Privacy Policy

Last updated: 8 Oct 2026

Safari Technologies Pte. Ltd. (“Cheetah”, “we”, “our”, or “us”) is committed to protecting your Personal Data in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Data when you use our website, software, and related services (the “Services”).

By accessing or using our Services, you consent to the collection, use, and disclosure of your Personal Data as described in this Policy.

1. Personal Data We Collect

We collect the following categories of Personal Data:

1.1 Personal Data You Provide

• Name, email address, phone number
• Company name, job title
• Login credentials
• Billing and payment information (processed by secure payment processors)
• Any data you submit through our forms, support channels, or communication with us

1.2 Customer-Provided Data

When you use Cheetah’s financial reporting and automation features, you may upload or connect data sources such as:

• Xero accounting records
• Google Sheets data
• Financial reports, schedules, and spreadsheets
• Any information required to generate reports or provide the Services

You retain ownership and full control over all Customer Data.

1.3 Automatically Collected Data

• Device and browser information
• IP addresses and log data
• Usage metrics and performance diagnostics
• Cookies and similar technologies (see Section 9)
• A one-way hash of the email address you enter in our contact form, used to measure our advertising (see Section 9.3)

2. Purposes for Collecting and Using Personal Data

Under PDPA, we collect and use Personal Data for purposes including:

• Providing, operating, and improving the Services
• Processing data integrations (e.g., Xero, Google Sheets)
• Responding to support requests or troubleshooting issues
• Verifying identity and managing user accounts
• Billing, payment processing, and subscription administration
• Analytics and product development
• Measuring the effectiveness of our advertising
• Sending updates, service notices, and administrative communications
• Ensuring security, preventing fraud, and complying with legal obligations

We will only use your Personal Data for purposes you have been informed of, and for which you have provided consent or where permitted by PDPA.

3. Consent & Withdrawal of Consent

3.1 Providing Consent

By using our Services, you provide consent for us to collect, use, and disclose your Personal Data for the purposes stated in this Policy.

3.2 Withdrawal of Consent

You may withdraw consent at any time by contacting us at support@getcheetah.io. You can change or withdraw your cookie choices at any time through Cookie settings at the bottom of any page on our website (see Section 9).

Withdrawing consent may affect our ability to continue providing certain Services. We will inform you of the likely consequences before completing your request.

4. Disclosure of Personal Data

We may disclose your Personal Data to:

4.1 Service Providers

Trusted third-party vendors who assist with:

• Hosting and cloud infrastructure
• Payment processing
• Data analytics
• Advertising and conversion measurement (see Section 9.3)
• Customer support tools
• Secure authentication and identity management

These providers are contractually obligated to protect your Personal Data.

4.2 AI Service Providers

Some features use Anthropic (the provider of the Claude AI models) to process documents you choose to submit. For example, when you set up unaudited financial statements, you can upload a prior year's financial statements so that Anthropic's model can read them and prefill the setup form, which you review and edit before anything is saved.

We use Anthropic under its commercial terms, under which the content we send and the results it returns are not used to train its models, and we have not opted in to any programme that would allow it. Anthropic may process this content outside Singapore (see Section 5) and handles it under its own privacy policy.

We do not use Customer Data to train AI models.

4.3 Third-Party Integrations

If you authorise integrations (e.g., with Xero or Google Sheets), we disclose data only as needed to perform the functions you have enabled.

4.4 Legal and Regulatory Requirements

We may disclose your data where required to:

• Comply with laws, regulations, or court orders
• Respond to lawful requests by authorities
• Protect rights, safety, or property

We do not sell Personal Data.

5. Transfer of Personal Data Outside Singapore

Cheetah may process and store data on servers located outside Singapore.

When doing so, we ensure compliance with PDPA’s Transfer Limitation Obligation by ensuring that:

• The receiving country offers comparable data protection standards, or
• We implement legally enforceable agreements (e.g., data processing agreements) with equivalent safeguards

6. Accuracy of Personal Data

We rely on you to provide accurate and complete information. If your Personal Data changes or requires correction, you may request updates at any time.

