Legal

Brexy Website Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how Brexy Pte. Ltd. ("Brexy", "we", "us" or "our") collects, uses, discloses and protects personal data when you visit www.brexy.ai, use its forms or scheduling tools, apply for a role, communicate with us, or otherwise interact with the website (the "Website").

Brexy Pte. Ltd. is incorporated in Singapore. Our contact address is 20A Tanjong Pagar Road, Singapore 088443.

This Policy applies to the Website and related sales, marketing and recruitment interactions. If you use the Brexy software platform through an enterprise customer, additional terms and notices supplied to that customer may also apply. When we process personal data solely on an enterprise customer's instructions, that customer is responsible for its processing purposes and you should direct requests about that data to the customer in the first instance.

Table of Contents

1. Personal data we collect

We collect the following categories of personal data.

Data you provide

  • Contact and professional details: name, business email address, phone number, employer, job title, company type and team size.
  • Enquiries and demo requests: the content of messages, your areas of interest, how you heard about us, preferred meeting details and related correspondence.
  • Scheduling data: appointment time, scheduling identifiers, meeting or rescheduling links, and information you provide through Calendly.
  • Recruitment data: name, email address, phone number, LinkedIn profile, role applied for, CV or résumé, and information contained in your application and later correspondence.
  • Marketing preferences: your consent or objection to receiving marketing messages and records of your communication preferences.
  • Other information: any information you choose to include in a free-text field, email or other communication with us. Please do not send sensitive personal data unless we specifically request it and it is necessary for the relevant purpose.

Data collected automatically

When you visit the Website, we and our service providers may collect:

  • IP address and approximate location derived from it;
  • browser, device and operating-system information;
  • referring page, pages viewed, links selected and timestamps;
  • cookie identifiers and similar online identifiers;
  • interaction, diagnostic, security and error information; and
  • campaign and attribution data, including UTM parameters.

Our servers also receive technical request data needed to deliver and secure the Website. We use an IP-derived identifier to apply short-term submission limits to forms. The Website does not use that identifier to make decisions about your eligibility for a product or service.

Data from other sources

We may receive business contact information from your employer, colleagues, event organisers, referrals, publicly available professional sources, and business-data providers. We may combine that information with information you provide to us where permitted by law.

2. How we use personal data

We use personal data to:

  • operate, maintain, secure and troubleshoot the Website;
  • respond to enquiries and communicate with you;
  • arrange, confirm and follow up on demonstrations and meetings;
  • evaluate and administer job applications;
  • send requested materials, service messages and acknowledgements;
  • maintain sales, customer and business-development records;
  • understand Website use, measure campaigns and improve our content and services;
  • prevent spam, fraud, misuse and security incidents;
  • comply with law, enforce our terms, establish or defend legal claims, and protect people, property and rights;
  • manage corporate transactions such as a merger, financing, reorganisation or sale; and
  • send marketing communications where you have consented or where applicable law otherwise permits them.

We may aggregate or de-identify information so that it no longer identifies an individual. We may use and disclose that information for analytics, research and service improvement.

4. Cookies, analytics and similar technologies

The Website uses cookies, scripts, pixels and similar technologies to provide features, remember settings, measure use and protect the Website.

The Website currently uses these categories:

  • Analytics technologies, including Google Analytics, which help us understand visits, navigation and campaign performance.
  • Functionality technologies, including tools used to provide scheduling features.

Google Analytics may collect device, browser and Website interaction data. It uses IP addresses at collection time to derive approximate location and discards them before the addresses are logged. Calendly may collect information when its scheduling interface loads or when you book a meeting. These providers may place or read their own cookies or similar identifiers in accordance with their policies.

Where applicable law requires consent for a non-essential technology, we will request consent before using it. You can also restrict or delete cookies through your browser settings. Blocking cookies or third-party content may cause analytics, scheduling or other Website features to work incorrectly.

The Website does not currently respond to browser "Do Not Track" signals. Where we are legally required to recognise an opt-out preference signal, we will treat a supported signal as a request to opt out for the browser or device that sends it.

5. How we disclose personal data

We may disclose personal data to:

  • hosting, infrastructure, security and content-delivery providers that operate and protect the Website;
  • Google, for Website analytics and for the Sheets and Drive services used to record form submissions and recruitment files;
  • Resend, to deliver acknowledgements and internal notifications about form submissions;
  • Calendly, to display scheduling tools and arrange meetings;
  • professional advisers, including lawyers, accountants, auditors and insurers;
  • our related companies, personnel and contractors who need the information for the purposes described in this Policy;
  • your organisation, where that is appropriate to an existing or prospective business relationship;
  • courts, regulators, law-enforcement bodies and other authorities where disclosure is required or permitted by law; and
  • participants in a corporate transaction, including potential buyers, investors and advisers, subject to appropriate confidentiality protections.

