Privacy Notice
Effective from:
This notice explains how Centvra collects, uses, and protects your personal data, in accordance with Singapore's Personal Data Protection Act (PDPA). The Terms and Conditions and Demo Request Notice are separate documents.
On this page9 sections
1. What information we collect
When you use Centvra, we collect your email address, which we verify to be a corporate email. We do not ask for your name or your organisation's name directly, though your email domain may indicate your organisation.
We also collect the requirements and preferences you share with us during your session, which we use to generate supplier recommendations, and information related to any demo request you make.
If you contact us directly through our contact form, we also collect your name and email address to respond to your enquiry.
2. How we use it
We use the information you provide to generate supplier recommendations, prepare your Demo Preparation Guide, Full Supplier Evaluation Report, and Software Buying Journey Guide, facilitate demo requests with suppliers on your shortlist, and send you related communications, such as your recommendation results or demo confirmation.
If you request a demo, we share relevant information with suppliers on your shortlist so they can prepare for and arrange a demo. See our Demo Request Notice for full detail on what is shared and when.
We may also use your responses, aggregated and anonymised, in periodic market insight reports made available to organisations such as market analysts, consultants, and suppliers on a subscription basis. These reports cannot be used to identify any individual organisation.
If you contact us through our contact form, we use your name and email address only to respond to your enquiry. We don't store contact form submissions or add you to any mailing list from this.
3. Who we share it with
If you request a demo, we send a requirements brief to each supplier on your shortlist. This does not include your corporate email address or your name. Depending on how specific your requirements are, your organisation may still be recognisable to a supplier in some cases.
We share your corporate email address only with a supplier once they accept the introduction, so they can contact you directly about the demo. Suppliers who don't accept never receive your email address.
We also use third-party service providers to operate Centvra, such as cloud hosting and email delivery providers. These providers process your information on our behalf and only to the extent needed to provide their service to us.
We don't sell your identifiable information to anyone. See "How we use it" above for how aggregated data may be used.
Once a supplier has your email address, they may contact you about the demo, your evaluation, and their other products and services, including marketing. You can opt out of marketing directly with that supplier. Suppliers are responsible for how they handle your information under their own privacy notices.
4. Legal basis for processing
We process your information on the basis that it's necessary to provide the service you've asked for, such as generating recommendations, preparing your reports, and facilitating demo requests.
We also process information on the basis of our legitimate interests, such as improving our matching methodology, showing aggregated benchmarks to other users (for example, indicating what proportion of buyers in a given industry prioritised a particular feature), and producing periodic market insight reports, in each case only in ways that don't override your own rights and interests, and never in a way that identifies you or your organisation.
Where applicable law requires your specific consent for certain processing, such as sharing your email address with a supplier, we obtain that consent before processing.
5. International data transfers
Centvra serves buyers globally, and our infrastructure providers may be located in different countries from where you are based. This means your information may be stored, processed, or accessed in countries other than your own.
We handle your personal data in accordance with Singapore's Personal Data Protection Act (PDPA).
6. Data retention
We keep your information for as long as necessary to provide our service and for legitimate business purposes, such as regulatory compliance, dispute resolution, and enforcing our agreements. If you'd like your information deleted sooner, contact us at contactus@centvra.com and we'll do so where we're not required to keep it.
7. Your rights
Under the PDPA, you have rights over your personal information, including the right to access the personal data we hold about you, request correction of inaccurate data, and withdraw your consent to certain processing, such as receiving communications from us.
To exercise these rights, contact us at contactus@centvra.com.
8. Security
We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Changes to this notice, contact
We may update this notice from time to time as our practices or applicable law change. The latest version will be published on our website with its effective date. Where a change significantly affects how we handle your information, we will take reasonable steps to notify you.
If you have questions about this notice or how we handle your information, contact us at contactus@centvra.com.