Privacy Policy
This page explains what information Oxaide handles, why we handle it, and how to contact us about privacy requests.
Privacy contact
Questions or data requests?
Direct privacy requests, deletion questions, and contract-specific data handling reviews to the team below.
Privacy contact
privacy@oxaide.comLegal entity
Rocketship Pte. Ltd. (trading as Oxaide)
Privacy at a Glance
We Do Not Sell Your Data
Your personal information is never sold, rented, or traded to third parties.
Encryption in Transit and At Rest
All data is encrypted in transit and at rest using industry-standard protocols.
You Control Your Data
You can request access, export, correction, or deletion through our team.
Service-specific retention
Retention depends on the service, contract, and support requirements described below.
Legal Entity: Rocketship Pte. Ltd. (trading as Oxaide)
1Information We Collect
1.1 Personal Data You Provide
1.2 Automatically Collected Data
1.3 Third-Party Integrations
2How We Use Your Information
2.1 Service Provision
- Execute BESS forensic audits and generate diagnostic reports
- Process telemetry and BMS data for signal anomaly detection
- Deliver Verify Reports and Horizon monitoring outputs to authorised contacts
- Provide asset performance benchmarks and analytics
2.2 Diagnostic Model Refinement
- Refine physics-informed signal detection models using aggregated, anonymised benchmark data (Standard Cloud only)
- Improve anomaly pattern libraries through post-audit findings analysis
- Develop new fault detection signatures from confirmed diagnostic cases
- Horizon edge nodes process all signal data locally, so raw telemetry is never uploaded to cloud infrastructure
2.3 Business Operations
- Process payments and manage subscriptions
- Provide customer support and technical assistance
- Send service updates, security alerts, and administrative communications
- Comply with legal obligations and enforce our Terms of Service
3Legal Basis for Processing (GDPR & PDPA)
- Legal Basis
- Contract Performance
- Purpose
- Processing necessary to provide our Services under our Terms of Service
- Regulation
- GDPR / PDPA
- Legal Basis
- Legitimate Interests
- Purpose
- Platform improvement, security, fraud prevention, and customer support
- Regulation
- GDPR / PDPA
- Legal Basis
- Consent
- Purpose
- Marketing communications and optional data processing features
- Regulation
- GDPR / PDPA
- Legal Basis
- Legal Compliance
- Purpose
- Compliance with applicable laws and regulations
- Regulation
- GDPR / PDPA
- Legal Basis
- Vital Interests
- Purpose
- Protection of vital interests of individuals in emergency situations
- Regulation
- PDPA
| Legal Basis | Purpose | Regulation |
|---|---|---|
| Contract Performance | Processing necessary to provide our Services under our Terms of Service | GDPR / PDPA |
| Legitimate Interests | Platform improvement, security, fraud prevention, and customer support | GDPR / PDPA |
| Consent | Marketing communications and optional data processing features | GDPR / PDPA |
| Legal Compliance | Compliance with applicable laws and regulations | GDPR / PDPA |
| Vital Interests | Protection of vital interests of individuals in emergency situations | PDPA |
PDPA Note: Under Singapore's Personal Data Protection Act, we collect, use, and disclose your personal data only for purposes you have consented to, or as otherwise permitted by law. You may withdraw consent at any time by contacting our privacy team.
4Data Sharing and Disclosure
4.1 Service Providers
We share data with third-party vendors who provide essential services:
Secure hosting and data storage
Approved compute and document-processing services used to deliver the agreed workflow
Approved billing and invoicing partners when required
Performance monitoring
4.2 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for commercial purposes.
4.3 Legal Requirements
We may disclose information when required by law, legal process, or to protect rights, property, or safety.
5Data Security and Storage
5.1 Security Measures
- End-to-end encryption for data transmission and storage
- Multi-factor authentication and access controls
- Security review, vulnerability handling, and monitored change processes
- Employee security training and access limitation protocols
5.2 Data Location
Standard Cloud
Managed services may use Singapore or other approved hosting regions depending on the workflow and contract.
Customer-controlled or geo-scoped deployments
Some deployments are scoped to specific jurisdictions or customer infrastructure. The exact data path depends on the deployment model agreed in contract.
Air-Gapped / On-Premise
Data may be stored entirely on customer-controlled infrastructure. In those deployments, the customer remains responsible for local security, backup, and access administration unless otherwise agreed.
5.3 Data Retention
- Data Type
- Account data
- Retention Period
- Active subscription + 90 days
- Data Type
- Interaction logs
- Retention Period
- Until deletion requested
- Data Type
- Uploaded review materials
- Retention Period
- According to the agreed workflow, contract terms, and deletion requests
- Data Type
- Analytics data
- Retention Period
- Aggregated indefinitely
| Data Type | Retention Period |
|---|---|
| Account data | Active subscription + 90 days |
| Interaction logs | Until deletion requested |
| Uploaded review materials | According to the agreed workflow, contract terms, and deletion requests |
| Analytics data | Aggregated indefinitely |
6Your Privacy Rights
EU6.1 GDPR Rights (European Users)
CA6.2 CCPA Rights (California Users)
- Right to Know: Information about data collection and use
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: Equal service regardless of privacy choices
SG6.3 PDPA Rights (Singapore Users)
Note: Withdrawal of consent may affect our ability to provide certain services. We will inform you of the consequences before processing your withdrawal request.
6.4 Exercising Your Rights
Contact us at privacy@oxaide.com to exercise your privacy rights. We will respond within 30 days and may require identity verification.
7Cookies and Tracking Technologies
Required for platform functionality and security
Used to improve user experience and platform performance
Store your settings and customizations
You can manage cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.
8International Data Transfers
Where international transfers are required, we use contractual, technical, and operational safeguards appropriate to the deployment model and applicable law.
9Children's Privacy
Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.
10Data Breach Notification
10.1 Our Commitment
In the event of a data breach that affects your personal data, we are committed to transparency and timely notification in accordance with GDPR, PDPA, and other applicable regulations.
10.2 Notification Timeline
GDPR (European Union)
Notification to supervisory authority within 72 hours of becoming aware, and to affected individuals without undue delay when high risk.
Notification to PDPC within 3 calendar days if breach causes significant harm; affected individuals notified as soon as practicable.
10.3 What You Will Be Told
- Nature of the breach and types of data affected
- Likely consequences of the breach
- Measures taken or proposed to address the breach
- Steps you can take to protect yourself
- Contact details for our privacy team
11Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notifications at least 30 days before taking effect. Continued use of our Services constitutes acceptance of the updated policy.
12Contact Information
Data Controller
Rocketship Pte. Ltd.
Trading as Oxaide
Registered Address
21 Collyer Quay
Singapore 049320
Privacy contact
Email: privacy@oxaide.com
For privacy-related inquiries, data requests, or contract-specific questions, please contact us directly.
Privacy Inquiries
privacy@oxaide.comGeneral Support
support@oxaide.comIf you believe your privacy concern has not been addressed, you may also contact the relevant supervisory or data protection authority in your jurisdiction.
By using Oxaide's Services, you acknowledge that you have read and understood this Privacy Policy.