Some Website pages may load content from third-party content-delivery networks or media hosts. When your browser connects to those services, they receive technical request data such as your IP address, browser information and the page requesting the content.

We do not sell personal data. Based on the Website practices described in this Policy, we do not share personal data for cross-context behavioural advertising.

6. International transfers

Brexy is based in Singapore, and our service providers and recipients may process personal data in Singapore, the United States and other countries. Those countries may have privacy laws that differ from the laws where you live.

Where the PDPA applies, we take reasonable steps to ensure that recipients outside Singapore provide a standard of protection comparable to the PDPA. Where UK or EU data-transfer rules apply, we use a recognised transfer mechanism where required, such as an adequacy decision or approved standard contractual clauses, together with supplementary safeguards where appropriate. You may contact us for more information about the safeguards relevant to your data.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to manage a business relationship, respond to an enquiry, administer recruitment, satisfy legal or accounting requirements, resolve disputes, and establish or defend legal claims.

Retention depends on the nature of the record, the status of the relationship, sensitivity, legal requirements and limitation periods. When personal data is no longer required, we delete it, anonymise it, or place it beyond operational use until secure deletion is possible. Backup copies may remain for a limited period under our normal backup cycle.

8. Security

We use administrative, organisational and technical safeguards designed to protect personal data against accidental or unlawful loss, misuse, access, alteration and disclosure. These include access controls, encryption where appropriate, logging, vendor controls and restrictions based on business need.

No internet transmission or storage system is completely secure. Please do not submit confidential deal information, financial account data, government identifiers, health information or other sensitive material through a general Website form unless we specifically ask you to use an approved secure channel.

9. Marketing communications

We may send information about Brexy products, events and services where you have consented or where the law permits us to do so. You can unsubscribe through the link in a marketing email or contact us at support@brexy.ai. We may still send non-marketing messages needed to respond to you, administer a relationship, or provide legal or security notices.

For marketing to Singapore telephone numbers, we comply with the Do Not Call provisions of the PDPA where they apply.

10. Your rights and choices

Your rights depend on where you live and on the circumstances of our processing.

Under the Singapore PDPA, you may request access to personal data we hold about you and information about certain uses or disclosures, request correction of inaccurate or incomplete data, and withdraw consent on reasonable notice. Data portability rights apply when the relevant statutory requirements are in force and apply to the processing.

If UK or EU data-protection law applies, you may have the right to:

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • request deletion;
  • restrict processing;
  • object to processing based on legitimate interests or for direct marketing;
  • receive certain personal data in a portable format;
  • withdraw consent at any time; and
  • complain to the data-protection authority where you live or work, or where you believe an infringement occurred.

If an applicable US state privacy law gives you additional rights, you may also have the right to know, access, correct or delete certain personal data; obtain a portable copy; opt out of sale, targeted advertising or qualifying profiling; limit certain uses of sensitive personal data; appeal a refusal; and receive equal service without unlawful discrimination. Because we do not sell personal data or use the Website data described here for cross-context behavioural advertising, we do not currently offer a separate "Do Not Sell or Share My Personal Information" link.

These rights are subject to legal exceptions. We may need to verify your identity and authority before acting on a request. An authorised agent may submit a request where applicable law permits it and the agent provides sufficient proof of authority.

To exercise a right, email support@brexy.ai with the subject Data Protection Request and state your request and country or state of residence. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

11. Automated decision-making

The Website does not use personal data to make solely automated decisions that produce legal or similarly significant effects on you. Brexy may use automated tools to detect spam, abuse and security threats, but personnel can review relevant outcomes where appropriate.

12. Children

The Website is intended for business professionals and is not directed to children. We do not knowingly collect personal data from anyone under 16 through the Website. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

13. Third-party sites and services

The Website links to services we do not control, including social networks and scheduling services. Their privacy policies govern information they collect directly. We encourage you to review those policies before providing personal data.

14. Changes to this Policy

We may amend or update this Policy from time to time, including to reflect changes in our services, business practices, technology or legal obligations. We will publish the revised Policy on the Website and update the "Last updated" date above. Unless otherwise stated, a revised Policy takes effect when it is published.

If a change materially affects how we collect, use or disclose personal data, we will provide additional notice where required by applicable law. If applicable law requires consent to a new purpose or processing activity, we will request that consent before carrying out the relevant processing. We encourage you to review this Policy periodically for changes.

15. Contact us

For questions, complaints or requests concerning this Policy or our handling of personal data, contact our data-protection contact:

Data Protection Contact

Brexy Pte. Ltd.

20A Tanjong Pagar Road

Singapore 088443

Email: support@brexy.ai

Website: https://www.brexy.ai