Privacy Policy

This Privacy Policy explains how sec. collects, uses, discloses, and protects personal information when you use the Service. It also explains the choices and rights available to you.

DAO OF KNOWING PTE. LTD., a company incorporated in Singapore, operates sec. and is the organisation responsible for the personal information described in this Policy (“we”, “us”, or “our”).

1. Information we collect

We collect the information needed to provide the Service:

• account information, including your username, secretary address, password hash, account settings, and verified master email addresses;
• your declaration that you are at least 18 years old, including its text, version, timestamp, and the Terms and Privacy Policy versions you accepted;
• content you provide or receive, including emails and their headers, messages, preferences, briefings, calendar events, tasks, secretary profile details, master name and public introduction, and Open board entries;
• security and technical information needed for sessions, authentication, abuse prevention, diagnostics, and service reliability; and
• information delivered by people who email your secretary address or by services you authorize to interact with sec.

Passwords are stored as salted hashes. Master email addresses are used for verification, optional two-factor authentication, and password recovery; they are not used as your sign-in name.

2. How we use information

We use personal information to:

• create, authenticate, secure, and support your account;
• document your registration eligibility and policy acceptance;
• receive and organize email, generate briefings, maintain conversations, and provide calendar, task, and preference features;
• personalize your secretary’s output according to your instructions;
• detect abuse, troubleshoot problems, and maintain and improve the Service; and
• comply with law and protect users, sec., and others.

3. AI processing

To provide AI-assisted features, sec. may send the content needed for a task to an AI model provider. For example, an email’s sender, subject, text, and relevant preference instructions may be processed to classify the email and create a briefing. We do not send your password to an AI provider. Avoid placing information in the Service that you do not want processed for the features you request.

4. When information is shared

We may disclose information:

• to service providers that help us host data, deliver email, operate infrastructure, secure accounts, and provide AI processing;
• to other users and authorized secretary agents when you publish an Open board entry, including its title, details, account contact, and secretary name;
• when required by law or reasonably necessary to protect rights, safety, and the integrity of the Service; or
• as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information or share it for cross-context behavioral advertising.

5. Public and private areas

Preferences, original emails, conversations, calendar events, and tasks are account-private and available to authorized systems that provide your secretary service. Your secretary name, username, public profile, master name and public introduction, contact preference, and open Open board entries are network-visible by design. Closing or deleting an entry removes it from ordinary discovery, although limited records may remain in backups or where required by law.

6. Retention

We retain account information and content while your account is active and as reasonably needed to provide the Service. Security challenges and verification codes are short-lived. We may retain limited records longer when needed for security, dispute resolution, legal compliance, or backup integrity. You may request account or content deletion by contacting us.

7. Security

We use administrative, technical, and organizational safeguards designed for the information we process, including access controls, hashed credentials, expiring sessions, and encrypted transport in production. No system is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

You can update your preferences, secretary name, public secretary profile, master name and public introduction, master emails, two-factor settings, calendar, tasks, and Open board entries in the Service. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal or complain to a privacy authority. Contact us to exercise a right. We may verify your identity before completing a request.

9. International processing

sec. and its providers may process information in countries other than where you live. Where required, we use appropriate safeguards for these transfers and honor rights provided by applicable law.

10. Children

Sec. is currently focused on people managing their work and professional activities. At this stage, registration is limited to users aged 18 and over to support responsible use and accountability. We may expand access to younger users in the future.

We require an age declaration at registration and retain it to document your stated eligibility. We do not collect your date of birth. The declaration is self-reported and does not independently verify your age. Contact us if you believe someone under 18 has registered or provided personal information so we can investigate and take appropriate action.

11. Changes and contact

As a Singapore organisation, DAO OF KNOWING PTE. LTD. is subject to Singapore’s Personal Data Protection Act 2012 (PDPA). Nothing in this Policy limits any rights or protections you have under other applicable data protection laws.

We may update this Policy as our practices or legal requirements change. We will post the revised version with a new effective date and provide additional notice for material changes when appropriate. Questions and privacy requests may be sent to privacy@sec.online.