Legal
Privacy Policy
Last updated 16 June 2026. Singapore PDPA.
1. Who we are
Jarvia (“we”, “us”) is an organic-growth platform operated from Singapore. This policy explains what personal data we collect, why, and how we protect it, in line with Singapore’s Personal Data Protection Act (PDPA). Our Data Protection Officer can be reached at dpo@jarvia.io.
2. Data we collect
Contact and enquiry details you submit through our forms or our free site-audit tool (name, work email, company, website/URL, and any message). Account details if you subscribe (name, email, and the login we create for your dashboard). For clients, the Google Analytics and Search Console metrics for properties you explicitly connect — aggregate traffic and search-performance data, not the personal data of your site’s visitors. Payment details are handled by our payment processor, not by us (see Payments below). We also keep standard server logs for security and reliability.
3. How we use it
To respond to enquiries, run the free audit you request, provide the platform’s dashboards and reports, process your subscription, and improve the service. We do not sell personal data, and we do not use it for third-party advertising.
4. Marketing communications
If you contact us or request an audit, we may send a short series of follow-up emails about Jarvia. Every marketing email includes a one-click unsubscribe link, and you can opt out at any time — it takes effect immediately. Transactional messages (e.g. your dashboard access or a payment notice) are separate and necessary to provide the service.
5. Cookies & analytics
On our own website we use Google Analytics to understand aggregate, anonymised usage (pages visited, broad location) so we can improve the site. These cookies are not used to identify you personally or for cross-site advertising. We ask for your consent before any analytics cookies are set: until you accept the cookie banner, no analytics load, and declining keeps them off. You can change your mind by clearing the site’s cookies in your browser, and core functionality works either way.
6. Payments
Subscriptions are processed by Stripe. Your card details are entered directly with Stripe and are never stored on or transmitted through our own servers — we receive only a confirmation, your plan, and your subscription status. Stripe processes this data under its own privacy terms.
7. Google data
When you connect a Google account, we request read-only access to Search Console and Analytics. We cannot modify or delete anything in your Google account. The credentials that grant this access are encrypted at the application layer before storage, and our use of Google data complies with the Google API Services User Data Policy, including its Limited Use requirements.
8. Service providers & overseas transfer
We use a small set of trusted processors to run Jarvia: Supabase (database), Vercel (hosting), Stripe (payments), Resend (email), Google (the analytics/search data you connect), and Anthropic (AI content generation — given only the topic or brief, never your credentials or visitors’ data). Some operate outside Singapore, so your data may be processed overseas; where this happens we take reasonable steps so it remains protected to a standard comparable to the PDPA.
9. How we protect it
Data is isolated per client at the database layer and access is controlled by role on the server — not by what the browser shows. Google credentials are encrypted before storage. Platform operator accounts require multi-factor authentication. We apply a strict content-security policy and security headers on every response, and rate-limit public endpoints such as the contact form and free audit tool. No system is perfectly secure, but we work to make ours an unattractive target and to contain the impact of any single failure.
10. Retention
We keep personal data only as long as needed for the purposes above, or as required by law. On request, we will remove your data — including revoking and deleting connected Google credentials and cancelling any subscription.
11. Your rights
Under the PDPA you may request access to, or correction of, the personal data we hold about you, and you may withdraw consent at any time. Contact our DPO to exercise these rights.
12. Contact
For any privacy question or request, email dpo@jarvia.io or use the contact form on this site. We aim to respond within one business day.
Template-level policy for launch — to be reviewed with counsel before onboarding regulated clients.