Privacy notice
Version v2-2026-10-12 · Effective 12 October 2026
1. Who we are
Conlabs Pte Ltd (UEN 202624365G) runs the Financial Health Score (FHS) at conlabs.co. Our registered address is 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051. This notice explains what personal data we collect through the FHS, why, who we share it with, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).
2. What we collect
- Your email address. The only direct identifier we ask for.
- Your quiz answers. Six multiple-choice answers in bands (revenue band, cash runway, largest-customer share, profit trend, debtor days, cash buffer). We never ask for exact figures, bank details or company documents.
- Your results. Your score, band, pillar scores, top risk and, if you buy one, your written report.
- Payment status. Stripe handles payment. We see whether you paid; we never see or store your card details.
- Usage data. Pages visited and buttons clicked, via PostHog analytics. We do not attach your email to this data.
3. Why we use it
- To calculate your score and show it to you.
- To generate your paid report and email it to you.
- To run and improve the site, including fixing errors.
- Only if you opt in: to send occasional Conlabs updates and SME finance tips.
- Only if you opt in: to include your anonymised answers and score in published benchmarks (section 6).
We do not sell your personal data.
4. Who we share it with
We use these service providers to run the FHS. They process data for us, under contract, only for the purposes above.
| Provider | What they do | Data they handle |
|---|---|---|
| Supabase | Database hosting | Email, answers, results |
| Vercel | Website hosting | Site traffic |
| Google (Gemini) | AI used to calculate scores | Quiz answers |
| Anthropic (Claude) | AI used to write reports | Quiz answers and results |
| Stripe | Payments | Payment details, email |
| Resend | Sending emails | Email, report |
| PostHog | Website analytics | Usage data |
5. Data stored outside Singapore
Some providers above store or process data outside Singapore, including in the United States. Where that happens, we rely on contractual protections that give your data a standard of protection comparable to the PDPA.
6. Anonymised benchmarks
If you tick the benchmark box, we may combine your answers and score with others to publish statistics about Singapore SMEs.
- We remove your email before any analysis.
- We only publish a figure based on at least 10 businesses, so no one can be singled out.
- We never publish individual results.
If you don't tick the box, your answers stay out of benchmarks.
7. How long we keep it
We keep your data for 24 months after your last quiz or purchase, then delete it. Where the law requires us to keep payment records longer, we keep only those records for as long as required. Anonymised benchmark statistics may be kept after that, because they cannot identify you.
8. Your rights
You can ask us to:
- Tell you what personal data we hold about you and how we have used it.
- Correct anything that's wrong.
- Withdraw consent for updates or benchmarks at any time.
- Delete your data.
Email dpo@conlabs.co. We'll reply within 30 days. Withdrawing consent for the core service means we can no longer deliver your score or report.
9. Security
Your data is stored in a database where public access is blocked and only our server can read it. Collecting bands instead of exact figures means far less sensitive data exists in the first place. No system is completely secure; if a breach is likely to affect you, we will tell you and the PDPC as the law requires.
10. Data Protection Officer
Lai Joo Leng · dpo@conlabs.co
11. Changes
If we change this notice, we'll update the version and date above. If a change affects how we use data you've already given us, we'll ask for your consent again.