Privacy Policy

Fintelite is operated by Sribuu Financial Pte. Ltd. (UEN 202141139M), trading as Fintelite, 105 Cecil Street, #18-18, The Octagon, Singapore 069534 ("Fintelite", "we", "us"), together with its affiliates where they help provide the Services.

This policy covers personal data we handle through fintelite.ai, anycheck.ai, the Fintelite app, our APIs and integrations, and our sales, marketing and events. It forms part of our agreement with customers together with our Terms of Service, any Order Form and, where applicable, our Data Processing Agreement (DPA).

Controller for account, contact, billing, website and marketing data. This policy explains how we use it.

Processor for personal data inside Customer Data: the documents our customers upload (such as ID cards, bank statements, payslips, invoices and financial statements) and the data extracted from them. We process Customer Data only on the customer's instructions under our agreement and DPA.

If your personal data appears in a document a Fintelite customer uploaded (for example, a bank statement you gave your lender), that customer's privacy notice applies. Please send requests to them; we will help them respond.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. Where our customers use the Output in their own decisions, they are responsible for that decision-making.

Used to serve the customer. We process Customer Data to provide the Services to the customer that uploaded it.

AI models. We read documents with our own machine learning models and may from time to time use models provided by third parties,. Those providers process Customer Data only to return results to us, under written data protection terms.

Improving the Services. We may use Customer Data in de-identified or aggregated form, which no longer identifies the customer or any individual, to improve the accuracy and performance of our models and Services, unless the customer's agreement with us says otherwise.

Need-to-know access. Only authorised Fintelite staff can access Customer Data, only to support the customer, keep the Services secure or meet a legal duty. Access is logged.

Never sold, never used for marketing.

We do not sell personal data. We share it only with:

Subprocessors and service providers that host, process or support the Services, such as cloud hosting, AI model APIs, email, support and analytics providers, under written data protection terms.

Verification sources that a customer instructs us to check data against, such as government or registry databases, where the customer has a lawful basis.

Integrations you turn on, where that provider's own terms apply.

Authorities, when required by law, court order or a competent regulator.

A successor, if Fintelite is involved in a merger, acquisition or sale of assets, under this policy. We will notify you before your data becomes subject to a different policy.

Others with your consent.

Customer Data is stored in Southeast Asia. Some service providers, such as AI model APIs, may process data in hosted countries. When we transfer personal data across borders, we make sure the recipient protects it to a standard comparable to the law of the country it came from, for example under Singapore's Transfer Limitation Obligation or Article 56 of Indonesia's PDP Law, using binding contractual safeguards or consent where required. Enterprise customers can choose a dedicated or on-premise deployment to keep data within their own environment.

We use strictly necessary cookies for security and sign-in, and analytics and advertising cookies Google Analytics to understand and promote our website. You can manage non-essential cookies in our cookie banner or your browser settings. Some features may not work without necessary cookies.

We use encryption in transit (TLS 1.2 or higher) and at rest (AES-256), role-based access, multi-factor authentication for staff, logging and monitoring, and periodic vulnerability assessments. Our security programme is aligned with ISO 27001.

No system is completely secure. If a personal data breach occurs, we will notify affected customers, individuals and authorities as applicable data protection laws require, for example notifying Singapore's Personal Data Protection Commission within 3 calendar days of assessing that a breach is notifiable.

Depending on where you live, and subject to applicable data protection laws, you may ask us to:

tell you what personal data we hold, why and on what basis;

give you access to, or a copy of, your personal data, including in a portable format;

correct inaccurate or incomplete data;

delete or destroy your data;

restrict or suspend processing, or object to processing based on legitimate interest;

withdraw consent you have given, without affecting earlier processing;

object to decisions based solely on automated processing;

stop marketing emails at any time, using the unsubscribe link.

Email support@fintelite.ai with the subject "Privacy request". We will verify your identity and respond within 30 days, or sooner where local law requires a shorter period. If we need longer, we will tell you why. You may also complain to your local data protection authority, such as Singapore's Personal Data Protection Commission.

For Customer Data, please send requests to the Fintelite customer that uploaded the document.

Our Services are for businesses. We do not knowingly collect personal data from anyone under 18 for our own purposes. If you believe we have, contact us and we will delete it.

Our website and app link to sites and services we do not control. Their own privacy policies apply.

We will post any change on this page with a new date. For material changes, we will notify customers by email or in the app before they take effect.

Data Protection Officer, Sribuu Financial Pte. Ltd. (trading as Fintelite), 105 Cecil Street, #18-18, The Octagon, Singapore 069534. Email: support@fintelite.ai.

This policy is governed by the laws of Singapore. That does not remove any protection the law where you live gives you, including Indonesia's PDP Law, Malaysia's PDPA and Australia's Privacy Act.