1. Who this policy covers
This policy explains how W Creates Digital Pte. Ltd. handles PeopleBook account and workforce data. We administer service accounts and process workspace employee information on the customer organisation’s instructions. The employer normally determines the purposes, lawful authority and authorised users of its workforce records. Employees should contact their employer first about those records; we assist as appropriate.
2. Information we collect
Enabled functions process account email and authentication data; company name, UEN and address; employee names, numbers, contact and employment details; leave balances and requests; claims, approvals, rosters and clock times; draft payroll inputs/results; module records; language preferences and change-event metadata. Support messages contain what you choose to send. Private attachments, GPS/selfies and live AI integrations are not enabled.
3. How we use information
We use information to authenticate users, maintain company memberships, provide authorised HR workflows, record approvals, calculate drafts, display permitted records and exports, support users and protect the service. We also use necessary information to handle requests, investigate misuse and meet legal obligations. We do not sell workforce records or use them for unrelated advertising.
4. When we disclose information
Information is disclosed to authorised workspace users according to their roles, to providers operating the service, when your organisation authorises an enabled connection, or where law permits or requires disclosure. Supabase provides authentication and database services; Sites infrastructure hosts the application. Managers are not automatically entitled to payroll or all employee records. Live SumBook and MCP data sharing remain disabled.
6. Protection and security incidents
We use authentication, server-side company/role checks, database restrictions and action histories to help protect records. No online system guarantees absolute security or government certification. Protect credentials and exported files and report suspected incidents promptly. We will assess security incidents, take appropriate steps and notify affected organisations, individuals and authorities where required by applicable law.
7. Storage and overseas transfers
This PeopleBook database is currently configured in Mumbai, India; application hosting and service providers may process data in other locations. We do not promise Singapore-only storage. Transfers subject to Singapore’s PDPA require appropriate safeguards and a comparable standard of protection. Organisations should assess their requirements before uploading workforce data and contact us about relevant processing arrangements.
8. Retention, closure and deletion
Records remain stored while the workspace is maintained, and action histories may retain references to earlier changes. Automated retention/deletion and a self-service closure flow are not enabled. Contact us to request closure, correction or deletion; we verify authority and consider employment, legal and legitimate business retention requirements. Signing out does not delete data. Keep required independent records before closure.
9. Access, correction and your choices
Subject to applicable law and exceptions, you may request access, correction or information about use/disclosure, and withdraw consent where relevant. Contact your employer first for its workspace records. We verify identity and authority and assist the responsible organisation or respond as appropriate. Some processing or retention may continue where law permits or requires it. Do not send unnecessary sensitive records to prove identity.
10. Communications and children
Account verification, password recovery and essential service/security communications support the service; delivery depends on the configured provider. Optional marketing would require applicable permissions and an opt-out. PeopleBook is a workplace service, not directed at children. Employers must have appropriate authority for any lawful young-worker or dependent information and should not add unnecessary children’s details to general notes.
11. Changes to this policy
We may update this policy as the service, providers or legal requirements change. The effective and last-updated date appears above. Material changes will be highlighted where appropriate, and additional consent obtained where required. A policy update does not itself authorise an unrelated new use of employee data or remove existing statutory rights.
12. Privacy enquiries and complaints
Contact W Creates Digital Pte. Ltd. using the details below and mark your message “PeopleBook data protection” for the person responsible for data protection. Describe the concern and affected organisation without unnecessary sensitive attachments. We will investigate and respond within applicable requirements. You may also raise concerns with Singapore’s Personal Data Protection Commission at pdpc.gov.sg.
W Creates Digital Pte. Ltd.60 Paya Lebar Road, #06-28 Paya Lebar Square
Singapore 409051
hello@wcreatesdigital.com
wcreatesdigital.com