Legal
Plain English summary: We collect your name, email, and activity preferences to run BPM. We store your data securely in Singapore. We never sell your data. You can request deletion at any time. We comply with Singapore's PDPA.
CloudLab Technologies Pte Ltd ("we", "us", "our") operates BPM — Build Pro Music at buildpromusic.com and buildpromusic.ai.
We are the data controller for personal data collected through BPM.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) as amended.
For questions about this policy: buildpromusic@gmail.com
If you signed up via our waitlist, we collected your first name, email address, and content preference via our email communications platform.
| Purpose | Data used | Legal basis (PDPA) |
|---|---|---|
| Provide the BPM service | Account data, usage data | Contractual necessity |
| Process subscription payments | Email, billing history | Contractual necessity |
| Send transactional emails (receipts, password reset) | Email address | Contractual necessity |
| Send product updates and new feature announcements | Email address | Consent (you may unsubscribe) |
| Improve the platform (analytics) | Technical data, usage data (anonymised) | Legitimate interest |
| Respond to support requests | Account data, usage data | Contractual necessity |
| Comply with legal obligations | As required by law | Legal obligation |
We will never use your data for purposes beyond those listed above without your explicit consent.
CloudLab Technologies Pte Ltd does not sell, rent, or trade your personal data to any third party for commercial purposes.
We share data with the following service providers solely to operate BPM. Each is bound by appropriate data protection obligations:
| Category | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Data storage, authentication, and platform hosting | Singapore |
| Stripe Payments Singapore Pte Ltd | Payment processing | Singapore |
| Email communications provider | Transactional and marketing emails | EEA (GDPR compliant) |
| Security and fraud prevention provider | Bot protection and platform security | USA |
Certain features of BPM send non-personally identifiable content context to third-party AI service providers to generate content on your behalf. No personally identifiable information is included in these requests. Each AI provider's own privacy policy governs their handling of API request data.
We may disclose your personal data if required to do so by Singapore law, court order, or governmental authority. We will notify you of such requests unless prohibited by law.
Your account data and content configurations are stored on cloud infrastructure located in Singapore. We select infrastructure providers on the basis of data residency, security standards, and compliance with applicable law.
We implement the following security measures in accordance with the PDPA Protection Obligation:
In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals within 3 calendar days of assessing the breach, as required by the PDPA.
| Data type | Retention period |
|---|---|
| Account data (active users) | For the duration of your account |
| Account data (after deletion) | A reasonable period sufficient to process the deletion, then permanently deleted |
| Billing records | 7 years (Singapore tax/accounting requirements) |
| Technical logs | A limited period for operational and security purposes |
| Waitlist data (non-converting) | Until you unsubscribe or request deletion |
As an individual whose data we hold, you have the following rights under the PDPA:
You may request a copy of the personal data we hold about you and information about how we have used or disclosed it in the past 12 months.
You may request that we correct any inaccurate or incomplete personal data we hold about you.
You may withdraw consent for non-essential data processing (such as marketing emails) at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Note that withdrawal of consent for essential processing may mean we can no longer provide the service to you.
You may request deletion of your account and personal data. We will action deletion requests within a reasonable timeframe, subject to our legal retention obligations.
Submit requests to: buildpromusic@gmail.com
We will respond within a reasonable timeframe. We may need to verify your identity before actioning requests.
BPM uses cookies and similar technologies solely to operate the platform. These include:
We do not use advertising cookies, tracking pixels, or sell cookie data to third parties. The specific cookies in use may change as we update our service providers.
BPM is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at buildpromusic@gmail.com.
Some of our service providers are located outside Singapore (see Section 4.2). Where personal data is transferred outside Singapore, we ensure that appropriate data protection standards comparable to the PDPA are in place, including contractual safeguards with our service providers.
We may update this Privacy Policy from time to time. We will notify you by email and by posting the updated policy on the Platform with reasonable notice before material changes take effect. Continued use of BPM after the effective date constitutes acceptance of the updated policy.
For privacy-related queries or to exercise your rights:
CloudLab Technologies Pte Ltd
Data Protection Contact: buildpromusic@gmail.com
Website: buildpromusic.com
If you are dissatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.