Privacy notice

In 30 seconds. We use your data only to run Heirsight. We don't sell it; we're paid by subscriptions. Neither we nor our providers train AI models on it. It is stored in the European Union. You can export and delete it at any time.

Who is responsible

For family-office clients, the family office decides what data goes into Heirsight and is responsible for it. We process it on its behalf, as a data intermediary under the Personal Data Protection Act 2012 (PDPA) and as a processor under the EU GDPR, under a data processing agreement signed with each client.

What we process

• Account: names, work emails, roles and sign-in data of the people the office invites.
• Wealth data: entities, holdings, bank statements, positions, property and commitments that the office loads.
• Documents uploaded so the AI can read them.
• Usage and security logs, including AI usage counts.
• Billing details for the contracting entity.

Why

To provide the service under the contract, to secure accounts and prevent misuse, and to invoice. We don't make automated decisions about anyone and don't assess creditworthiness.

Artificial intelligence

The assistant and document reading use Google's Gemini models through Google Cloud Vertex AI, under a contract that forbids training on customer data, processed in an EU region. Only the data needed for each request is sent.

Where data goes

Data is hosted in the European Union with [Supabase, Google Cloud, Cloudflare — regions to confirm]. Transfers out of Singapore are protected by contractual clauses that give a standard of protection comparable to the PDPA (Transfer Limitation Obligation). We don't sell or share data for marketing.

How long

While the contract is active. On termination we return the data on request and delete it within 30 days, except invoices we must keep by law.

Breaches

We notify the client without undue delay so it can meet its own obligations, including notifying the PDPC within 3 calendar days where a breach is notifiable.

Your rights and contact

Individuals can ask the family office, or our Data Protection Officer at dpo@heirsight.com, for access to or correction of their data.