Privacy Policy

Last updated: 3 July 2026

SingVMS is a product of LEETLABS PTE. LTD. (UEN 202609035K), located at 20A Tanjong Pagar Road, Singapore 088443. This policy explains how we collect, use, and protect personal data when you use our services.

1. Data We Collect

When you register for a SingVMS account, we collect:

• Your name, email address, and phone number
• Your business name and UEN (Unique Entity Number)
• Login credentials (password is stored as a salted hash, never in plain text)

When visitors authenticate via Singpass at your locations, we receive verified identity data from Singapore’s National Digital Identity (NDI) system, which may include:

• Full name, date of birth, and nationality
• Masked NRIC (e.g. S****567A) and a SHA-256 hash of the full NRIC
• Mobile number and email address (if consented)

Full NRIC numbers are never stored. We retain only the masked version and a one-way hash for returning visitor matching.

2. How We Use Your Data

We use the data we collect to:

• Create and manage your SingVMS account
• Process Singpass identity verifications on behalf of your business
• Provide visitor management records and dashboards
• Communicate with you about your account, service updates, and support requests
• Improve our services and fix technical issues

We do not sell personal data to third parties. We do not use visitor identity data for marketing purposes.

3. Singpass Data Handling

SingVMS is a registered Singpass relying party. When a visitor authenticates via Singpass, we receive verified identity data through GovTech’s NDI infrastructure. This data is transmitted over encrypted channels and stored securely. Visitors explicitly consent to sharing their data with your business as part of the Singpass authentication flow.

4. Cookies and Analytics

Our website uses the following third-party services:

• Google Tag Manager (GTM) and Google Analytics 4 (GA4) for website analytics and conversion tracking
• Microsoft Clarity for session recordings and heatmaps to improve user experience

These services may set cookies in your browser. You can manage cookie preferences through your browser settings. Analytics data is aggregated and does not include personal identity information from Singpass verifications.

5. Data Retention

Account data is retained for as long as your SingVMS account is active. Visitor check-in records are retained for the duration specified in your account settings or as required by applicable regulations. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. Our Singpass integration has passed GovTech’s security assessment.

7. Your Rights

Under the Personal Data Protection Act (PDPA), you have the right to access, correct, or withdraw consent for the use of your personal data. To exercise these rights or for any privacy-related inquiries, contact us at:

• Email: [email protected]
• WhatsApp: +1-415-324-2122

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or through a notice on our website.

LEETLABS PTE. LTD. · UEN 202609035K · 20A Tanjong Pagar Road, Singapore 088443