7. Access and Correction Rights

Under PDPA, you may request:

• Access to your Personal Data in our possession
• Information on how your data has been used or disclosed in the past year
• Correction of any inaccurate or incomplete data

Requests may require verification of identity.

We will respond within a reasonable time as required by PDPA.

8. Data Retention

We retain Personal Data only for as long as:

• Necessary for business or legal purposes
• Required to provide the Services
• Required by applicable laws or regulations

When Personal Data is no longer needed, we securely delete or anonymise it.

9. Cookies & Tracking Technologies

We use cookies and similar technologies (such as pixels, local storage and software development kits) on our website and in the Services. They fall into three categories.

9.1 Strictly Necessary

These are needed for the website and Services to work: signing in, keeping your session secure, and remembering your cookie choice. They don't require consent and can't be switched off in the cookie banner.

9.2 Analytics

We use PostHog to understand how our website and the Services are used, for example which pages are viewed and which buttons are clicked, as part of operating and improving them. PostHog is not an advertising tool and is not controlled by the cookie banner; you can block its cookies in your browser settings. PostHog handles this information under its own privacy policy.

9.3 Advertising Measurement

When we advertise, we use conversion measurement tools to learn which ads lead to visits to our website and to enquiries:

These tools set cookies that store an ad-click identifier or a random browser identifier, and send events such as page views, enquiry submissions and other interactions that show interest (for example opening a sample report, watching our demo video or tapping a WhatsApp or booking button) to the provider.

We also keep our own copy of the ad-click identifier from the link you arrived through, and record it with your enquiry if you submit our contact form. This lets us tell the provider later whether an enquiry that came from their ad became a customer. We only store it if advertising measurement is on.

When you submit our contact form, the email address you enter is converted into a one-way hash (SHA-256) in your browser and shared with OpenAI so that the enquiry can be matched to an ad. The OpenAI pixel may also detect contact details entered on the page and hash them in the same way before sending them. Your email address itself is not shared with these tools.

Each provider handles this information under its own privacy policy: Google, Reddit and OpenAI.

9.4 Your Choices

The cookie banner controls the advertising measurement tools in Section 9.3.

• Visitors in the European Economic Area, the United Kingdom and Switzerland: advertising measurement stays off unless you accept it in the cookie banner.
• Visitors elsewhere: advertising measurement is on by default. You can turn it off in the cookie banner.
• If your browser sends a Global Privacy Control signal, advertising measurement is off by default wherever you are.
• You can change your choice at any time through Cookie settings at the bottom of any page on our website. We remember your choice for 6 months, then ask again.
• You can also block or delete cookies in your browser settings, though this may affect some features.

9.5 Cookies We Use

The advertising tools also keep similar identifiers in your browser's local storage and session storage. When you turn advertising measurement off, we delete these cookies and stored identifiers.

10. Data Protection & Security

We take reasonable and appropriate security measures to protect Personal Data, including:

• Encryption in transit (TLS)
• Access controls and authentication
• Logging, monitoring, and audit trails
• Regular security reviews and patching
• Principle of least privilege for internal access

While no system is fully secure, we are committed to keeping your data safe.

11. Data Breach Notification

In the event of a data breach that results in, or is likely to result in, significant harm, or where the breach affects 500 or more individuals, we will:

• Notify the Personal Data Protection Commission (PDPC) as required
• Notify affected individuals as soon as practicable
• Take immediate steps to contain and remediate the breach

12. Children’s Privacy

Our Services are not intended for individuals under 18.

We do not knowingly collect Personal Data from minors.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

If changes are material, we will notify users through email or in-app notices.

Continued use of the Services indicates acceptance of the updated Policy.

14. Contact Us

For questions, feedback, or to exercise any PDPA rights:

Data Protection Officer

Safari Technologies Pte. Ltd.

Email: jarvin@getcheetah.io

Website: https://www.getcheetah.io