Privacy Policy

This Privacy Policy applies to personal data collected by Aurora Compliance Technologies Pte. Ltd. (UEN 202632521G) through our website, online compliance training platform, product trials, demos, account registration, customer support, and related communications.

In this policy, “Aurora Compliance”, “we”, “us” or “our” refers to Aurora Compliance Technologies Pte. Ltd. The service is provided at aurora-compliance.sg and at compliance-training.sg. Both addresses serve the same platform and this policy applies to each of them.

This policy applies to visitors, trial users, organisation administrators, learners, prospective customers, and other individuals who interact with us.

We may collect identity and contact information, such as your name, work email address, organisation name, role, team size, and information you provide when requesting a demo, creating an account, accepting an invitation, or contacting us.

When an organisation uses the platform, we may collect account and learning information, including learner names, email addresses, assigned courses, module progress, assessment results, completion records, certificate identifiers, invitation status, administrator actions, and support requests.

When you use the website or platform, we may collect technical and usage information, such as device and browser information, IP address, pages viewed, log data, authentication events, product interactions, and similar information needed to operate, secure, analyse, and improve the service.

For no-signup trial modules, we may store trial progress locally in your browser. If you later create an account, account-based learning records may be stored in the platform.

We collect information directly from you when you submit a form, request a demo, create an organisation, accept an invitation, use a training module, complete an assessment, contact support, or otherwise communicate with us.

We may also receive information from your organisation, for example when an administrator invites you to the platform, assigns you a course, or manages learning records.

We collect some information automatically through the website and platform, including logs, cookies or similar technologies, and analytics tools used to understand usage, improve reliability, and protect the service.

We use personal data to provide, operate, maintain, secure, and improve the Aurora Compliance platform and related services.

This includes creating and managing accounts, authenticating users, delivering training modules, recording progress and completions, generating certificates, supporting administrator dashboards, responding to requests, providing customer support, and communicating with users and customers.

We may use personal data to send service-related notices, security alerts, product updates, demo follow-ups, onboarding communications, and other information relevant to your use or potential use of the platform.

We may use aggregated or de-identified information to improve course content, product design, analytics, security, and reporting, provided such information does not identify an individual.

We may also use business contact information, organisation details, and information about how your organisation uses the platform to tell you about new courses, modules, features, events, pricing, and other products or services we offer, and to make those communications relevant to your role and organisation. Where consent is required before we send you such communications, we rely on the consent you have given and you may withdraw it at any time.

We may also use personal data for billing, accounting, fraud prevention, compliance with applicable laws, responding to lawful requests, protecting our rights, enforcing our terms, and managing business records.

We send two kinds of message. Service messages relate to your account and to your organisation’s subscription: invitations, sign-in links, payment receipts and instructions, renewal reminders, assessment and certificate notifications, security alerts, and notices of changes to these terms. These are part of providing the platform, so they continue for as long as you hold an account.

Marketing messages tell you about new courses, modules, features, events, pricing, and other offerings. You can opt out of marketing messages at any time, without any effect on your access to the platform or on the service messages above. Use the unsubscribe link in the message, or email support@aurora-compliance.sg and ask us to stop.

Where the Personal Data Protection Act requires consent before we send you marketing, we will obtain it, and we will give effect to a withdrawal of consent as soon as we reasonably can. We will tell you if withdrawing consent affects anything else.

We do not currently send marketing by voice call, text message, or fax. If we begin to do so, we will check Singapore telephone numbers against the Do Not Call Registry beforehand unless an exception applies, and commercial electronic messages we send will be labelled and carry an unsubscribe facility as required by the Spam Control Act.

We may disclose personal data to trusted service providers who help us host, operate, secure, analyse, communicate about, and support the platform. These may include cloud hosting providers, authentication providers, email service providers, analytics providers, database providers, payment or billing providers, and professional advisers.

Where your organisation provides or manages your access, relevant learning records may be visible to authorised organisation administrators, including course assignments, progress, completions, assessment outcomes, and certificate records.

We may disclose information where required or permitted by law, regulation, court order, governmental request, dispute process, security investigation, or to protect the rights, property, or safety of Aurora Compliance, users, customers, or others.

We do not sell personal data. We do not disclose personal data to third parties for their independent marketing use without appropriate consent or another lawful basis.

Some service providers used to operate the website or platform may process or store data outside Singapore. Where personal data is transferred overseas, we take steps designed to ensure that such data receives a standard of protection comparable to the protection required under Singapore’s Personal Data Protection Act, where applicable.

These steps may include contractual protections, access controls, vendor due diligence, and limiting data access to what is reasonably necessary for the relevant service.

We may use cookies, local storage, and similar technologies for authentication, security, user preferences, trial progress, product functionality, analytics, and performance monitoring.

You may be able to control cookies through your browser settings. If you disable certain cookies or storage features, parts of the website or platform may not function properly.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse. These measures may include access controls, encryption in transit, authentication safeguards, logging, backups, and vendor controls.

No system can be completely secure. You are responsible for keeping your account credentials confidential and for promptly notifying us if you suspect unauthorised access to your account or organisation workspace.

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including providing the platform, maintaining learning records, supporting customer accounts, complying with legal or accounting obligations, resolving disputes, and enforcing agreements.

Learning and certificate records may be retained for as long as relevant to an organisation’s training, audit, compliance, or record-keeping needs, unless deletion is requested and we are legally and contractually able to comply.

You may contact us to request access to or correction of personal data that we hold about you. You may also withdraw consent where our processing is based on consent, subject to legal or contractual restrictions and reasonable notice.

If your account is managed by your organisation, we may direct certain requests to the relevant organisation administrator or require confirmation from the organisation before changing or deleting learning records.

To make a request, contact our Data Protection Officer at support@aurora-compliance.sg. Please tell us what you are asking for and give us enough detail to identify the records concerned.

The website or platform may contain links to third-party websites or services that we do not control. This Privacy Policy does not apply to those third-party services. You should review their privacy policies before providing personal data to them.

We may update this Privacy Policy from time to time by publishing an updated version on this page. The updated version applies from the “last updated” date shown at the top of this page. We encourage you to review this page periodically.