Innowave Tech Pte Ltd ("Innowave Tech", "we", "us", or "our") respects your privacy and is committed to handling personal data responsibly. This Privacy Policy explains how we collect, use, disclose, store, protect, and delete personal data in connection with our websites, applications, integrations, plugins, digital services, and related support activities (collectively, the "Services").

​

This Policy includes our Microsoft AppSource plugins, and integrations with third-party platforms such as LinkedIn. Additional notices may apply to a particular Service or interaction. If an additional notice conflicts with this Policy, the more specific notice will apply to that interaction.

​

1. Who We Are

Innowave Tech Pte Ltd is responsible for the personal data described in this Policy where we determine why and how that data is processed.

Registered address: 80 Marine Parade Road, #10-05 Parkway Parade, Singapore 449269
Data Protection Officer contact: hello@innowave.com.sg

​

2. Personal Data We May Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Information you provide

• Name, business contact details, company, job title, and account information.

• Enquiries, support requests, feedback, and other communications you send to us.

• Documents, files, instructions, or other content you choose to provide to a Service.

• Information supplied when you register for, authenticate to, or configure an integration.

Information from connected services

When you authorize a connection to a third-party service, we collect only the information permitted by the authorization you grant and the features you use. This may include:

• Basic account or professional-profile information, such as name, profile identifier, profile image, headline, and email address.

• Organization or company-page information that you are authorized to access.

• Content and metadata needed to prepare, publish, retrieve, or manage an authorized post or company-page activity.

• Calendar, email, task, meeting, or collaboration information when you explicitly connect a supported productivity service.

• Data contained in an archive or export that you choose to upload, such as a LinkedIn account export.

We do not receive your LinkedIn password through the LinkedIn APIs. Information contained in a user-provided archive is collected from that archive, not from LinkedIn APIs, unless we state otherwise at the point of collection.

Technical and usage information

• Device, browser, operating-system, IP-address, and log information.

• Authentication events, feature usage, error reports, security events, and diagnostic information.

• Cookies or similar technologies used by our websites or service providers, as described in any applicable cookie notice.

Public and business information

We may collect publicly available information and business contact information for legitimate business, relationship-management, research, security, and service-delivery purposes, subject to applicable law and platform rules.

​

3. How We Use Personal Data

We may use personal data to:

• Provide, operate, secure, maintain, and improve the Services.

• Authenticate users and maintain authorized third-party connections.

• Respond to enquiries, provide support, and manage business relationships.

• Prepare executive materials, research, proposals, presentations, quotations, task recommendations, and other user-requested outputs.

• Retrieve context, identify follow-ups, organize information, and support human decision-making.

• Prepare or carry out an external action that a user has specifically authorized.

• Monitor service health, prevent fraud or misuse, troubleshoot faults, and maintain audit records.

• Comply with legal obligations, enforce agreements, establish or defend legal claims, and respond to lawful requests.

• Conduct analytics and improve our products, workflows, and user experience using data that is appropriately protected and, where practicable, aggregated or de-identified.

We will not use personal data for a materially incompatible purpose without providing any notice or obtaining any consent required by applicable law.

​

4. LinkedIn Integration

If you connect a LinkedIn account or authorize access to a LinkedIn Page, we may process the following information, depending on the permissions LinkedIn grants and the features you use:

• Basic member identity and profile information.

• Email address, where separately authorized.

• OAuth tokens and technical identifiers required to maintain the connection.

• Content and metadata for posts that you direct us to prepare or publish.

• LinkedIn Page information and activity that you are authorized to manage, if LinkedIn approves the relevant organization-level access.

We use this information to authenticate you, provide the requested integration, prepare or perform authorized posting and Page-management actions, maintain security and auditability, and troubleshoot the connection.

Before we access LinkedIn data on your behalf, we will present an authorization request describing the permissions requested. You may decline the request or disconnect the integration. You can also revoke access through your LinkedIn settings.

When you request deletion, close your account with us, revoke an integration, or when we discontinue the integration, we will delete LinkedIn API data and associated access tokens without undue delay and, where LinkedIn requires, immediately, unless retention is required by law. If LinkedIn suspends or terminates our API access or instructs us to delete LinkedIn data, we will comply with the applicable deletion requirements.

