Privacy Policy
InvestPuppy Pte Ltd — how we collect, process, and protect personal data across our products and website.
Last updated: July 2026.
Note: This Privacy Policy covers personal data collected through the InvestPuppy website and the Ask the Puppy tool. It does not cover data processed through the Vektor platform on behalf of client firms — that processing is governed by the Data Processing Agreement executed with each subscriber. A separate Data Residency and Privacy Framework covers the Vektor platform architecture.
Privacy at InvestPuppy is a design decision, not a compliance afterthought.
1. Who we are
The data controller for personal data collected through this website is:
InvestPuppy Pte Ltd
Incorporated in Singapore
Company registration number: [UEN — to be confirmed]
Registered address: [to be confirmed]
Contact: contact@investpuppy.com
InvestPuppy does not currently appoint a Data Protection Officer. Data protection enquiries are handled at contact@investpuppy.com.
2. What we collect and why
We collect personal data in three contexts. We collect only what is necessary for the stated purpose.
2.1 Enquiry forms
What: Name, email address, firm name, AUM tier (Proof Partners and Alloy Partners forms).
Why: To respond to your enquiry about the Vektor platform or our partnership programmes.
Lawful basis (UK/EU GDPR, Swiss nDSG): Legitimate interest — responding to a direct commercial enquiry.
Lawful basis (Singapore PDPA): Consent given at the point of submission.
Retention: Enquiry records retained for the duration of the commercial relationship and for a period not exceeding five years from last contact. Records deleted on request.
2.2 Research Registration
What we collect: Preferred name (optional), email address.
Why: (a) To send download links for InvestPuppy’s research series immediately on registration; (b) to follow up about Vektor when relevant to your context.
Third-party processor: Resend Inc. (United States) — used solely to deliver the download email to your inbox. Resend processes your email address for delivery only and is governed by Resend’s Data Processing Agreement.
Lawful basis (UK/EU GDPR, Swiss nDSG): Legitimate interest — delivering requested research materials and following up on expressed commercial interest.
Lawful basis (Singapore PDPA): Consent given at point of submission, as disclosed on the registration form.
Retention: Records retained for five years from last contact. Deleted on request to contact@investpuppy.com.
2.3 Ask the Puppy
What: The content of questions submitted through the Ask the Puppy tool.
Why: To generate an AI-assisted response to your question.
Third-party processor: Questions are forwarded to Anthropic (a US-based AI company) to generate responses. Anthropic processes this data under its API Privacy Policy: data is deleted within 7 days and never used for model training. InvestPuppy does not hold a separate DPA with Anthropic; Anthropic’s published API terms govern this processing.
InvestPuppy retention: InvestPuppy does not store Ask the Puppy conversations. No question content is retained in InvestPuppy's systems after the response is delivered.
Lawful basis (UK/EU GDPR, Swiss nDSG): Legitimate interest — providing a requested information service.
Lawful basis (Singapore PDPA): Consent given at the point of use, as disclosed on the Ask the Puppy page.
2.4 Website analytics
What: Standard server log data (IP addresses, page requests, browser type, referrer). No third-party analytics cookies are currently deployed.
Why: Network security and operational monitoring.
Retention: Server logs retained for 30 days and then deleted automatically.
3. International data transfers
InvestPuppy is incorporated in Singapore and operates cloud infrastructure through Amazon Web Services. The following international transfers apply:
| Transfer | Destination | Safeguard |
|---|---|---|
| Enquiry data | AWS ap-southeast-1 (Singapore) | Singapore data residency. No cross-border transfer. |
| Ask the Puppy questions | Anthropic (United States) | Governed by Anthropic’s API Privacy Policy. Data deleted within 7 days, not used for training. Note: whether Anthropic’s API terms satisfy UK/EU SCC or EU–US DPF requirements requires legal counsel confirmation before publication. |
| UK/EU enquiry data | AWS eu-west-2 (London) | UK data residency. No cross-border transfer for UK data. |
| Swiss enquiry data | AWS eu-central-2 (Zurich) | Swiss data residency. nDSG compliant. |
| Research registration email delivery | Resend Inc. (United States) | Resend Data Processing Agreement; standard contractual clauses available. Email address transmitted solely for delivery; Resend does not retain it beyond that purpose. |
Note: Data residency by jurisdiction is a design intent. Confirmation of implemented regional routing should be obtained from legal counsel before this policy is published.
4. Your rights
InvestPuppy applies the full set of rights below to all customers in all jurisdictions as a matter of principle — we follow global best practice rather than local minimum compliance.
The specific legal basis for each right varies by jurisdiction; the rights themselves do not. The following rights apply to personal data InvestPuppy holds about you.
Access
Request a copy of personal data InvestPuppy holds about you.
Rectification
Request correction of inaccurate data.
Erasure
Request deletion of your personal data where InvestPuppy has no legitimate basis to retain it.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interest.
Withdrawal
Withdraw consent at any time where consent is the lawful basis.
To exercise any of these rights, contact: contact@investpuppy.com
We will respond within 30 days. We may need to verify your identity before processing a request. There is no charge for exercising these rights.
5. Supervisory authorities
If you believe InvestPuppy has not handled your personal data correctly, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Singapore — Personal Data Protection Commission (PDPC): pdpc.gov.sg
United Kingdom — Information Commissioner’s Office (ICO): ico.org.uk
Switzerland — Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch
UAE (DIFC) — DIFC Commissioner of Data Protection: difc.ae
6. Cookies and tracking
This website stores a single currency preference (ip_currency) in your browser’s session storage — not as a cookie. This preference retains your currency display selection across pages and is cleared when you close your browser tab. It is not accessible to any third party and does not track you across sessions or sites.
No advertising cookies, analytics cookies, or third-party tracking scripts are deployed on this website.
7. Changes to this policy
Material changes to this policy will be notified by updating the "Last updated" date at the top of this page. We may notify enquiry contacts on record by email for significant changes.
This policy was first published: [date — to be confirmed on publication]. Current version: not yet in effect.
Questions about this policy?
A specific question? For example:
"How does InvestPuppy handle personal data submitted through the Proof Partners enquiry form?"
Direct factual response. No data-gathering. No bullshit.
Contact us at contact@investpuppy.com — we will respond within 30 days.
