# Privacy Policy · How AI+ Pro Handles and Stores Your Data > What AI+ Pro collects, where it is stored and who can reach it. We do not train models on your work, and the documents your team uploads remain yours to delete. Canonical: https://aiplus.pro/privacy-policy Last updated 12 September 2026 ## Privacy Policy This Privacy Policy explains how AI PLUS LABS PTE LTD ("AI+ Pro", "we", "us") collects, uses, discloses and protects your personal data in connection with the AI+ Pro platform at aiplus.pro and app.aiplus.pro (the "Service"). We comply with Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU/UK General Data Protection Regulation (GDPR) and other international data protection regulations. Jump to a section Personal Data We Collect On this page 1. [1 Personal Data We Collect](#personal-data-we-collect) 2. [2 Cookies and Tracking](#cookies) 3. [3 Purposes for Collection, Use and Disclosure](#purposes) 4. [4 Disclosure of Personal Data](#disclosure) 5. [5 Google User Data](#google-user-data) 6. [6 Third-Party AI Processing](#ai-model-usage) 7. [7 International Transfers](#cross-border-transfers) 8. [8 Data Security](#data-security) 9. [9 Data Retention](#retention) 10. [10 Your Rights](#your-rights) 11. [11 Children's Data](#childrens-privacy) 12. [12 Changes to This Policy](#changes) 13. [13 Contact Us](#contact) ## Key points A plain-language summary. The full text below is what applies. [What we collect](#personal-data-we-collect) Account details, the content you submit, your learning record, and technical data collected automatically. [Why we collect it](#purposes) To run and personalize the platform, maintain your learning record, keep the service secure and meet legal obligations. [We never sell it](#disclosure) Your personal data is not sold, traded or rented, and it is not shared for marketing or commercial purposes. [Google data, limited use](#google-user-data) Connected Google data is used only to complete the feature you initiate. It is not used for product analytics, product development, or AI model improvement. [Not used for AI training](#ai-model-usage) No model provider is permitted to train on your content, and all but one model we route to run with zero data retention. [Your rights](#your-rights) Access, correct, delete or port your data, or withdraw consent. We respond within the timeframe the law requires. [Where it lives](#cross-border-transfers) We are based in Singapore; transfers abroad carry protection comparable to the PDPA and, where it applies, the GDPR. ## Personal Data We Collect[](#personal-data-we-collect) In short Your account details, the content you submit, your learning record, and technical data collected automatically for security and reliability. Categories of personal data we collect and what each includes Category What it includes Account data Name, email address, organization name, job role, and account credentials, collected when you register for or are provisioned access to the Service. Content you submit Prompts, questions, uploaded files, and other content you submit to the Service, including content you choose to import from a connected third-party account (see section 5). Learning and usage data Course progress, assessment and drill responses, skills and credential records, features accessed, session duration, and technical diagnostics. Technical data IP address, browser and device type, and log data collected automatically for security, abuse prevention, and service reliability. We do not collect special categories of personal data (such as health, biometric, or political data) and ask that you do not submit such data to the Service. ## Cookies and Tracking[](#cookies) We use cookies and similar technologies to: - Remember your login status and preferences - Analyze platform usage and performance - Provide personalized learning recommendations - Ensure security and prevent fraud You can control cookie settings through your browser preferences. ## Purposes for Collection, Use and Disclosure[](#purposes) In short We use your data to run and personalize the Service, maintain your learning record, keep the platform secure, and meet legal obligations. We collect and use your personal data to: - provide, operate and personalize the Service, including AI-assisted features; - create and maintain your learning record, skills profile and credentials; - communicate with you about your account and the Service; - provide reporting to your organization where you access the Service through an organizational account; - ensure security, prevent abuse, and comply with legal obligations; - improve the Service through aggregate, non-identifying analysis. This does not include Google user data, which is used only as described in section 5. Where you access AI+ Pro through an organizational account, your administrator may have access to your account details and learning progress in accordance with their agreement with us. ## Disclosure of Personal Data[](#disclosure) In short We never sell, trade or rent your data. It is disclosed only in the six circumstances below, and every recipient is contractually bound to protect it. We do not sell, trade, or rent your personal data, nor do we share it with third parties for marketing or commercial purposes. Under the PDPA, we may disclose your personal data only in the following circumstances: With Your Consent When you have given explicit consent for disclosure Service Providers To authorized third-party infrastructure and service providers (such as cloud storage, hosting, and database services) strictly for the purpose of delivering and maintaining our platform. These providers are contractually bound to protect your data and are not permitted to use it for their own purposes Legal Compliance When required by Singapore law, court orders, or regulatory authorities Protection of Rights To protect our rights, property, or safety, or that of our users Business Transfers In connection with a merger, acquisition, or sale of assets, subject to PDPA requirements Emergency Situations Where disclosure is necessary to address an emergency that threatens life, health, or safety All third parties who receive your personal data are contractually bound to protect your personal data and use it only for the purposes we specify. ## Google User Data[](#google-user-data) In short If you connect a Google account, we use its data only to carry out the Google-connected feature you initiate. We do not use it for product analytics, product development, or AI model improvement. If you choose to connect a Google account, we access a limited set of Google data only when it is needed to carry out a Google-connected feature you initiate in the Service. We do not use Google user data for any other purpose. ### 5.1 Scopes requested and how each is used Google OAuth scopes we request, the data each grants access to, and why Scope Data accessed Purpose `drive.file` File contents and metadata for files you select Allows the AI assistant to read and answer questions about documents you choose `drive.readonly` Read-only access to the contents and metadata of files in your Drive Allows the assistant to locate and read documents you ask about without requiring you to attach each one first `calendar.events` Event titles, dates, descriptions, invitees, reminders Allows the assistant to list, create, edit and delete calendar events at your request `calendar.readonly` Calendar timezone setting Detects your timezone so scheduled events use your local time `userinfo.email` Your Google account email address Account identification and display of the connected account in settings We request the narrowest scopes necessary for these features. We do not access, retain, or use Google user data for any purpose other than carrying out the feature you initiate. ### 5.2 Limited Use commitment **AI+ Pro's use of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy) , including the Limited Use requirements.** Specifically: - We use Google user data only to provide the user-facing feature you initiate, such as answering a question about a file you select or creating or updating a calendar event you request. - We do not use Google user data for product analytics, advertising, profiling, feature development, or to improve the Service outside the feature you initiate. - We transfer Google user data only when necessary to carry out the feature you initiate, including to an AI-processing provider when you ask the assistant to process a file you selected. We do not transfer it for a recipient's independent use. We may also disclose it where required by applicable law or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent. - We do not use or transfer Google user data for serving advertisements. - We do not allow humans to read Google user data, except with your affirmative consent for specific messages, where necessary for security purposes or to comply with applicable law, or where the data has been aggregated and de-identified. - **Google user data is never used to create, train, evaluate, or improve any artificial intelligence or machine learning model, including generalized or foundational models. It is never transferred to any third party for those purposes.** ### 5.3 Revoking access You may disconnect your Google account at any time from **Settings → Connected Accounts** in the Service. Disconnecting revokes our access token and deletes cached Google content associated with your account. You may also revoke access directly at [myaccount.google.com/permissions](https://myaccount.google.com/permissions) . ## Third-Party AI Processing[](#ai-model-usage) In short AI features send your content to model providers for inference. No provider is permitted to train on it, and all but one model run with zero data retention. When you ask an AI-assisted feature to process content from a file you selected from a connected Google account, we transmit only the content needed to answer that request to **OpenRouter, Inc.** , which routes the request to a third-party model provider for inference. This transfer occurs only to provide the feature you initiated and not for the provider's independent use. ### 6.1 Training Requests are configured, both at the account level and on every individual request, so that they are routed only to model endpoints operated by providers that do not use submitted data to train their models. We have disabled OpenRouter's optional setting permitting OpenRouter to use inputs and outputs to improve its own products, and we have disabled prompt and completion logging on our OpenRouter workspace. We do not permit OpenRouter or any downstream model provider to train on your content. ### 6.2 Retention by model providers For most models we use, zero-data-retention routing is enforced and submitted content is not stored by the model provider. One model is currently an exception: **Claude Fable 5** , for which zero-data-retention routing is not available. Content submitted to that model may be retained by the model provider for a limited period under their standard commercial API terms, solely for safety and abuse monitoring. Such content is not used for model training. ### 6.3 Model selection for Google-connected features Content originating from a connected Google account is processed only by a restricted, internally maintained allowlist of model endpoints that meet the requirements described in this section. This restriction is enforced server-side and cannot be changed by users. ### 6.4 Other subprocessors We also use third-party providers for hosting, database, email delivery, and analytics. A current list of subprocessors is available on request from our Data Protection Officer. ## International Transfers[](#cross-border-transfers) We are based in Singapore. Your personal data may be transferred to and processed in other jurisdictions, including the United States and the European Union, where our service providers operate. Where we transfer personal data outside its country of origin, we take steps required by the PDPA and, where applicable, the GDPR, to ensure a comparable standard of protection — including contractual protections with our service providers. ## Data Security[](#data-security) We implement industry-standard measures to protect your personal data, including encryption in transit and at rest, role-based access controls, least-privilege access to production systems, credential rotation, and periodic security review. Access tokens for connected third-party accounts are stored encrypted. No system is completely secure. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law. ## Data Retention[](#retention) In short Each kind of record has its own retention period. Content imported from a connected account goes as soon as you disconnect it. We retain personal data only as long as necessary for the purposes stated in this policy, or as required by applicable law. How long each kind of record is retained Record Retention period Account and learning records Retained for the duration of your account, and for 3 years after account closure Content imported from connected accounts Deleted when you disconnect the account, or within 30 days of account closure Technical logs Retained for 12 months for security and reliability purposes Where you access the Service through an organizational account, retention may additionally be governed by our agreement with your organization. ## Your Rights[](#your-rights) In short You can access, correct, delete or port your data, withdraw consent, and — under the GDPR — object to or restrict processing. Subject to applicable law, you have the right to: - access the personal data we hold about you; - correct inaccurate or incomplete personal data; - request deletion of your personal data; - withdraw consent to our collection, use or disclosure of your personal data; - request a copy of your data in a portable format; - object to or restrict certain processing, where the GDPR applies. To exercise any of these rights, contact our Data Protection Officer at the address in section 13. We will respond within the timeframe required by applicable law. Withdrawing consent may mean we can no longer provide some or all of the Service. You may also request full deletion of your account and associated data at [contact@aiplus.pro](mailto:contact@aiplus.pro) . ## Children's Data[](#childrens-privacy) The Service is intended for use by individuals aged 18 and over, or aged 16 and over where enrolled through an educational institution with appropriate consent. We do not knowingly collect personal data from children below these ages. If you believe a child has provided us with personal data, contact us and we will delete it. ## Changes to This Policy[](#changes) We may update this Privacy Policy from time to time. Material changes will be notified to you by email or through the Service before they take effect. The "Last updated" date at the top of this page indicates when this policy was last revised. **This Privacy Policy is effective from 12 September 2026.** ## Contact Us[](#contact) Data Protection Officer AI PLUS LABS PTE LTD Registered address #17-03, Southbank, 883 North Bridge Road, Singapore 198785 Email [contact@aiplus.pro](mailto:contact@aiplus.pro) General privacy inquiries [contact@aiplus.pro](mailto:contact@aiplus.pro) If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. If you are in Singapore, you may contact the Personal Data Protection Commission at [www.pdpc.gov.sg](https://www.pdpc.gov.sg) . ## Related documents - [Privacy Policy What personal data we collect, why we collect it, how long we keep it and the rights you hold over it.](https://aiplus.pro/privacy-policy) - [Terms of Service The agreement that governs your use of the AI+ Pro platform, including payment, conduct and liability.](https://aiplus.pro/terms-of-service) - [Singapore Law Compliance How the platform aligns with the PDPA, the Model AI Governance Framework and the Cybersecurity Act.](https://aiplus.pro/legal/singapore) - [International Law Compliance GDPR, the EU AI Act, CCPA/CPRA, cross-border transfer mechanisms and the standards we certify against.](https://aiplus.pro/legal/international) Last updated 12 September 2026