Privacy Policy

1. Who We Are

SimplyFlow is a product of Mind Master Solutions Pte Ltd, a company incorporated in Singapore (UEN: pending). Our registered address is in Singapore. References to "SimplyFlow", "we", "us", or "our" in this policy refer to Mind Master Solutions Pte Ltd.

We operate the SimplyFlow AI-native order-to-cash execution platform, accessible at simplyflow.ai and related subdomains (the "Service").

2. Information We Collect

We collect information you provide directly to us, including:

• Demo request data — name, company name, email address, phone number, order volume, ERP system, and any message or attachment you submit through our demo request form.
• Account data — if you create an account, we collect your name, email, and authentication credentials.
• Usage data — pages visited, features used, session duration, and browser/device information collected automatically via analytics tools.
• Communications — emails, messages, or other correspondence you send us.

3. How We Use Your Information

We use the information we collect to:

• Respond to demo requests and schedule product demonstrations.
• Provide, operate, and improve the SimplyFlow platform.
• Send transactional communications (booking confirmations, onboarding emails).
• Send marketing communications where you have given consent or where we have a legitimate interest, with an easy opt-out in every message.
• Comply with legal obligations under Singapore law, including the Personal Data Protection Act 2012 (PDPA).

4. Legal Basis for Processing

We process your personal data on the following bases: (a) your consent, where you have provided it; (b) performance of a contract, where processing is necessary to provide the Service you have requested; (c) our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights; and (d) compliance with a legal obligation.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers — cloud infrastructure (AWS), analytics, and communication tools that process data on our behalf under data processing agreements.
• Professional advisors — lawyers, accountants, and auditors bound by confidentiality obligations.
• Regulatory authorities — where required by law or legal process.

6. Data Retention

We retain demo request data for up to 3 years from the date of submission, or longer if required by law or ongoing business relationship. Account data is retained for the duration of your account and up to 1 year after closure. You may request deletion at any time (see Section 8).

7. Cookies and Analytics

We use privacy-respecting analytics (Umami) that does not use cookies and does not collect personally identifiable information. No third-party advertising cookies are placed on this site.

8. Your Rights

Under the Singapore PDPA and applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw consent at any time (where processing is consent-based).
• Request deletion of your personal data, subject to legal retention requirements.
• Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related enquiries, contact our Data Protection Officer at: