Privacy Policy

Introduction

STREAMOYE PTE. LTD. ("Okara", "us", "we") respects the privacy of all our customers, business contacts and users of Okara's AI platform at okara.ai and all related domains and sub-domains ("Okara Platform"), and is committed to safeguarding the personal data you provide to us.

Please read this Privacy & Data Use Policy ("Policy") to learn more about the ways in which we collect, use, process, and secure your:

• Personal Data: Personal data as defined in the Personal Data Protection Act 2012 or PDPA
• Prompt Data: Data input by you into the input prompts of AI models on or via the Okara Platform, resulting outputs from AI models, and conversation history
• Usage Data: Timestamps, conversation IDs, model selection, and message roles (user vs assistant) and cookie data

(All the above being collectively known as "Data")

Your Consent: By accessing and/or using the services available on or through the Okara Platform, you acknowledge that you have read Okara's Terms of Service and this Policy, you agree to the Terms of Service, and consent to our collection, use and disclosure of your Data in accordance with this Policy. If you do not agree or consent, please do not access or use the services available on or through the Okara Platform.

If you have any questions, please send an email to our data protection officer at privacy@okara.ai.

Okara Platform Modes

The Okara Platform provides access to the AI models listed and updated here ("AI Models") of third party AI Providers in 2 modes:

Secure Mode

• AI Models are securely hosted on Okara's servers
• Data remains on-platform
• Data is not used for training of AI Models
• Please use this mode for confidential or regulated Data

Standard Mode

• AI Models are hosted by or on behalf of the respective AI Providers
• Data is processed by such AI Providers in accordance with their own terms and policies
• We have no operational or management control over these AI Providers
• Please do not use this mode to input or process confidential or regulated Data

Policy Applicability: This Policy applies to the Secure Mode. It also applies to the Standard Mode but only in respect of Data which remains in Okara's control and management. We have no operational or management control over the actions of any AI Providers in relation to Data received by them in Standard Mode.

Section 1: Data Collection and Use

1.1 Whose Data We Collect and How We Collect It

We collect Data voluntarily provided by you on or through the Okara Platform. This includes:

• Personal Data provided by you in the course of registering for or using the Okara Platform
• Prompt Data input by you through the Okara Platform for processing by the AI Models
• Usage Data derived from your activity on the Okara Platform

1.2 For Whom Do We Collect Your Data

A. Personal Data for Okara's and Its Agents' Use

We collect your Personal Data in our own capacity for use and processing by Okara and its agents (including AI Providers, where applicable) for the following purposes:

• Service Administration: Management and administration of the Okara Platform, including customer registration, account administration, access control, user authentication, and customisation and optimisation of customer experience
• Services & AI Services: Providing the services available on or through the Okara Platform including AI processing services, and where applicable, Service Administration by AI Providers
• Communications: Conducting surveys, obtaining customer feedback for service improvement, measuring consumer interest in products and services, and communicating with you

B. Prompt Data

We collect your Prompt Data in Secure Mode for processing by the AI Models hosted on Okara's servers for the purposes of providing AI Services to you.

Prompt Data in Standard Mode is collected by us and the applicable AI Provider(s), for processing by their respective AI Models, and for other purposes set out in their respective terms and policies (collectively "AI Provider Terms").

C. Usage Data

We collect Usage Data based on your activity on the Okara Platform, to be used and processed in accordance with Section 1.4 below.

1.3 What Personal Data We Collect and Why

If you choose to use our Services, we may require you to provide contact and identity information, including your name, address, email address, phone number and other Personal Data as indicated on the forms throughout the Okara Platform, or which you choose to provide us with. Where relevant, we will indicate which fields are mandatory and which fields are optional.

In general, we collect and use your Personal Data to facilitate our provision of the Services requested by you. We will maintain records about your use of our services, and such other data that we may obtain from time to time in connection with your current and past activities on the Okara Platform, for as long as the purpose for which the data is collected continues or where otherwise necessary for our normal business operations where permitted by applicable law.

Financial Information

Under some circumstances, we may require certain financial information from you. We use your financial information (including credit card information) only to:

• Verify the accuracy of your name, address, and other information
• Detect any fraud or other criminal activity
• Bill you for your use of our services

1.4 Usage Data

We collect the following metadata in relation to your Prompt Data:

• Timestamps
• Conversation IDs
• Model selection
• Message roles (user vs assistant)

Cookies and Similar Technologies

Our Okara Platform uses cookies and similar technologies to distinguish you from other users. This helps us to provide you with a good experience when you browse the Okara Platform and enables us to improve the Okara Platform.

What are cookies? Cookies are text files which are downloaded to your device when you visit a website, allowing your device to be recognised.

Technical Information Collected

When you use the Okara Platform, we collect certain standard information that is sent by your browser to our Site. This includes technical information, such as:

• IP address
• Browser type
• Operating system
• Language
• Time zone setting
• Access times
• Country
• Referring websites

Purpose: All for the purposes of performing anonymised and aggregated data analytics.

Section 2: Marketing Opt-In and Opt-Out

2.1 Opt-In

When you register for Okara account or request a Service, you may opt-in to receive marketing information via email from Okara and/or our marketing agents. This information will include the latest news on Services, including shows, events, promotions, contests and/or lucky draws.

2.2 Opt-Out

If you change your mind at any time and wish to unsubscribe from Okara's marketing materials, you may easily do so via:

You can unsubscribe using the unsubscribe link found on each email.

Section 3: Personal Data Disclosure to Other Third Parties

We will share and disclose your Personal Data with the following third parties:

• Our third party service providers who process your Personal Data on behalf of Okara, including Okara Platform administrators and payment gateway providers
• Lawyers, auditors and other professional advisors
• Any other agents or subcontractors acting on our behalf

We share Personal Data only to the extent required in the normal course and scope of our business in the provision of our Services, and/or where required or permitted by applicable law.

For a complete list of our subprocessors and third-party service providers, please see our Subprocessors page.

3.1 Internal Sharing

Additionally, we may share your Personal Data with people within our organisation, including people within our group companies, who have a "need to know" that data for business or legal reasons, for example, in order to carry out an administrative function such as processing an invoice, or to direct a query that you have submitted to the relevant department within Okara.

3.2 Business Transfers

We may disclose your Personal Data to third parties in the event that we sell, buy or merge any business or assets, including to the prospective seller or buyer of such business or assets.

3.3 Anonymized Data

Finally, we may share non-Personal Data with other third parties that are not described above. When we do so we may aggregate, anonymise, or de-identify the information so that a third party would not be likely to link data to you, your computer, or your device.

Section 4: Transfers of Personal Data Outside Singapore

Whenever we transfer Personal Data across borders, we take legally required steps to ensure that:

1. The transfer is necessary to provide you with Services, for example, cloud service providers hosting the Okara Platform, and where necessary, AI Providers; and
2. Adequate safeguards are in place to protect your Personal Data and to ensure it is treated in accordance with legal or contractual standards of protection comparable under the PDPA and this Policy.

Section 5: Security of Data

The security of your Data is important to us. We employ industry-standard security arrangements to protect your privacy and Data, in such manner and to such extent as is reasonably appropriate to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

5.1 Encryption

Access to the chat interface on the Okara Platform is secured with Encryption-at-rest. All sessions are encrypted and protected against intrusions, maintaining persistent secure communication.

Following active processing, your Prompt Data is encrypted at rest and stored on secure servers with zero-access architecture, and such Data cannot be accessed or decrypted in storage.

5.2 Zero-Access Architecture

Only you, the user, can decrypt your conversation history. Decryption only occurs locally on your own device.

For detailed technical information about our encryption architecture and security implementation, please see our Security Whitepaper.

5.3 Confidentiality Requirements

Okara employees are required, as a condition of their engagement, to treat Data held by Okara as confidential, and to maintain the confidentiality of that Data.

AI Providers are contractually prohibited from using your Prompt Data for AI Model training.

Despite the high levels of security deployed by Okara, "perfect security" does not exist. Okara does not represent or warrant that there will not be, and hereby disclaims any responsibility or liability directly or indirectly arising out of or in connection with, any loss, theft, or unauthorised access, collection, use, disclosure, copying, modification, disposal or similar actions with regard to any data held or maintained by us.

Section 6: Record Retention

6.1 General Data Retention

Your Data is not kept for longer than is necessary for the purposes for which it is collected, or where permitted by applicable law, no longer necessary for legal purposes or the purposes of our normal business operations. This means that Data and records (including Personal Data) are destroyed or erased from our systems when no longer required. The amount of time that Data and records are kept for varies depending upon the type of Data they contain.

6.2 User Control Over Prompt Data

You have the right and ability to delete your Prompt Data from our servers at any time from your personal dashboard on the Okara Platform, subject always to Section 6.3 in respect of backup Data.

6.3 Backup Data Retention

Deleted Data will remain in our backup servers in encrypted ciphertext for a short time after deletion from the main servers, for periods complying with our current backup cycles and policies, after which they will also be deleted from the backup server.

Section 7: Accessing and Updating Your Data

If you wish to access, correct, update, delete, limit or object to the processing of or otherwise change or remove any Personal Data that you provide for Okara's use, please contact us at privacy@okara.ai.

You will also be able to change your personal particulars directly from your personal dashboard on the Okara Platform.

7.1 Data Portability

You may also request to receive a copy of any Personal Data that you have provided to Okara for Okara's use.

7.2 Response to Requests

We will consider and respond to all requests for Personal Data under this Section 7 in accordance with applicable law.

7.3 Accessing Your Prompt Data

Your Prompt Data is accessible by you at any time with your passcode or (if you have saved one during signup) your recovery key. Please note that without your passcode or recovery key, your Prompt Data is permanently encrypted and inaccessible by you or anyone else.

Section 8: Changes to the Policy

Okara reserves the right to amend its prevailing Policy at any time and will place any such amendments on this Site.

It is your responsibility to review this Policy every time you submit Data to us.