This Privacy Policy explains how Cleverly SG Pte. Ltd. (“Cleverly”, “we”, “our”, “us”) and our AI-chatbot platform Ehly collect, use, disclose, and safeguard your personal data when you interact with:
-
any domain or sub-domain ending in .cleverly.sg or .cleverly.my
-
heyehly.com, chatbot.heyehly.com, or an Ehly widget embedded on a client site
-
the Ehly admin dashboard, public chat widgets, and related APIs
By continuing to use these sites or services, you consent to the practices described below.
1 · Who we are
-
Legal entities – Cleverly SG Pte. Ltd. (UEN 201734623N) in Singapore and Cleverly MY Sdn. Bhd. (registration pending) in Malaysia.
-
Headquarters – 52 Telok Blangah Rd, #04-01, Singapore 098829.
-
Privacy contact – hello@cleverly.sg.
2 · What personal data we collect and why
Website comments and blog replies
• Data: name, email, comment text, IP address, browser user-agent.
• Purpose: publish your comment, detect spam and abuse.
Contact forms, lead pop-ups, and chatbots (including Ehly widgets)
• Data: anything you type (for example name, email, phone, company, message), IP address, device details, conversation transcript.
• Purpose: respond to enquiries, schedule demos, issue quotes, add you to our CRM or remarketing lists, and improve bot replies.
Ehly admin accounts
• Data: name, business email, hashed password, user role, audit log of actions.
• Purpose: authenticate accounts, prevent fraud, and generate usage reports.
File uploads
• Data: files you upload plus any embedded metadata (for example EXIF or GPS).
• Purpose: provide the service you requested (such as job applications or support).
Usage analytics and telemetry
• Data: pseudonymised visitor or device IDs, pages viewed, clicks, browser/device details.
• Purpose: understand traffic patterns and improve our content or product.
Marketing and ad tags
• Data: cookie or device IDs and on-site actions.
• Purpose: measure ad performance and build custom audiences.
Ehly conversation logs
• Data: end-user inputs, generated replies, timestamps, error logs.
• Purpose: provide real-time answers, quality-assure responses, and monitor abuse.
Future online payments
• Data: card or billing details handled directly by Stripe, PayPal, HitPay, or any equivalent processor.
• Purpose: process transactions; we never store full card numbers on our own servers.
Lawful basis: your express or deemed consent under the Singapore PDPA and Malaysia PDPA 2010, together with our legitimate interests in security and service optimisation (balanced against your rights).
3 · How Ehly handles conversation data
-
Processing – User inputs are routed through OpenAI’s servers (currently in the United States or Europe) for language processing.
-
Retention – Raw transcripts are stored for up to 30 days by default for debugging and client reporting, unless a different period is agreed in writing.
-
No public model training – We do not feed client or end-user data into any public AI model.
-
Client access – If you chat with an Ehly bot embedded on a third-party site, that site owner may export your transcript under their own privacy terms.
4 · Cookies and similar technologies
We use three categories of cookies:
-
Essential cookies – keep the site secure and functioning (for example session and CSRF tokens, load-balancing identifiers).
-
Analytics/telemetry cookies – help us understand traffic and improve usability (for example GA4, Hotjar, Mixpanel, Sentry, or equivalent).
-
Marketing cookies – enable remarketing or campaign measurement (for example Meta Pixel, Google Ads, LinkedIn Insight, TikTok Pixel, and any future tags).
When you first arrive, a banner lets you accept all cookies or manage non-essential ones. You can also clear cookies in your browser at any time.
5 · Embedded and third-party content
Articles or chatbot answers may embed YouTube videos, social-media posts, external calendars, or booking widgets. Interacting with that content is equivalent to visiting the source site, which may set its own cookies or collect data under its own policy.
6 · Data-retention schedule
-
Website comments: kept indefinitely so that conversation threads remain intact.
-
Contact-form and chatbot leads: stored for up to 24 months, or longer if you become a client (then retained as required by contract or law).
-
Ehly conversation logs: kept for 30 days by default; a shorter or longer period can be configured per client.
-
Analytics records: aggregated and anonymised after 14–26 months, following the auto-expiry periods set by Google, Meta, and similar vendors.
You may request earlier deletion at any time (see Section 9).
7 · Who we share data with
-
Email and CRM systems – Google Workspace, HubSpot, Mailchimp, or successors.
-
Cloud hosting – Amazon Web Services (AWS) ap-southeast-1 (Singapore).
-
AI processing vendor – OpenAI LLC.
-
Analytics and telemetry providers – Google Analytics 4, Hotjar, Mixpanel, and comparable future services.
