Legal

Privacy Policy

Last updated: 12 May 2026

Curioeus Pte. Ltd. ("the Company," "we," "us," or "our") (77 Robinson Road, Level 18, Singapore 089315) is the data controller for personal data collected through curioeus.com and the Curioeus service. We process personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA"). Questions or requests may be directed to [email protected].

1. What Curioeus Does with Your Data

Curioeus is an AI ghostwriting service for B2B founders. When you use the product, you record a short voice note (typically two minutes) and the platform transcribes it, processes the transcript through a third-party AI language model, and returns a long-form draft for your review. Because voice processing and AI-assisted writing are central to what we do, this policy describes data handling at each step of that workflow with specificity, not at the generic level of "information you submit."

2. Personal Data We Collect

2.1 Account and contact data

  • Your name and email address, collected when you register or request early access;
  • Your LinkedIn handle, where you provide it to enable timing recommendations tied to your audience;
  • Payment information processed by our payment provider (we do not store full card numbers).

2.2 Voice recordings and transcripts

When you submit a voice note, we receive an audio file of your recording. That audio is transcribed to text. Both the raw audio file and the resulting transcript are personal data because they relate to you and contain your voice, your words, and potentially information about third parties you mention. We treat these with corresponding care.

2.3 Generated drafts and preferences

The AI-generated post drafts produced from your transcripts are stored in your account so you can review, edit, or re-access them. Your posting-schedule preferences (preferred days, times, and geographic timezone for your audience) are also stored as preference data.

2.4 Technical and usage data

  • IP address, browser type, and device information collected automatically;
  • Pages visited, features used, and session duration for product analytics;
  • Cookie and local-storage identifiers (see our Cookie Policy).

3. Purposes and Legal Basis for Processing

We notify you of the purposes for which personal data is collected and obtain your consent, or process personal data on other grounds permitted by the PDPA. Our primary purposes are:

  • Providing the service: transcribing your voice notes, generating post drafts, delivering timing recommendations, and maintaining your account;
  • Improving the product: understanding how features are used, diagnosing errors, and improving transcription and draft quality (using aggregated and, where possible, anonymised data);
  • Communications: sending transactional emails (draft ready, account notifications) and, with your consent, product updates or early-access news;
  • Legal obligations: retaining records to the extent required by applicable Singapore law.

We do not use your voice recordings, transcripts, or generated drafts to train AI models without your explicit written consent.

4. Data Retention

We apply separate retention periods to the different categories of data we hold:

  • Raw audio recordings: deleted within 30 days of the voice note being submitted, once transcription is complete. We do not keep audio files after the transcript has been generated and confirmed.
  • Transcripts and generated drafts: retained for the life of your active account and for up to 90 days after account closure, to support any dispute resolution or re-access requests during that window. After 90 days post-closure, transcripts and drafts are permanently deleted.
  • Account and contact data: retained while your account is active and for up to 12 months after account closure, then deleted or anonymised.
  • Billing records: retained for the period required by Singapore tax and accounting law, typically 5 years.
  • Usage and analytics data: aggregated or anonymised data may be retained indefinitely; identifiable usage logs are deleted after 13 months.

5. Disclosure and Cross-Border Transfer

We share personal data only with service providers who process it on our behalf and only to the extent necessary for the services they provide. Categories of sub-processors include:

  • AI model provider: your transcript is sent to a third-party large-language-model service to generate the post draft. The provider processes it under a data-processing agreement that restricts use to providing the service to us and prohibits training on your content;
  • Transcription service: voice audio is processed by a third-party speech-to-text service under a data-processing agreement;
  • Cloud hosting: infrastructure and storage hosted in data centres (currently Singapore-region where available);
  • Email delivery: transactional emails sent via an email service provider;
  • Payment processing: handled by an international payment provider under their own privacy terms.

Where personal data is transferred outside Singapore, we ensure a comparable standard of protection through contractual clauses or other mechanisms recognised under the PDPA. We do not sell personal data to any party.

6. Your PDPA Rights

Under the Singapore Personal Data Protection Act 2012, you have the following rights in respect of personal data the Company holds about you:

  • Right of access: you may request a copy of the personal data we hold about you;
  • Right to correction: you may request correction of inaccurate or incomplete personal data;
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing;
  • Right to data portability: where technically feasible and applicable under the PDPA, you may request your data in a structured, commonly used format.

To exercise any of these rights, email [email protected]. We will respond within 30 days. We may need to verify your identity before actioning a request.

7. Data Breach Notification

Notifiable data breaches are reported to the Personal Data Protection Commission ("PDPC") and to affected individuals as required by the PDPA. We maintain internal procedures for detecting, investigating, and notifying breaches within the timeframes the PDPA prescribes.

8. Do Not Call (DNC)

We do not use telephone marketing. If we were to do so in the future, all marketing messages to Singapore numbers would comply with the DNC Provisions under the PDPA. You may opt out of any marketing communications via the unsubscribe link in any such message or by emailing us.

9. Children

The Curioeus service is directed at business founders and professionals. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has provided us personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as our practices change. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

11. Complaints and Contact

You may lodge a complaint with the Personal Data Protection Commission at pdpc.gov.sg. To contact us directly:

Curioeus Pte. Ltd.
77 Robinson Road, Level 18
Singapore 089315
Email: [email protected]
Phone: +65 6221 3480