Privacy Policy
This Privacy Policy explains how AI PLUS LABS PTE LTD ("AI+ Pro", "we", "us") collects, uses, discloses and protects your personal data in connection with the AI+ Pro platform at aiplus.pro and app.aiplus.pro (the "Service"). We comply with Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU/UK General Data Protection Regulation (GDPR) and other international data protection regulations.
Personal Data We Collect
In short
| Category | What it includes |
|---|---|
| Account data | Name, email address, organization name, job role, and account credentials, collected when you register for or are provisioned access to the Service. |
| Content you submit | Prompts, questions, uploaded files, and other content you submit to the Service, including content you choose to import from a connected third-party account (see section 5). |
| Learning and usage data | Course progress, assessment and drill responses, skills and credential records, features accessed, session duration, and technical diagnostics. |
| Technical data | IP address, browser and device type, and log data collected automatically for security, abuse prevention, and service reliability. |
We do not collect special categories of personal data (such as health, biometric, or political data) and ask that you do not submit such data to the Service.
Purposes for Collection, Use and Disclosure
In short
We collect and use your personal data to:
- provide, operate and personalize the Service, including AI-assisted features;
- create and maintain your learning record, skills profile and credentials;
- communicate with you about your account and the Service;
- provide reporting to your organization where you access the Service through an organizational account;
- ensure security, prevent abuse, and comply with legal obligations;
- improve the Service through aggregate, non-identifying analysis. This does not include Google user data, which is used only as described in section 5.
Where you access AI+ Pro through an organizational account, your administrator may have access to your account details and learning progress in accordance with their agreement with us.
Disclosure of Personal Data
In short
We do not sell, trade, or rent your personal data, nor do we share it with third parties for marketing or commercial purposes. Under the PDPA, we may disclose your personal data only in the following circumstances:
- With Your Consent
- When you have given explicit consent for disclosure
- Service Providers
- To authorized third-party infrastructure and service providers (such as cloud storage, hosting, and database services) strictly for the purpose of delivering and maintaining our platform. These providers are contractually bound to protect your data and are not permitted to use it for their own purposes
- Legal Compliance
- When required by Singapore law, court orders, or regulatory authorities
- Protection of Rights
- To protect our rights, property, or safety, or that of our users
- Business Transfers
- In connection with a merger, acquisition, or sale of assets, subject to PDPA requirements
- Emergency Situations
- Where disclosure is necessary to address an emergency that threatens life, health, or safety
All third parties who receive your personal data are contractually bound to protect your personal data and use it only for the purposes we specify.
Google User Data
In short
If you choose to connect a Google account, we access a limited set of Google data only when it is needed to carry out a Google-connected feature you initiate in the Service. We do not use Google user data for any other purpose.
5.1 Scopes requested and how each is used
| Scope | Data accessed | Purpose |
|---|---|---|
drive.file | File contents and metadata for files you select | Allows the AI assistant to read and answer questions about documents you choose |
drive.readonly | Read-only access to the contents and metadata of files in your Drive | Allows the assistant to locate and read documents you ask about without requiring you to attach each one first |
calendar.events | Event titles, dates, descriptions, invitees, reminders | Allows the assistant to list, create, edit and delete calendar events at your request |
calendar.readonly | Calendar timezone setting | Detects your timezone so scheduled events use your local time |
userinfo.email | Your Google account email address | Account identification and display of the connected account in settings |
We request the narrowest scopes necessary for these features. We do not access, retain, or use Google user data for any purpose other than carrying out the feature you initiate.
5.2 Limited Use commitment
AI+ Pro's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google user data only to provide the user-facing feature you initiate, such as answering a question about a file you select or creating or updating a calendar event you request.
- We do not use Google user data for product analytics, advertising, profiling, feature development, or to improve the Service outside the feature you initiate.
- We transfer Google user data only when necessary to carry out the feature you initiate, including to an AI-processing provider when you ask the assistant to process a file you selected. We do not transfer it for a recipient's independent use. We may also disclose it where required by applicable law or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent.
- We do not use or transfer Google user data for serving advertisements.
