Privacy Policy | WorkLink

1. Who we are

WorkLink is operated by WeKnow Consultancy Pte. Ltd. (UEN 202012591W), a company registered in Singapore ("we", "us", "our"). This policy covers the WorkLink website (worklink.com.sg) and the products and services we offer under the WorkLink name. Aperture, at aperture-ai.run, has its own privacy policy on that site.

2. Two roles we play

When you deal with us directly (for example, you visit this website, contact us, or buy a service), we decide how your personal data is used, and this policy applies to us as the responsible organisation.

When we process data for a business customer (for example, the conversations, contacts and deals a business keeps in our CRM, Team Inbox or AI Chatbot), that business decides how its customers' personal data is used and is responsible for it under the PDPA. We process that data only on the business's behalf and on its instructions, as a data intermediary, under the Data Processing Terms in Schedule A of our Terms of Service. If you are a customer of one of our business customers, please contact that business about your data; if you contact us, we will pass your request to them.

3. Personal data we collect

Contact details you give us: name, company, job title, email address and phone number.
Messages you send us by email, WhatsApp or other channels.
Details you send through the forms on this website: the contact details and message above, the products or services you're interested in, your team size or company website if you give them, and a record that you agreed to be contacted. We store form submissions with our hosting provider and receive them by email through an email delivery provider. To limit spam, the forms use a spam check run by our hosting provider, which looks at your browser and IP address; we do not keep your IP address with your submission.
Messages you type in the chat window on this website: the assistant in that window is an AI. To write each reply, the conversation so far is sent through our AI service provider, fal.ai, to the AI model. We do not store the conversation: it stays in your browser for that tab only and is gone when you close it. To limit abuse, we keep only a count of messages per chat session and per day, for up to two days, and the chat uses the same spam check as the forms. Please don't type personal details in the chat; use the forms instead.
Account and billing details for customers, such as users' names and email addresses, and invoices.
Data in accounts you give us access to, for our ads services: data in your Google Ads, Meta Ads, Google Analytics or Tag Manager accounts, and any enquiry export you choose to share. We ask for read-only access first. We review audience lists and lead-form data inside the platforms and do not download customer lists; our working files keep totals, not individuals' details.
Data our business customers store in our products, such as their customers' names, phone numbers, WhatsApp messages, notes and deal records. See section 2.
Technical data collected when you visit this website, such as IP address, browser type and pages requested, recorded in our hosting provider's logs.

4. Cookies

This website does not use advertising or analytics cookies. Our hosting and security provider may set cookies that are strictly necessary to deliver and protect the website, for example to filter malicious traffic. If we add analytics or advertising cookies, we will update this policy first and ask for consent where required.

5. How we use personal data

To reply to your enquiries and arrange calls.
To provide, set up, support and bill for our products and services.
To carry out ads audits and, with your written approval, changes to your ad accounts.
To keep our products secure, fix problems and improve them.
To send you information about our products, where you have agreed to receive it.
To meet our legal, accounting and regulatory obligations.

We collect, use and disclose personal data with consent, or where the PDPA or another law allows it without consent. You can withdraw your consent at any time by contacting us (section 14). We will act on your request within a reasonable time and tell you what withdrawing consent means for the services we provide to you.

6. AI features

Our AI Chatbot uses an AI model to generate replies, automatically, to our business customers' customers, based on information the business provides. Staff of the business can see these conversations and take over at any time. We ask our business customers to tell their customers that they may be chatting with an automated assistant.

Each business customer connects the AI Chatbot to its own account with an AI model provider, using its own key. Messages are sent to that provider under the business's own agreement with it, and the business chooses the provider and its settings. We do not use WhatsApp conversation data to train AI models.

The chat window on this website is a demonstration of the same technology. Its replies are written by an AI, can be wrong, and are not an offer or a promise: prices, terms and services are only those set out on this website and in your order. Messages in it go through fal.ai, whose terms allow it to use usage data, which may be derived from what is sent, to develop its services. That is one more reason not to type personal details in the chat.

7. Who we share personal data with

We do not sell personal data. We share it only as needed to run our services, with:

Service providers that process data for us: website hosting and cloud infrastructure, AI model (LLM) providers, email providers and payment processors. They may use the data only to provide their services to us, under written terms.
Platforms you connect, such as the WhatsApp Business Platform (Meta), Google Ads and Meta Ads, when you ask us to work with them. Those platforms handle data under their own terms and privacy policies.
Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
Authorities, where the law requires it.

You can ask us for the current list of our service providers that process personal data, and where they process it.

8. Transfers outside Singapore

Some of our service providers store or process data outside Singapore, including in the United States. Before we transfer personal data out of Singapore, we make sure the recipient is bound by legally enforceable obligations, such as contractual terms, to protect it to a standard comparable to the PDPA.

9. How long we keep personal data

Enquiries from people who do not become customers: up to 24 months after our last contact.
Data we hold for a business customer: for as long as the subscription is active. When it ends, the customer has 30 days to export its data; after that, we delete it, except where the law requires us to keep it.
Working files from ads audits: up to 12 months after we deliver the report.
Invoices and accounting records: 5 years, as Singapore law requires.

When personal data is no longer needed for these purposes, we delete it or anonymise it.

10. How we protect personal data

We use reasonable security arrangements to protect personal data, including access controls so that only people who need the data can see it, encryption in transit, and confidentiality obligations on everyone who handles it. No method of transmission or storage is completely secure, but we work to prevent unauthorised access, collection, use, disclosure, copying, modification or disposal, and the loss of storage media and devices.

11. Data breaches

If we have reason to believe a data breach has happened, we will assess it promptly. If it is likely to cause significant harm to the people affected, or affects 500 or more people, we will notify the Personal Data Protection Commission no later than 3 calendar days after we determine this. Where it is likely to cause significant harm, we will also notify the people affected. Where we hold the data for a business customer, we will tell that customer without undue delay so that it can meet its own obligations.

12. Your rights: access and correction

You can ask for a copy of the personal data we hold about you and how it has been used or disclosed in the year before your request, and ask us to correct it. We will respond as soon as reasonably possible. If we cannot respond within 30 days, we will tell you within that time when we will respond. We may charge a reasonable fee for access requests and will tell you the amount before we proceed.

13. Children

WorkLink is for businesses. It is not directed at individuals under 13, and we do not knowingly collect their personal data.

14. Contact us and our Data Protection Officer

For questions, requests or complaints about personal data, contact our Data Protection Officer at TODO: DPO email. For anything else, email hello@worklink.com.sg. If you are not satisfied with our response, you may contact the Personal Data Protection Commission.

15. Marketing messages

We send marketing messages only with your consent. We respect the Do Not Call Registry for Singapore telephone numbers, and every marketing email or message tells you how to opt out.

16. Changes to this policy

We may update this policy. The current version is always on this page, with its date. If a change materially affects how we use personal data we already hold, we will tell affected customers before it takes effect.

Last updated: 5 November 2026.