Privacy Policy

1. Personal data we collect

We may collect personal data that you provide directly to us, including your name, business contact details, company, job title, enquiry or message, product interests and communication preferences.

When you use our websites or services, we may also collect technical and usage information, such as IP address, browser and device information, pages viewed, website interactions, login and account information, support communications, product-usage information, system logs and audit records.

If you apply for a role, we may collect information contained in your application, CV or resume, employment history, qualifications and interview communications.

Please do not send sensitive personal data to us unless we specifically request it and provide an appropriate method for doing so.

2. How we use personal data

We may collect, use and disclose personal data to:

• Respond to enquiries, demo requests and other communications
• Provide, operate, implement, support, secure and improve Xceler products and services
• Create and manage accounts, permissions, service relationships and support requests
• Manage customer, supplier, partner and other business relationships
• Send service, security, product, event and marketing communications where permitted by law
• Understand and improve website performance, content and user experience
• Protect our websites, systems, services, users and business from fraud, misuse, security incidents or unlawful activity
• Manage recruitment and job applications
• Comply with legal, regulatory, contractual, accounting, audit and record-keeping obligations
• Establish, exercise or defend legal claims
• Manage a corporate transaction, including an investment, financing, restructuring, merger, acquisition or sale of assets

We use personal data only where permitted by applicable law, including where you have provided consent, where it is necessary to perform a contract, comply with a legal obligation, or pursue legitimate business interests that are not overridden by your rights.

3. Customer data in Xceler

Xceler customers may upload, enter, integrate or generate information in the Xceler platform. Where that information includes personal data, the relevant customer generally determines why and how it is processed and is responsible for providing appropriate privacy notices and obtaining any required consents.

In those circumstances, Xceler Pte. Ltd. and/or Taomish India Pvt. Ltd. and/or Taomish Pte. Ltd. may process personal data on behalf of the customer under the applicable customer agreement and documented instructions.

Requests relating to personal data controlled by an Xceler customer should generally be directed to that customer.

4. How we share personal data

We may share personal data with:

• Companies within the Taomish Group, including Taomish Pte. Ltd., Taomish India Pvt. Ltd. and Xceler Pte. Ltd., where necessary for product development, implementation, customer support, professional services, security, administration, sales, finance, legal and internal operations
• Service providers that support our websites, cloud infrastructure, hosting, communications, security, customer support, professional services and business operations
• Customers, authorised users, implementation partners and integration partners where necessary to provide Xceler services or respond to a request
• Professional advisers, including legal, accounting, audit, insurance and financial advisers
• Government authorities, regulators, law-enforcement bodies or other parties where required by law or necessary to protect rights, safety, property, systems or users
• Relevant parties in connection with a corporate transaction

We do not sell personal data in the ordinary sense of selling customer lists for money. We require service providers that process personal data for us to protect it appropriately and use it only for authorised purposes.

5. International transfers

The Taomish Group operates across jurisdictions. Personal data may be accessed, stored or processed in Singapore, India and other locations where we, our customers or authorised service providers operate.

Customer data may be hosted in a location selected or agreed with the relevant customer. Taomish India Pvt. Ltd. personnel may access relevant customer data for authorised development, implementation or support purposes only, subject to role-based access controls and need-to-know permissions.

Where required by applicable law, we take reasonable steps to ensure that international transfers are subject to appropriate safeguards.

6. Cookies and website analytics

Our websites may use cookies and similar technologies to operate the website, remember preferences, understand website use, improve performance and support security.

We may introduce analytics, marketing or similar technologies in the future. Where required, we will update this Privacy Policy and provide appropriate notice or consent options before using such technologies.

You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, meet legal, regulatory, contractual, accounting and audit requirements, resolve disputes, enforce agreements and protect our business.

When personal data is no longer required, we will delete, anonymise or securely dispose of it in accordance with applicable law and our retention practices.

8. Security

We use reasonable administrative, technical and organisational measures designed to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, loss, misuse or disposal.

Access to personal data is restricted through role-based access controls and need-to-know permissions. We maintain ISO 27001 and ISO 27701 certifications.

No website, system or method of transmission can be guaranteed to be completely secure. You are responsible for keeping any account credentials confidential and notifying us promptly if you suspect unauthorised access.

9. Your rights and choices

Subject to applicable law, you may have the right to request access to and correction of personal data we hold about you, withdraw consent where processing is based on consent, object to or request restriction of certain processing, request deletion in certain circumstances, opt out of marketing communications, or raise a privacy concern.

To unsubscribe from marketing communications, use the unsubscribe link in the relevant email or contact us directly. You may continue to receive service, security, contractual, administrative or legally required communications.

We may need to verify your identity before responding to a request. Your rights may be subject to legal conditions, exceptions and limitations.

10. Children's privacy

Our websites and services are intended for business use and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, please contact us and we will take appropriate steps to delete it.

11. Third-party services

Our websites or services may contain links to third-party websites, applications, integrations or services. We are not responsible for their privacy practices. Please review the privacy notice of any third party before providing personal data to it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology or legal obligations. We will publish the updated policy on this page and revise the "Last updated" date. Where required by law, we will provide additional notice or obtain consent.

13. Contact us

For questions, requests or concerns about this Privacy Policy or our handling of personal data, please contact: