Privacy Policy

This Privacy Policy explains how 2V HUB PTE LTD ("SourceToDocs", "we", "us") collects, uses, discloses and protects personal data in connection with the SourceToDocs website (sourcetodocs.com) and the SourceToDocs document generation platform (together, the "Service").

We are committed to handling personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA") and, where applicable, comparable data protection laws in other jurisdictions.

1. Who we are

The data controller responsible for the Service is:

• 2V HUB PTE LTD (operator of SourceToDocs)
• 68 Circular Road, #02-01, Singapore (049422)
• Email: weare@2vmdls.com

2. Information we collect

2.1 Information you provide to us

When you contact us — for example by emailing weare@2vmdls.com or by submitting a "Request a demo" form on the website — we receive the information you choose to share, which typically includes your name, email address, employer, the plan you are considering, and the contents of your message.

2.2 Information collected automatically

When you visit the website, our hosting infrastructure may automatically log technical information such as your IP address, browser type and version, device type, referring URL, pages visited and timestamps. We use these logs only to operate the website, secure it against abuse, and diagnose technical problems.

2.3 Cookies and tracking

The SourceToDocs website uses cookies and similar technologies in four categories. You decide which categories run, via the cookie banner shown on your first visit and at any time afterwards through the "Cookie preferences" link in the footer:

• Strictly necessary — required for the site to function (e.g. remembering your cookie choice itself, basic security). Always on.
• Analytics — helps us understand how the site is used so we can improve it (e.g. Google Analytics, loaded through Google Tag Manager).
• Marketing — supports personalised advertising and ad measurement on third-party platforms.
• Preferences — remembers settings such as layout or language for a smoother return visit.

By default, all non-essential categories are set to "denied" until you make a choice. We use Google's Consent Mode v2 so that any tags loaded through Google Tag Manager honour your selection. You can change your choice at any time using the "Cookie preferences" link in the footer; we record your selection in your browser's local storage along with the timestamp of the choice.

2.4 Customer data processed by the platform

Where you use the SourceToDocs platform under a separate Subscription Agreement, you may upload, connect or otherwise provide data to be processed for document generation ("Customer Data"). We process Customer Data on your instructions as a data processor (or equivalent role) on behalf of you. The handling of Customer Data is governed primarily by your Subscription Agreement with us.

3. How we use information

We use personal data to:

• respond to your enquiries and provide the information or proposals you ask for;
• deliver, operate, maintain and improve the Service;
• protect the Service against fraud, abuse and security incidents;
• comply with legal, regulatory and tax obligations; and
• establish, exercise or defend legal claims.

4. Legal bases for processing

Where the PDPA, the EU/UK General Data Protection Regulation or another applicable law requires us to identify a legal basis for processing, we rely on one or more of the following:

• Consent — for example, where you voluntarily contact us or subscribe to communications;
• Performance of a contract — to deliver services you have requested or that we have agreed to provide;
• Legitimate interests — to operate, secure and improve the Service, where those interests are not overridden by your rights and freedoms; and
• Legal obligation — to comply with applicable law.

5. Sharing and disclosure

We do not sell personal data. We share personal data only:

• with carefully selected service providers (for example hosting, email and infrastructure providers) acting on our written instructions and under appropriate confidentiality and data protection terms;
• with professional advisers (such as lawyers and accountants) bound by duties of confidentiality;
• with competent authorities, courts or regulators where we are legally required to do so or to protect our rights or those of others; and
• with a successor entity in connection with a merger, acquisition, financing or reorganisation, subject to confidentiality safeguards.

6. International transfers

2V HUB PTE LTD is established in Singapore. Where personal data is transferred outside the country in which it was collected (including to our service providers), we take reasonable steps to ensure that the recipient is bound by obligations providing a comparable standard of protection to that under the PDPA, or that another lawful transfer mechanism applies.

7. Data retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, including to comply with legal, accounting or reporting requirements. Enquiry correspondence is generally retained for a reasonable period after our last interaction. Retention of Customer Data processed through the SourceToDocs platform is governed by the relevant Subscription Agreement.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may have the right to:

• request access to the personal data we hold about you;
• request the correction of inaccurate or incomplete personal data;
• withdraw any consent you have previously given;
• request the deletion of personal data, where applicable;
• object to or restrict certain processing; and
• lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) or another competent supervisory authority.

To exercise any of these rights, please email us at weare@2vmdls.com. We will respond within the timeframes required by applicable law.

10. Children

The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy notices.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be highlighted on this page or, where appropriate, communicated to you directly.

13. Contact us

If you have any questions about this Privacy Policy or our handling of personal data, please contact us at: