Privacy Policy

This Privacy Policy describes how Altronis Pte. Ltd. (UEN 202637312W) ("we", "us", "our") collects, uses, and safeguards your personal data when you use our website at altronis.sg, in compliance with the Singapore Personal Data Protection Act 2012 (PDPA).

Last updated: September 2026

Information we collect

We may collect the following categories of data:

• Contact information - name, email address, phone number, and company details you provide through our contact forms, the homepage chat's contact form, or when interacting with our AI assistants (the Lyra chat on our homepage and the Lyra chat widget on other pages).
• Chatbot conversations - if you interact with any Lyra AI assistant, we collect the content of your conversation, including any personal details you share during the chat. Conversation transcripts are processed to provide you with relevant responses and may be used to extract lead information (such as your name, email, company, and stated requirements) if you choose to share those details.
• Technical data - IP address, browser type, device information, pages visited, and referring URL. This data is collected automatically via server logs, Cloudflare, and Google Analytics.
• Usage data - interactions with site features such as the SG AI Ecosystem dashboard, portfolio pages, blog posts, and demo pages.

How we use your data

• To respond to enquiries or requests for proposals.
• To power the Lyra chatbot. Chat messages are first sent to AI models running on Altronis-managed hardware in Singapore. If those models are unavailable or too slow, or if you attach an image, the message may be sent to a third-party AI model provider instead (see "Third-party data processors" below). Voice conversations in the chat widget are processed by Google.
• To qualify leads - if you provide contact details via the chatbot, we use AI to extract structured information from the conversation and forward it to our team via email and internal messaging.
• To improve our website, content, and services.
• To detect and prevent security threats, abuse, and unauthorised access.
• To send updates or relevant information, only if you have opted in.

Third-party data processors

We use the following third-party services that may process your data in the course of operating our website:

• Altronis self-hosted models - the Lyra chat is served first by AI models running on our own hardware in Singapore (not a third party).
• Z.ai - backup AI model provider for the Lyra chat, used only when our own models are unavailable or too slow to answer. Z.ai's privacy policy applies.
• NVIDIA NIM - backup AI inference for the Lyra chat and for extracting lead details, image understanding, and parts of our news pipeline. NVIDIA's privacy policy applies.
• Google (Gemini API) - processes voice conversations in the Lyra chat widget. Google's privacy policy applies.
• Microsoft (Microsoft 365, Graph and Bookings) - used to send emails you ask us for (such as a playbook) from [email protected], and to run the "Book a call" scheduling page. Microsoft's privacy policy applies.
• Google Firestore - stores Lyra chat transcripts (your messages and Lyra's replies, grouped by a random session id, with no IP address or cookie attached) so we can review and improve the chat. Hosted in Google Cloud Platform under our project. Google's privacy policy applies.
• Telegram - chat exchanges and lead summaries may be forwarded to our team's internal Telegram account so a person can follow up. Telegram's privacy policy applies.
• Google Analytics (GA4) - collects anonymised usage data, including page views, scroll depth, and which buttons or links are used on the homepage. We never record the text you type into the chat. Google's privacy policy applies.
• Google Cloud Platform - our website is hosted on Google Cloud Run. Server logs including IP addresses and request data are stored in Google Cloud Logging.
• Cloudflare - provides CDN, DDoS protection, and security services. Cloudflare processes traffic data including IP addresses. Cloudflare's privacy policy applies.
• Formspree - processes contact form submissions. Formspree's privacy policy applies.

Lyra AI assistants

Lyra is the AI assistant on our website. The homepage is a conversation-first landing where Lyra answers AI consulting questions, and the same Lyra is available as a chat widget on other pages. When you use it:

• Messages are processed first on Altronis-managed hardware in Singapore, with the third-party fallbacks described above.
• If you have accepted cookies, the homepage chat stores your conversation in your own browser (localStorage) for up to 24 hours so it can pick up where you left off if you return the same day. This copy stays on your device, is never sent to us, and is removed by the "Clear conversation" button or by declining cookies.
• The chatbot may access live Singapore government data (from data.gov.sg via our open-source sgdata-mcp tool) to answer data-related questions. This data is publicly available and does not involve your personal information.
• If you voluntarily share contact details, a summary may be forwarded to our team via email and Telegram for follow-up.
• Conversation transcripts and metadata (message count, tools used, response times) are logged for review and performance monitoring.
• You are not required to provide any personal information to use any Lyra assistant.

Data retention

Contact form submissions and chatbot conversation data are retained for up to 12 months and then deleted. Server logs are retained in accordance with Google Cloud's default retention policies (typically 30 days). Analytics data is retained for up to 14 months as per Google Analytics' default settings.

We ran sector-specific advisors (Sporty Lyra, Mechanical Lyra and others) until September 2026. They are retired; any records created while they ran remain covered by this policy until deleted.

Data protection

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and security monitoring. Your information will not be sold or shared with third parties except as described in this policy or as required by Singapore law.

Your rights

Under the PDPA, you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent for the collection, use, or disclosure of your data.

To exercise these rights, contact us at [email protected].

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.