 

5. Legal Bases and Consent

We collect, use, and disclose personal data only for purposes that are lawful and reasonable in the circumstances. Depending on the jurisdiction and context, we rely on one or more of the following:

• Your consent or authorization, including authorization granted through an OAuth permission screen.

• Steps necessary to enter into or perform a contract with you or your organization.

• Our legitimate interests or the legitimate interests of another party, where those interests are not overridden by your rights and interests.

• Compliance with legal obligations.

• Other grounds permitted by applicable law, including deemed consent or legitimate-interests exceptions under Singapore law where their requirements are satisfied.

You may withdraw consent with reasonable notice by contacting us or using the relevant service or platform controls. Withdrawal does not affect processing already lawfully carried out. Some Services may no longer function after consent or platform access is withdrawn.

 

6. How We Disclose Personal Data

We may disclose personal data only as reasonably necessary for the purposes described in this Policy, including to:

• Technology, hosting, security, communications, analytics, professional-advisory, and support providers acting under appropriate obligations.

• Connected services, such as LinkedIn or Microsoft, when necessary to carry out an action you request or maintain an integration you authorize.

• Your organization and its authorized personnel where you use a Service on behalf of that organization.

• Professional advisers, auditors, insurers, regulators, courts, law-enforcement agencies, or other parties where disclosure is required or permitted by law.

• A successor or prospective successor in connection with a merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal data. Based on the current design of the Services, we do not share personal data for cross-context behavioral advertising. We will update this Policy and provide any legally required choices before adopting a materially different practice.

 

7. International Transfers

Innowave Tech and its service providers may process personal data in Singapore and other countries where we or they operate. Where personal data is transferred outside Singapore or another relevant jurisdiction, we take steps designed to ensure an appropriate and legally required standard of protection. These steps may include contractual safeguards, transfer assessments, access controls, and other lawful transfer mechanisms.

 

8. Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to meet contractual and legal requirements, to maintain security and auditability, and to establish or defend legal claims.

Retention periods depend on the type of data, sensitivity, source, purpose, applicable platform requirements, and legal obligations. We delete, anonymize, or securely isolate personal data when it is no longer needed. More specific deletion rules apply to LinkedIn data as described in Section 5.

 

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, collection, use, disclosure, alteration, loss, or destruction. Depending on the Service and risk, safeguards may include access controls, security classification, encryption, secrets management, logging, backups, approval gates, and vendor-security measures.

No system or transmission method is completely secure. If a data breach occurs, we will investigate, mitigate harm, and notify affected individuals and authorities where required by applicable law.

 

10. Your Rights and Choices

Subject to applicable law and exceptions, you may have the right to:

• Request access to personal data we hold about you and information about how it has been used or disclosed.

• Request correction of inaccurate or incomplete personal data.

• Request deletion of personal data.

• Withdraw consent or object to, or request restriction of, certain processing.

• Request portability of eligible personal data.

• Opt out of the sale or sharing of personal data, where such rights apply.

• Limit certain uses of sensitive personal data, where applicable.

• Lodge a complaint with a relevant data-protection authority.

• Exercise applicable privacy rights without unlawful discrimination.

To make a request, email hello@innowave.com.sg with the subject line "Privacy Request". Describe your request and the Service involved. We may ask for information reasonably necessary to verify your identity and authority. We will respond within the period required by applicable law.

An authorized agent may submit a request where permitted by law, subject to appropriate verification of the agent's authority and the identity of the individual concerned.

 

11. Children

The Services are intended for businesses and adults and are not directed to children. We do not knowingly collect personal data from children in circumstances requiring parental consent. If you believe a child has provided personal data to us, contact us so that we can assess and take appropriate action.

 

12. Third-Party Services

Our Services may link to or integrate with third-party services. Those third parties have their own terms and privacy practices. This Policy does not govern personal data that a third party processes independently for its own purposes. Review the relevant third party's privacy notice and authorization screen before connecting an account.

 

13. Changes to This Policy

We may update this Policy to reflect changes in our Services, practices, platform requirements, or applicable law. We will post the updated Policy with a revised effective date and provide additional notice where required. Material changes will not apply retroactively where prohibited by law.

​

14. Contact Us

For privacy questions, requests, complaints, or concerns, contact:

Innowave Tech Pte Ltd
Data Protection Officer: hello@innowave.com.sg
 

Address: 80 Marine Parade Road, #10-05 Parkway Parade, Singapore 449269

If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore or another competent data-protection authority applicable to your location.