Privacy Policy

This Privacy Policy describes how Altronis Pte. Ltd. (UEN 202637312W) ("we", "us", "our") collects, uses, and safeguards your personal data when you use our website at altronis.sg, in compliance with the Singapore Personal Data Protection Act 2012 (PDPA).

Last updated: August 2026

Information we collect

We may collect the following categories of data:

• Contact information - name, email address, phone number, and company details you provide through our contact forms, the homepage chat's contact form, or when interacting with our AI assistants (the Lyra homepage chat, and the sector advisors - Sporty Lyra, Mechanical Lyra, Healthy Lyra, Studious Lyra, Savvy Lyra at /advisor/[sector]).
• Chatbot conversations - if you interact with any Lyra AI assistant, we collect the content of your conversation, including any personal details you share during the chat. Conversation transcripts are processed to provide you with relevant responses and may be used to extract lead information (such as your name, email, company, and stated requirements) if you choose to share those details.
• Sector advisor sessions - when you use a sector advisor (e.g. Sporty Lyra), an anonymous session record (sectorAdvisorSessions in our Firestore database) is created with your conversation turns, generated plan, and - if you request your plan by email - the email address you provide. Sessions are retained for up to 90 days and then automatically deleted (TTL). No login or signup is required and no PII is collected unless you voluntarily share it.
• Technical data - IP address, browser type, device information, pages visited, and referring URL. This data is collected automatically via server logs, Cloudflare, and Google Analytics.
• Usage data - interactions with site features such as the SG AI Ecosystem dashboard, portfolio pages, blog posts, and demo pages.

How we use your data

• To respond to enquiries or requests for proposals.
• To power the Lyra chatbot. Homepage chat messages are processed by AI models running on Altronis-managed hardware in Singapore and are not sent to third-party AI providers. Sector advisor messages are sent to third-party AI model providers (see "Third-party data processors" below) to generate responses.
• To qualify leads - if you provide contact details via the chatbot, we use AI to extract structured information from the conversation and forward it to our team via email and internal messaging.
• To improve our website, content, and services.
• To detect and prevent security threats, abuse, and unauthorised access.
• To send updates or relevant information, only if you have opted in.

Third-party data processors

We use the following third-party services that may process your data in the course of operating our website:

• Altronis self-hosted models - the homepage chat is served by AI models running on our own hardware in Singapore (not a third party). Your homepage chat messages are processed there and are not sent to any external AI provider.
• NVIDIA NIM - provides AI inference for the sector advisors and parts of our news pipeline. Sector advisor messages may be sent to NVIDIA's API to generate AI responses. NVIDIA's privacy policy applies.
• Google (Gemini API) - used for lead extraction from chatbot conversations when you provide contact details, and as an inference provider for the sector advisors. Google's privacy policy applies.
• Microsoft (Microsoft 365, Graph and Bookings) - used to send the AI plan email from [email protected] if you request your plan by email, and to run the "Book a call" scheduling page. Microsoft's privacy policy applies.
• Google Firestore - stores anonymous sector advisor session records (your conversation, generated plan, recipient email if provided) for up to 90 days. Hosted in Google Cloud Platform under our project. Google's privacy policy applies.
• Google Analytics (GA4) - collects anonymised usage data, including page views, scroll depth, and which buttons or links are used on the homepage. We never record the text you type into the chat. Google's privacy policy applies.
• Google Cloud Platform - our website is hosted on Google Cloud Run. Server logs including IP addresses and request data are stored in Google Cloud Logging.
• Cloudflare - provides CDN, DDoS protection, and security services. Cloudflare processes traffic data including IP addresses. Cloudflare's privacy policy applies.
• Formspree - processes contact form submissions. Formspree's privacy policy applies.

Lyra AI assistants

Lyra is the family of AI assistants on our website. The homepage is a conversation-first landing where Lyra answers general AI consulting questions. Each sector page hosts a sector-specific advisor: Sporty Lyra (sport businesses), Mechanical Lyra (manufacturing & engineering), Healthy Lyra (clinics & allied health), Studious Lyra (training & education), and Savvy Lyra (retail & e-commerce). When you use any of them:

• Homepage chat messages are processed on Altronis-managed hardware in Singapore. Sector advisor messages are sent to external AI model providers to generate responses.
• If you have accepted cookies, the homepage chat stores your conversation in your own browser (localStorage) for up to 24 hours so it can pick up where you left off if you return the same day. This copy stays on your device, is never sent to us, and is removed by the "Clear conversation" button or by declining cookies.
• The chatbot may access live Singapore government data (from data.gov.sg via our open-source sgdata-mcp tool) to answer data-related questions. This data is publicly available and does not involve your personal information.
• If you voluntarily share contact details, a summary may be forwarded to our team via email and Telegram for follow-up.
• Conversation metadata (message count, tools used, response times) is logged for performance monitoring. These logs do not contain the content of your messages.
• You are not required to provide any personal information to use any Lyra assistant.
• On the sector advisor pages, if you request your generated plan by email, the email address you provide is used to deliver the plan (HTML body + standalone HTML attachment + PDF) and may be retained in our Lyra CRM for one personal follow-up. You can opt out at any time by replying "unsubscribe" to the email or contacting [email protected].

Data retention

Contact form submissions and chatbot conversation data are retained for up to 12 months and then deleted. Server logs are retained in accordance with Google Cloud's default retention policies (typically 30 days). Analytics data is retained for up to 14 months as per Google Analytics' default settings.

Data protection

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and security monitoring. Your information will not be sold or shared with third parties except as described in this policy or as required by Singapore law.

Your rights

Under the PDPA, you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent for the collection, use, or disclosure of your data.

To exercise these rights, contact us at [email protected].

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.