Privacy Policy

Information you provide

We may collect information that you provide directly, including:

• your name, email address, and account details;
• the websites, domains, directory listings, badge links, badge embed code, and display settings you add to BadgeRelay;
• messages, support requests, feedback, and other communications you send us; and
• billing information associated with a paid plan. Payment card details are processed by our payment provider and are not stored directly by BadgeRelay.

Please do not include passwords, API keys, confidential information, or unnecessary personal data in badge code or other content submitted to the Service.

Information collected automatically

When you access the Service or load a BadgeRelay embed, we may automatically collect:

• device, browser, operating system, and language information;
• IP address and approximate location derived from it;
• pages viewed, referring pages, timestamps, and interactions with the Service;
• diagnostic information, error logs, and performance data; and
• identifiers stored through cookies, local storage, or similar technologies.

The public embed may also process basic request information needed to deliver badges to a connected website, protect the Service from abuse, and measure reliability. We do not intend to use the embed to track individual visitors across unrelated websites.

We may use personal data to:

• provide, operate, maintain, and secure the Service;
• create and manage accounts;
• display and update badges on connected websites;
• process subscriptions and other payments;
• respond to questions, feedback, and support requests;
• diagnose errors, prevent fraud or abuse, and improve performance;
• understand how the Service is used and improve its features;
• send essential service, security, billing, and policy notices;
• send product updates or marketing communications where permitted by law; and
• comply with legal obligations and enforce our agreements.

Where applicable, we rely on consent, performance of a contract, legitimate business purposes, and compliance with legal obligations as the bases for processing personal data.

We may use cookies and similar technologies for authentication, security, preferences, analytics, and Service functionality. You can restrict cookies through your browser settings, but some parts of the Service may no longer work correctly.

If we introduce non-essential advertising or tracking technologies, we will provide any notice or choices required by applicable law.

We may disclose personal data:

• to vendors that help us provide hosting, database, authentication, analytics, email, customer support, and payment services;
• when you instruct us to publish badge content on a connected website;
• to professional advisers where reasonably necessary;
• to comply with applicable law, regulation, legal process, or governmental request;
• to protect the rights, safety, and security of BadgeRelay, our users, or others; and
• as part of a merger, acquisition, financing, reorganisation, or sale of all or part of our business, subject to appropriate safeguards.

We do not sell personal data. We also do not disclose personal data for third-party cross-context behavioural advertising.

Website names, URLs, badge images, directory links, and related content that you choose to publish may be visible to visitors of your connected website.

BadgeRelay may link to or integrate with third-party directories, payment providers, hosting providers, and other services. Their handling of personal data is governed by their own privacy policies. BadgeRelay does not control those third parties.

We are based in Singapore, but our service providers may process personal data in other countries. Where required, we take reasonable steps to ensure that transferred personal data receives a standard of protection comparable to that required under applicable Singapore data-protection law.

We retain personal data only for as long as reasonably necessary to provide the Service, fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.

If you delete your account, we will delete or anonymise associated personal data within a reasonable period, except where retention is required for legal, security, fraud-prevention, backup, or legitimate business purposes. Public badges may remain temporarily available in caches after removal.

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data. However, no online service or transmission method is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and for promptly notifying us if you believe your account has been compromised.

Depending on applicable law, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• withdraw consent to certain processing;
• request deletion of your account or personal data;
• object to or restrict certain processing; and
• opt out of non-essential marketing communications.

To exercise a privacy right, contact us using the details below. We may need to verify your identity before completing a request. Withdrawing consent may affect our ability to provide parts of the Service.

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so that we can investigate and take appropriate action.

We may update this Privacy Policy from time to time. We will post the revised version with a new effective date and provide additional notice when required by law. Your continued use of the Service after the revised Policy takes effect means that you acknowledge the updated Policy.

For privacy questions or requests, contact: