Last Updated: April 11, 2026 Effective Date: April 11, 2026 Controller: Superlinear Technology Pte. Ltd. trading as PolicyPack Contact: support@policypack.org
1. Introduction and Overview
1.1. This Privacy Policy explains how Superlinear Technology Pte. Ltd., trading as PolicyPack ("PolicyPack," "we," "us," or "our"), a company registered in Singapore, collects, uses, shares, and protects your personal information when you visit or use our website at https://policypack.org and related services (collectively, the "Services").
1.2. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.
1.3. We are committed to protecting your privacy and handling your data in an open and transparent manner. As the data controller, we determine the purposes and means of processing personal data collected through our Services.
2. Information We Collect
2.1. Information You Provide to Us
2.1.1. Account Information: When you register for an account, we collect your name, email address, password, and company information.
2.1.2. Profile Information: Information you provide in your user profile, such as job title, company size, and industry.
2.1.3. Payment Information: When you subscribe to our paid services, we collect billing information and payment details. Note that payment card information is processed directly by our payment processors and is not stored on our servers.
2.1.4. Communications: Information you provide when you contact us for support, respond to surveys, or communicate with us in any way.
2.1.5. Policy Generation Data: Information you provide to generate legal policies, including details about your business, data practices, and service offerings.
2.2. Information We Collect Automatically
2.2.1. Usage Data: Information about how you use our Services, including pages visited, features used, and actions taken.
2.2.2. Device Information: Information about the device you use to access our Services, including device type, operating system, browser type, and IP address.
2.2.3. Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities. For more information, please see our Cookie Policy.
2.2.4. Log Data: Server logs, including IP addresses, browser type, referring/exit pages, operating system, date/time stamps, and clickstream data.
3. How We Use Your Information
3.1. Provide and Improve Our Services
3.1.1. To create and maintain your account. 3.1.2. To provide the Services you request, including generating legal policies. 3.1.3. To process transactions and send related information. 3.1.4. To improve and optimize our Services. 3.1.5. To develop new products, services, and features.
3.2. Communications
3.2.1. To respond to your inquiries and support requests. 3.2.2. To send administrative messages about your account or the Services. 3.2.3. To provide updates about our Services, including new features and policy changes. 3.2.4. To send marketing communications, subject to your preferences and applicable laws.
3.3. Security and Compliance
3.3.1. To protect the security and integrity of our Services. 3.3.2. To detect and prevent fraud, abuse, and other harmful activities. 3.3.3. To comply with legal obligations. 3.3.4. To enforce our Terms of Service and other policies.
3.4. Analytics and Research
3.4.1. To understand how users interact with our Services. 3.4.2. To analyze trends and gather demographic information. 3.4.3. To measure the effectiveness of our marketing campaigns.
4. Legal Bases for Processing
4.1. We process your personal data on the following legal bases:
4.1.1. Performance of Contract: Processing necessary to provide you with the Services you request and to fulfill our obligations under our Terms of Service.
4.1.2. Legitimate Interests: Processing necessary for our legitimate interests, such as improving our Services, preventing fraud, and ensuring security, provided these interests are not overridden by your rights and freedoms.
4.1.3. Consent: Processing based on your specific consent, such as for marketing communications or certain cookies.
4.1.4. Legal Obligation: Processing necessary to comply with our legal obligations.
4.2. If you are in the European Economic Area (EEA), United Kingdom, or another jurisdiction where similar rights apply, we will only process your personal data based on a valid legal basis as required by applicable law.
5. Data Sharing and Disclosure
5.1. Service Providers
5.1.1. We may share your information with third-party service providers who perform services on our behalf, such as hosting, analytics, customer service, email delivery, and payment processing.
5.1.2. These service providers are authorized to use your personal information only as necessary to provide these services to us and are contractually obligated to keep your information secure.
5.2. Secure Automated Data Processors
5.2.1. We utilize secure automated data processors to power certain features of our Services, including our AI-powered policy generation tools.
5.2.2. These processors may access and process your data solely to provide the requested services and are subject to strict confidentiality and security obligations.
5.3. Business Transfers
5.3.1. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of our assets, your information may be transferred as part of that transaction.
5.3.2. We will take reasonable steps to ensure that your personal information continues to be subject to the same protections set out in this Privacy Policy.
5.4. Legal Requirements
5.4.1. We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
5.4.2. We may also disclose your information to enforce our Terms of Service, protect our rights, privacy, safety, or property, and/or that of our users or others.
5.5. With Your Consent
5.5.1. We may share your information with third parties when you have given us your consent to do so.
6. International Data Transfers
6.1. We are based in Singapore and operate globally. Your information may be transferred to, stored, and processed in countries other than the one in which you reside.
6.2. When we transfer personal data from the EEA, UK, or other regions with data protection laws to countries that have not been deemed to provide an adequate level of protection, we use appropriate safeguards such as Standard Contractual Clauses approved by the relevant authorities.
6.3. By using our Services, you consent to the transfer of your information to countries outside your country of residence, including to Singapore and the United States, which may have different data protection rules than those of your country.
7. Data Retention
7.1. We retain your personal information for as long as necessary to provide you with our Services, comply with our legal obligations, resolve disputes, and enforce our agreements.
7.2. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.
7.3. When we no longer need to use your personal information, we will either delete it or anonymize it so that it can no longer be associated with you.
8. Your Rights and Choices
8.1. Account Information
8.1.1. You can access, update, or delete your account information at any time by logging into your account settings.
8.1.2. If you cannot access certain information or need assistance, please contact us at support@policypack.org.
8.2. Marketing Communications
8.2.1. You can opt out of receiving promotional emails from us by following the unsubscribe instructions in those emails.
8.2.2. Even if you opt out of promotional communications, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.
8.3. Cookies and Tracking Technologies
8.3.1. You can manage your cookie preferences through our cookie consent tool or your browser settings.
8.3.2. For more information about our use of cookies and how to manage them, please see our Cookie Policy.
8.4. Data Subject Rights
If you are located in the EEA, UK, California, or other jurisdictions with similar laws, you may have the following rights regarding your personal information:
8.4.1. Right to Access: Request information about the personal data we hold about you and how it is used.
8.4.2. Right to Rectification: Request correction of inaccurate or incomplete personal data.
8.4.3. Right to Erasure: Request deletion of your personal data in certain circumstances.
8.4.4. Right to Restrict Processing: Request that we restrict processing of your personal data in certain circumstances.
8.4.5. Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
8.4.6. Right to Object: Object to our processing of your personal data based on our legitimate interests or for direct marketing.
8.4.7. Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your personal data.
8.5. To exercise these rights, please contact us at support@policypack.org. We will respond to your request within the timeframe required by applicable law.
9. Data Security
9.1. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, alteration, disclosure, or destruction.
9.2. While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
9.3. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.
10. Children's Privacy
10.1. Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16.
10.2. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.
11. Third-Party Links and Services
11.1. Our Services may contain links to third-party websites, products, or services that are not owned or controlled by PolicyPack.
11.2. We are not responsible for the privacy practices or the content of these third-party websites, products, or services. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Privacy Policy
12.1. We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
12.2. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page.
12.3. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
13.1. If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Email: support@policypack.org
13.2. For users in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data does not comply with applicable data protection laws.