- We do not allow humans to read Google user data, except with your affirmative consent for specific messages, where necessary for security purposes or to comply with applicable law, or where the data has been aggregated and de-identified.
- Google user data is never used to create, train, evaluate, or improve any artificial intelligence or machine learning model, including generalized or foundational models. It is never transferred to any third party for those purposes.
5.3 Revoking access
You may disconnect your Google account at any time from Settings → Connected Accounts in the Service. Disconnecting revokes our access token and deletes cached Google content associated with your account. You may also revoke access directly at myaccount.google.com/permissions.
Third-Party AI Processing
In short
When you ask an AI-assisted feature to process content from a file you selected from a connected Google account, we transmit only the content needed to answer that request to OpenRouter, Inc., which routes the request to a third-party model provider for inference. This transfer occurs only to provide the feature you initiated and not for the provider's independent use.
6.1 Training
Requests are configured, both at the account level and on every individual request, so that they are routed only to model endpoints operated by providers that do not use submitted data to train their models. We have disabled OpenRouter's optional setting permitting OpenRouter to use inputs and outputs to improve its own products, and we have disabled prompt and completion logging on our OpenRouter workspace.
We do not permit OpenRouter or any downstream model provider to train on your content.
6.2 Retention by model providers
For most models we use, zero-data-retention routing is enforced and submitted content is not stored by the model provider.
One model is currently an exception: Claude Fable 5, for which zero-data-retention routing is not available. Content submitted to that model may be retained by the model provider for a limited period under their standard commercial API terms, solely for safety and abuse monitoring. Such content is not used for model training.
6.3 Model selection for Google-connected features
Content originating from a connected Google account is processed only by a restricted, internally maintained allowlist of model endpoints that meet the requirements described in this section. This restriction is enforced server-side and cannot be changed by users.
6.4 Other subprocessors
We also use third-party providers for hosting, database, email delivery, and analytics. A current list of subprocessors is available on request from our Data Protection Officer.
International Transfers
We are based in Singapore. Your personal data may be transferred to and processed in other jurisdictions, including the United States and the European Union, where our service providers operate. Where we transfer personal data outside its country of origin, we take steps required by the PDPA and, where applicable, the GDPR, to ensure a comparable standard of protection — including contractual protections with our service providers.
Data Security
We implement industry-standard measures to protect your personal data, including encryption in transit and at rest, role-based access controls, least-privilege access to production systems, credential rotation, and periodic security review. Access tokens for connected third-party accounts are stored encrypted.
No system is completely secure. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.
Data Retention
In short
We retain personal data only as long as necessary for the purposes stated in this policy, or as required by applicable law.
| Record | Retention period |
|---|---|
| Account and learning records | Retained for the duration of your account, and for 3 years after account closure |
| Content imported from connected accounts | Deleted when you disconnect the account, or within 30 days of account closure |
| Technical logs | Retained for 12 months for security and reliability purposes |
Where you access the Service through an organizational account, retention may additionally be governed by our agreement with your organization.
Your Rights
In short
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete personal data;
- request deletion of your personal data;
- withdraw consent to our collection, use or disclosure of your personal data;
- request a copy of your data in a portable format;
- object to or restrict certain processing, where the GDPR applies.
To exercise any of these rights, contact our Data Protection Officer at the address in section 13. We will respond within the timeframe required by applicable law. Withdrawing consent may mean we can no longer provide some or all of the Service.
You may also request full deletion of your account and associated data at contact@aiplus.pro.
Children's Data
The Service is intended for use by individuals aged 18 and over, or aged 16 and over where enrolled through an educational institution with appropriate consent. We do not knowingly collect personal data from children below these ages. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to you by email or through the Service before they take effect. The "Last updated" date at the top of this page indicates when this policy was last revised.
This Privacy Policy is effective from 12 September 2026.
Contact Us
- Data Protection Officer
- AI PLUS LABS PTE LTD
- Registered address
- #17-03, Southbank, 883 North Bridge Road, Singapore 198785
- contact@aiplus.pro
- General privacy inquiries
- contact@aiplus.pro
If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. If you are in Singapore, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.