-
Advertising and remarketing platforms – Google Ads, Meta, LinkedIn, TikTok, and other networks we may adopt.
-
Security and anti-spam services – Cloudflare, Akismet, reCAPTCHA.
Each third-party vendor is contractually bound to act only on our instructions and to implement safeguards that meet or exceed Singapore and Malaysia PDPA standards.
8 · Cross-border data transfers
Our primary servers are in Singapore (AWS ap-southeast-1). Some of our service providers—such as OpenAI, Google, Meta, and HubSpot—may store or process data in the United States, the European Union, or other regions. When that happens we rely on: (a) the providers’ own standard contractual terms or data-processing addenda; and (b) the technical and organisational safeguards those providers make available (for example encryption in transit and at rest). We do not currently maintain separate in-house transfer mechanisms or independent certifications.
9 · Your rights under the Singapore PDPA and Malaysia PDPA 2010
You have the right to:
-
Access the personal data we hold about you.
-
Correct inaccurate or incomplete data.
-
Withdraw consent or request deletion, subject to statutory or contractual retention requirements (for example financial records).
To exercise these rights, email hello@cleverly.sg. We normally respond within 30 calendar days.
10 · Security measures
We take reasonable steps to protect your information, including:
-
Serving all public sites over HTTPS by default.
-
Using reputable cloud providers (AWS and Cloudflare) that apply their own security patches and monitoring.
-
Restricting access to personal data to staff who need it for their job functions, and requiring strong passwords.
-
Backing up server data regularly using the default encryption options provided by our cloud vendor.
No system is perfectly secure, and we do not claim to meet any specific security standard (such as ISO 27001 or SOC 2). If we become aware of a breach that is likely to harm you, we will notify the affected parties and the relevant regulator as required by law.
11 · User accounts
Public visitors to cleverly.sg and cleverly.my cannot create accounts. Login credentials are restricted to invited business users of the Ehly dashboard.
12 · Policy updates
This Policy applies to current and future Cleverly domains, including cleverly.my (scheduled for launch in 2025). We may amend the Policy periodically. The “Last updated” date will change, and any material revisions will be highlighted via an on-site banner or in-app notice. Continued use of our services after an update signifies acceptance of the revised terms.
13 · Contact us
Privacy Team
Cleverly SG Pte. Ltd.
52 Telok Blangah Rd, #04-01
Singapore 098829
Email: hello@cleverly.sg
This Privacy Policy explains how Cleverly SG Pte. Ltd. (“Cleverly”, “we”, “our”, “us”) and our AI-chatbot platform Ehly collect, use, disclose, and safeguard your personal data when you interact with:
-
any domain or sub-domain ending in .cleverly.sg or .cleverly.my
-
heyehly.com, chatbot.heyehly.com, or an Ehly widget embedded on a client site
-
the Ehly admin dashboard, public chat widgets, and related APIs
By continuing to use these sites or services, you consent to the practices described below.
1 · Who we are
-
Legal entities – Cleverly SG Pte. Ltd. (UEN 201734623N) in Singapore and Cleverly MY Sdn. Bhd. (registration pending) in Malaysia.
-
Headquarters – 52 Telok Blangah Rd, #04-01, Singapore 098829.
-
Privacy contact – hello@cleverly.sg.
2 · What personal data we collect and why
Website comments and blog replies
• Data: name, email, comment text, IP address, browser user-agent.
• Purpose: publish your comment, detect spam and abuse.
Contact forms, lead pop-ups, and chatbots (including Ehly widgets)
• Data: anything you type (for example name, email, phone, company, message), IP address, device details, conversation transcript.
• Purpose: respond to enquiries, schedule demos, issue quotes, add you to our CRM or remarketing lists, and improve bot replies.
Ehly admin accounts
• Data: name, business email, hashed password, user role, audit log of actions.
• Purpose: authenticate accounts, prevent fraud, and generate usage reports.
File uploads
• Data: files you upload plus any embedded metadata (for example EXIF or GPS).
• Purpose: provide the service you requested (such as job applications or support).
Usage analytics and telemetry
• Data: pseudonymised visitor or device IDs, pages viewed, clicks, browser/device details.
• Purpose: understand traffic patterns and improve our content or product.
Marketing and ad tags
• Data: cookie or device IDs and on-site actions.
• Purpose: measure ad performance and build custom audiences.
Ehly conversation logs
• Data: end-user inputs, generated replies, timestamps, error logs.
• Purpose: provide real-time answers, quality-assure responses, and monitor abuse.
Future online payments
• Data: card or billing details handled directly by Stripe, PayPal, HitPay, or any equivalent processor.
• Purpose: process transactions; we never store full card numbers on our own servers.
Lawful basis: your express or deemed consent under the Singapore PDPA and Malaysia PDPA 2010, together with our legitimate interests in security and service optimisation (balanced against your rights).
3 · How Ehly handles conversation data
-
Processing – User inputs are routed through OpenAI’s servers (currently in the United States or Europe) for language processing.
-
Retention – Raw transcripts are stored for up to 30 days by default for debugging and client reporting, unless a different period is agreed in writing.
-
No public model training – We do not feed client or end-user data into any public AI model.
-
Client access – If you chat with an Ehly bot embedded on a third-party site, that site owner may export your transcript under their own privacy terms.
4 · Cookies and similar technologies
We use three categories of cookies:
-
Essential cookies – keep the site secure and functioning (for example session and CSRF tokens, load-balancing identifiers).
-
Analytics/telemetry cookies – help us understand traffic and improve usability (for example GA4, Hotjar, Mixpanel, Sentry, or equivalent).
-
Marketing cookies – enable remarketing or campaign measurement (for example Meta Pixel, Google Ads, LinkedIn Insight, TikTok Pixel, and any future tags).
When you first arrive, a banner lets you accept all cookies or manage non-essential ones. You can also clear cookies in your browser at any time.
5 · Embedded and third-party content
Articles or chatbot answers may embed YouTube videos, social-media posts, external calendars, or booking widgets. Interacting with that content is equivalent to visiting the source site, which may set its own cookies or collect data under its own policy.
6 · Data-retention schedule
-
Website comments: kept indefinitely so that conversation threads remain intact.
-
Contact-form and chatbot leads: stored for up to 24 months, or longer if you become a client (then retained as required by contract or law).
-
Ehly conversation logs: kept for 30 days by default; a shorter or longer period can be configured per client.
-
Analytics records: aggregated and anonymised after 14–26 months, following the auto-expiry periods set by Google, Meta, and similar vendors.
You may request earlier deletion at any time (see Section 9).
7 · Who we share data with
-
Email and CRM systems – Google Workspace, HubSpot, Mailchimp, or successors.
-
Cloud hosting – Amazon Web Services (AWS) ap-southeast-1 (Singapore).
-
AI processing vendor – OpenAI LLC.
-
Analytics and telemetry providers – Google Analytics 4, Hotjar, Mixpanel, and comparable future services.
-
Advertising and remarketing platforms – Google Ads, Meta, LinkedIn, TikTok, and other networks we may adopt.
-
Security and anti-spam services – Cloudflare, Akismet, reCAPTCHA.
Each third-party vendor is contractually bound to act only on our instructions and to implement safeguards that meet or exceed Singapore and Malaysia PDPA standards.
8 · Cross-border data transfers
Our primary servers are in Singapore (AWS ap-southeast-1). Some of our service providers—such as OpenAI, Google, Meta, and HubSpot—may store or process data in the United States, the European Union, or other regions. When that happens we rely on: (a) the providers’ own standard contractual terms or data-processing addenda; and (b) the technical and organisational safeguards those providers make available (for example encryption in transit and at rest). We do not currently maintain separate in-house transfer mechanisms or independent certifications.
9 · Your rights under the Singapore PDPA and Malaysia PDPA 2010
You have the right to:
-
Access the personal data we hold about you.
-
Correct inaccurate or incomplete data.
-
Withdraw consent or request deletion, subject to statutory or contractual retention requirements (for example financial records).
To exercise these rights, email hello@cleverly.sg. We normally respond within 30 calendar days.
10 · Security measures
We take reasonable steps to protect your information, including:
-
Serving all public sites over HTTPS by default.
-
Using reputable cloud providers (AWS and Cloudflare) that apply their own security patches and monitoring.
-
Restricting access to personal data to staff who need it for their job functions, and requiring strong passwords.
-
Backing up server data regularly using the default encryption options provided by our cloud vendor.
No system is perfectly secure, and we do not claim to meet any specific security standard (such as ISO 27001 or SOC 2). If we become aware of a breach that is likely to harm you, we will notify the affected parties and the relevant regulator as required by law.
11 · User accounts
Public visitors to cleverly.sg and cleverly.my cannot create accounts. Login credentials are restricted to invited business users of the Ehly dashboard.
12 · Policy updates
This Policy applies to current and future Cleverly domains, including cleverly.my (scheduled for launch in 2025). We may amend the Policy periodically. The “Last updated” date will change, and any material revisions will be highlighted via an on-site banner or in-app notice. Continued use of our services after an update signifies acceptance of the revised terms.
13 · Contact us
Privacy Team
Cleverly SG Pte. Ltd.
52 Telok Blangah Rd, #04-01
Singapore 098829
Email: hello@cleverly.sg