Privacy Policy

AQUORIA O.N.E · AQUORIA Pte. Ltd. · Last updated 3 November 2026

This Privacy Policy explains how AQUORIA Pte. Ltd., of 705 Sims Drive, #01-04B, Shun Li Industrial Complex, Singapore 387384 ("AQUORIA", "we", "us"), collects, uses and protects personal data when businesses and their staff use AQUORIA O.N.E, and when people visit our websites. We keep the data we collect to what we need to run the Service, we do not sell personal data, and we do not use advertising cookies.

1. Who this policy covers

This policy covers the people whose personal data we handle for our own purposes, as a "controller": owners and staff of shops that use AQUORIA O.N.E, people who start a trial or contact us, and visitors to our own websites.

1.1 Customers of shops

If you are a customer of a shop that uses AQUORIA O.N.E, for example because you ordered, booked or chatted with a shop through its page, app or WhatsApp, the shop is in charge of your data. The shop is the controller and we are its processor: we handle your data only on the shop's instructions, to provide our Service to the shop. Please read that shop's own privacy notice, and contact the shop directly if you want to access, correct or delete your data. If you contact us, we will pass your request to the shop. Photos, voice notes and files you send a shop on WhatsApp are stored with the shop's data so the shop can see them, and are deleted when the shop erases your data.

1.2 Staff of shops

If you work for a shop on AQUORIA O.N.E, your HR, pay and time records are the shop's data, and we handle them as the shop's processor. A shop can choose to check where its staff clock in. This is off unless the owner turns it on. When it is on, your phone is asked for its location when you clock in and out, and we keep only your distance from the shop's nearest branch, never the location itself. If you don't share your location, you are still clocked in, and the timesheet shows that the location was not shared. The owner can leave out staff who work at customers' sites. Questions about these records should go to the shop.

2. The data we collect

2.1 Account data

When a shop signs up and when staff are invited, we collect names, email addresses and, where given, phone numbers, along with the shop's business name and country. We store passwords only as secure one-way hashes, never in readable form. If you sign in with Google or Microsoft, we receive your verified email address and an account ID from them. We also store passkeys and two-step sign-in settings.

2.2 Sign-in and security data

We record sign-in events, such as the time, IP address and device or browser type, and failed sign-in attempts. We use these to protect accounts, including locking an account for a time after repeated failed attempts.

2.3 Billing data

Subscriptions are paid on the web through Stripe. Stripe collects and processes your card or other payment details. We do not receive or keep card numbers. We keep billing records such as your plan, amounts, invoices, payment status and the last digits and expiry of a card as shown by Stripe. Where we offer payment by bank transfer, we keep the amount, date and reference of each payment.

2.4 Support data

When you email us or contact support, we keep your messages and the details you share, so we can help you and improve our support. If you use Ask AQUORIA in the app, your questions and a summary of your shop's status (such as your plan, payments to us, connection errors and failed messages) are sent to our AI provider, Anthropic, to write an answer. Anthropic does not use them to train its models. Questions it can't answer go to a person at AQUORIA, who replies in the same chat.

2.5 Usage and log data

We collect technical information about how the Service is used, such as pages and features used, errors, performance data and server logs, to keep the Service running, secure and improving.

2.6 Sign-up source

When you sign up, we may ask how you heard about us, or record which link brought you, so we can understand which channels work. Our website counts visits without cookies and without keeping anything about you: only the page, the link's campaign tag, the country (from our network provider) and the day.

3. How we use the data, and why

We use personal data for these purposes, on the legal bases shown where the law requires one:

• to create and run your account and provide the Service (performance of our contract with you);
• to bill your subscription, handle refunds and disputed payments, and keep accounting records (contract and legal obligation);
• to keep the Service and accounts secure, detect and prevent fraud and abuse, and lock accounts after failed sign-ins (legitimate interests and legal obligation);
• to provide support and answer your questions (contract and legitimate interests);
• to send you service messages, such as trial reminders, payment notices, security alerts and notice of changes to our terms or prices (contract and legitimate interests);
• to understand how the Service is used and improve it, using usage data that is aggregated where possible (legitimate interests); and
• to comply with the law and respond to lawful requests from authorities (legal obligation).

We do not use your data for advertising, and we do not sell it or share it for others' marketing. If we send you news about AQUORIA that is not a service message, you can opt out at any time.

4. Cookies

We use cookies and similar storage that are needed for the Service to work: to keep you signed in, protect against fraudulent requests, and remember your chosen theme and language. Because these cookies are essential, we do not ask for consent to them, but you can block them in your browser; if you do, signing in will not work.

On a business's own pages, if you arrive through one of its tagged promotion links, we store which link brought you for up to 30 days, so that business can see which of its promotions work. This cookie holds only the link's tag, not who you are, and is never used for advertising.

We do not use advertising or cross-site tracking cookies, and we do not track you across other websites, so our websites do not change how they work when your browser sends a "Do Not Track" signal. When you connect WhatsApp, Meta's own sign-up window opens and runs under Meta's privacy policy.

5. Who we share data with

We share personal data only as needed to run the Service:

• with service providers who process data for us, such as our hosting provider, Stripe for billing, our email provider for account emails, and Anthropic for AI features. Our current list of these sub-processors is at https://aquoriaone.com/legal/subprocessors;
• with Third-Party Services that a shop chooses to connect, such as WhatsApp, payment providers or couriers, when the shop uses those features;
• with professional advisers, such as lawyers and accountants, under duties of confidentiality;
• with authorities where the law requires us to, or to protect the rights, property or safety of our users, the public or us; and
• with a buyer or successor if our business is sold or reorganised, who will be bound to protect the data in the same way.

Our service providers may only use personal data to provide services to us and must protect it.

6. International transfers

We host the Service, its database, photos and other files with Amazon Web Services in Singapore. AQUORIA is used worldwide and some of our providers are in other countries: Stripe and Anthropic, for example, are in the United States. When personal data is transferred outside your country, we protect it as the law requires, for example by relying on an adequacy decision or using standard contractual clauses approved by the relevant authority, such as the EU standard contractual clauses or the UK international data transfer addendum.

7. How long we keep data

We keep account data while your shop's account is active. After a subscription ends, we keep the account and its data for 90 days so the shop can reactivate, and then delete it. Backups are overwritten within a further 35 days. Security and usage logs are kept only for as long as they are useful for security and troubleshooting. Billing and accounting records are kept for as long as tax and accounting laws require. Support messages are kept for as long as needed to deal with the matter and keep a reasonable record.

8. How we protect data

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, password hashing, sign-in lockout, access controls based on least privilege, encrypted storage of keys for connected accounts, separation of each shop's data, audit logs and regular backups. No system is perfectly secure, but we work to keep risks low and will tell you and the authorities about a data breach where the law requires.

9. Your rights

Depending on where you live, you may have the right to:

• ask for a copy of your personal data;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• object to, or ask us to restrict, some uses of your data;
• receive your data in a portable format;
• withdraw consent where we rely on it; and
• complain to your data protection authority.

Shop owners can also update account details and export their shop's data in the app. To use your rights, email ben@aquoriaone.com. We may need to check your identity first, and we will reply within the time the law requires. These rights may be limited where the law allows, for example where we must keep billing records.

10. Children

AQUORIA O.N.E is a business service for people aged 18 and over. We do not knowingly collect personal data from children for our own purposes.

11. Changes to this policy

We may update this policy from time to time. If we make a material change, we will tell shop owners by email or in the app before it takes effect. The date at the top shows when it was last updated.

12. Contact us

If you have questions about this policy or how we handle your data, contact AQUORIA Pte. Ltd. at ben@aquoriaone.com, or write to us at 705 Sims Drive, #01-04B, Shun Li Industrial Complex, Singapore 387384.