Privacy Policy

Who we are

cyllabs is a Singapore business that builds and runs AI customer-service automation for small service businesses. That includes WhatsApp chatbots built on Meta's WhatsApp Business Platform, AI voice agents that answer phone calls, appointment booking, reminders and deposit collection.

Questions about this policy or your data: email cyllabsdigital@gmail.com or call or WhatsApp +65 8197 7376 (message us).

Who this policy covers

We handle personal data for two groups of people:

• Our clients: the businesses that hire us to run their WhatsApp and phone lines.
• Our clients' customers: people who message or call a business we serve. If you have chatted with or called a business and an AI agent from cyllabs replied, this is you.

What we collect and why

From our clients we collect account and contact details (name, business name, email, phone number) and the business configuration needed to run their agent, such as opening hours, services offered, pricing and how enquiries should be handled.

From our clients' customers we collect only what is needed to answer and act on their enquiry:

• WhatsApp messages and the phone number they were sent from.
• Call audio and transcripts of calls answered by an AI voice agent.
• Names and contact details shared during the conversation.
• Appointment and booking details, such as the service, date and time.
• Payment status for deposits, for example whether a deposit has been paid. Payments are processed by Stripe or HitPay. We never see or store full card numbers.

How we use it

We use personal data solely to operate the service on each client's behalf: answering messages and calls, making and changing bookings, sending confirmations and reminders, collecting deposits, and handing conversations over to the business's own staff when needed.

We do not sell personal data and we do not use it for advertising. Each client can only access data about its own customers. We do not combine one business's customer data with another's.

Meta Platform Data

Our WhatsApp chatbots run on Meta's WhatsApp Business Platform (Cloud API). Any data we receive from Meta is used only to provide the messaging service to the business the end user is contacting, in line with Meta's Platform Terms and Developer Policies. We do not use it for any other purpose.

Service providers we rely on

To run the service we use a small number of providers who process data on our behalf. Each one only receives what it needs for its job:

• Meta (WhatsApp Business Platform): sending and receiving WhatsApp messages.
• OpenAI: understanding messages and drafting replies.
• ElevenLabs: voice for our AI voice agents.
• Telnyx: telephony, so calls can be answered.
• Supabase: database hosting.
• Vercel and DigitalOcean: application hosting.
• Stripe and HitPay: payment processing.
• Cal.com: appointment scheduling.

Some of these providers store or process data outside Singapore. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA.

How long we keep it

We keep data for as long as the client uses the service, so their agent has the history it needs to book, remind and follow up. When a client's account is deleted, we delete the data held for that account, including their customers' conversations, call transcripts and bookings.

Access and deletion requests

If you have messaged or called a business we serve and want to see or delete the personal data we hold about you, you can ask the business you contacted, or email us directly at cyllabsdigital@gmail.com. We will delete your personal data from our systems and confirm once it is done. We may need to verify that the request comes from you first.

Security

Data is encrypted in transit and stored with providers who encrypt it at rest. Access within cyllabs is limited to the people who need it to run and support the service.

Singapore PDPA

We comply with Singapore's Personal Data Protection Act 2012 (PDPA). Our data protection contact is cyllabsdigital@gmail.com. If you have a concern about how we have handled your data, please write to us there first and we will respond promptly.

Changes to this policy

This policy is effective from 15 August 2026. If we change it, we will post the updated version on this page with a new effective date.