What happens to your information
Written for a business owner in a hurry. Last updated 25 September 2026.
Before you send us your website address, or type a card number on our payment page, you are entitled to know what you are handing over and what we do with it. This page is the whole picture, in the order you would ask about it — no legal fog, and one honest limit at the end.
The short version: to run your audit we need your website address and an email we can reply to — that is all. Your card number is typed on Airwallex's page, never on ours, so we never see it. This site sets no cookies of ours. Ask us to delete your details and we do, within 7 days, and we tell you in writing the one record we are required to keep.
Who we are
AIFindr is run by Kyly CST Pte Ltd, a company registered in Singapore (UEN 201942481M), and it is the organisation responsible for your information. One address covers everything on this page — seeing what we hold, correcting it, deleting it, or complaining about it: hello@scalesmes.com. A person reads it, and we reply within 1 working day.
What we collect — and what we never ask for
- If you write to us for the free GAS audit: the email address you write from, your name if you sign it, and the website address you send. Nothing else. There is no form on this site, no phone number collected, and we do not ask for details about your business or your customers.
- If you subscribe: your name, email, plan and payment status come to us from Airwallex, our payment provider. Your card number and its security code stay on Airwallex's payment page — they never reach us or our servers.
- What we never collect: card numbers, passwords, identity numbers, or anything about your customers. We do not buy contact lists and we do not look you up anywhere else.
Where your information is held — and why that crosses a border
- Email: the address above forwards to a Google Gmail mailbox, so your messages are stored on Google's servers outside Singapore.
- This website: it is served by Vercel, a global hosting network, again outside Singapore.
- Visit counts: the home page counts visits with Plausible Analytics — a cookieless counter that collects no personal data.
- Payments: taken by Airwallex under their own privacy notice, which is worth reading before you pay.
Under Singapore's Personal Data Protection Act (PDPA), that means your information may be transferred out of Singapore. We keep to providers that are bound by their own data-protection terms, and by writing to us or subscribing you consent to that transfer. If you would prefer something to stay inside Singapore, ask — we will say plainly what we can move and what we cannot (mail storage, for example, we cannot).
How long we keep it
- Audit emails and the website address: 12 months after we deliver your audit or after your last reply, then deleted.
- Subscriber and billing records: while you subscribe, and 5 years after your plan ends — that period is Singapore tax law, not our preference.
- Visit counts: aggregated numbers with no personal data in them.
Cookies
This site sets no cookies of ours, which is why there is no cookie banner — there is nothing to consent to. The page counter does not use cookies and does not identify you. The Airwallex payment page is a separate site with its own cookies and its own notice.
Your four rights, and how to use them
Email hello@scalesmes.com with the subject "my data" and say which one you want. We confirm within 1 working day.
- See it — we send you what we hold about you. Under the PDPA we have 30 days; in practice it is usually the same week.
- Correct it — tell us what is wrong and we fix it the same way.
- Withdraw consent — we do not add you to any mailing list, and we only write about your audit or your plan. A single reply ends that too.
- Delete it — we remove the audit emails and everything else we hold within 7 days, and we tell you in writing which record, if any, we are still required to keep and why.
What we never do
We do not sell, rent or share your details — not with advertisers, not with data brokers, not with anyone. We do not profile you, we do not make automated decisions about you, and we do not follow you around other websites.
Honest limits
- We are a small Singapore business and we make no security certification claim — if you need ISO 27001 or a signed data-processing agreement before you buy, ask and we will tell you honestly that we cannot offer it today.
- Two things are outside our control and described in someone else's notice, not ours: what Google does with an email once it arrives, and what Airwallex does with a payment. We chose both providers; we cannot change their internals.
- If something goes wrong with your data and it is likely to affect you, we will tell you and Singapore's Personal Data Protection Commission, as the law requires.
- If you spot a gap or a sentence on this page that contradicts what you have seen us do, write and tell us. We will fix the page rather than argue about it.
Related: what AIFindr does · what it costs · what happens if you want your money back · run the five-minute check on your own site.