Privacy Policy

ClearAnts Pte. Ltd. (“ClearAnts”, “we”, “us”, or “our”), headquartered in Singapore and operating in Indonesia through its local team, provides a DevSecOps platform that integrates security testing tools into a single dashboard. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit clearants.io (the “Website”), request a demo, contact us, or otherwise interact with us.

As our headquarters is in Singapore, this Privacy Policy is primarily framed around the Singapore Personal Data Protection Act 2012 (“PDPA”). Where you are located in another jurisdiction, such as Indonesia, the European Economic Area, the United Kingdom, or Switzerland, additional rights available to you under local law are described in Section 8 below.

By using the Website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Website.

We collect the following categories of information:

• Identifiers you provide to us — such as your name, work email address, company name, job title, and phone number when you fill out our contact form, request a live demo, or subscribe to updates.
• Message content — any information you include when contacting us (e.g. the content of your inquiry).
• Usage and device data — IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, and timestamps, collected automatically through cookies and similar technologies.

We do not knowingly collect sensitive personal information (such as health or financial data) through the Website.

• Directly from you, when you submit a form (contact, request demo, newsletter) or email us.
• Automatically, through cookies, pixels, and analytics tools such as Google Tag Manager as you browse the Website.
• From third parties, such as business partners or publicly available sources, where permitted by law.

We use the information we collect to:

• Respond to inquiries and schedule product demos;
• Provide, operate, maintain, and improve the Website and our DevSecOps platform;
• Send marketing communications, product updates, and newsletters (you may opt out at any time);
• Understand how visitors use the Website through analytics;
• Detect, prevent, and address fraud, security incidents, or misuse of the Website; and
• Comply with legal obligations.

The Website uses cookies and similar technologies (such as Google Tag Manager) to recognize your browser, remember preferences, and analyze traffic patterns. Cookies we use generally fall into these categories:

• Essential cookies — required for the Website to function correctly.
• Analytics cookies — help us understand visitor behavior so we can improve our content and user experience.

You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of the Website.

We do not sell your personal information. We may share it with:

• Service providers who perform services on our behalf, such as hosting, email delivery, customer relationship management, and web analytics (e.g. Google Analytics/Tag Manager), under confidentiality obligations;
• Professional advisors, such as legal or accounting advisors, where necessary;
• Authorities, where required to comply with applicable law, regulation, legal process, or governmental request; and
• Successors, in connection with a merger, acquisition, financing, or sale of company assets.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, tax, accounting, or legal requirements). Contact form and demo request submissions are generally retained for as long as needed to manage the business relationship, after which they are deleted or anonymized.

Singapore (PDPA). As our headquarters is in Singapore, the PDPA is our primary data protection framework. You have the right to: request access to the personal data we hold about you; request correction of inaccurate or incomplete data; withdraw consent to our collection, use, or disclosure of your personal data (subject to legal or contractual restrictions); and request that we stop using your data for marketing purposes.

Indonesia. If you interact with our Indonesian operations or are located in Indonesia, you additionally have rights under Law No. 27 of 2022 on Personal Data Protection (UU PDP), including the right to request deletion of your personal data and to be informed of any data breach affecting you.

EEA, UK, and Switzerland. If you are located in these regions, you have further rights under applicable law (e.g. GDPR), including the right to data portability and to object to or restrict certain processing.

To exercise any of these rights, contact our Data Protection Officer as described in Section 9 below. You may also unsubscribe from marketing emails at any time using the unsubscribe link included in those emails.

In accordance with the PDPA, ClearAnts has appointed a Data Protection Officer (“DPO”) responsible for ensuring our compliance with data protection law. You can reach our DPO at info@clearants.io for any question, concern, or request relating to this Privacy Policy or the handling of your personal data, including requests to access, correct, or withdraw consent over your personal data.

We implement reasonable technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

The Website may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

The Website is intended for business audiences and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

As we operate from Singapore with a team in Indonesia, your personal data may be transferred between, stored in, and processed in both countries, as well as by service providers located elsewhere. Where we transfer personal data outside of Singapore, we take steps required under the PDPA to ensure the recipient provides a standard of protection comparable to the PDPA before the transfer takes place.

In particular, our analytics providers — Google Analytics and Google Tag Manager (see Section 5) — process data on servers located in the United States and other countries where Google operates. Google is certified under the EU-U.S. Data Privacy Framework and offers Standard Contractual Clauses for such transfers; where applicable law (such as the GDPR or UU PDP) requires it, we rely on these or other legally recognized transfer mechanisms.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when this policy was last revised. Material changes will be posted on this page, and where appropriate, notified to you by other means.

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at info@clearants.io, or reach our general team at info@clearants.io.