financial records for 5 years under the Companies Act).

7. Your Rights Under PDPA

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Withdraw consent at any time (this may affect your ability to use certain features)
• Request deletion of your account and associated data

To exercise any of these rights, email us at privacy@onestopbizportal.com.sg. We will respond within 30 days.

8. Cookies & Tracking

The Platform uses session cookies (JWT tokens) solely to maintain your authenticated session. We do not use third-party advertising cookies or cross-site trackers. Your browser can be configured to reject cookies, but this will prevent you from logging in.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed credentials, signed JWT tokens, and webhook signature verification. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via WhatsApp or email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related queries or to exercise your PDPA rights, contact our Data Protection Officer at: