Privacy Policy

Last updated 17/10/2026

This policy explains what personal data SALARIED BOTS PTE. LTD. (“Espresso”, “we”) collects, why, who sees it, and what choices you have. It follows Singapore’s Personal Data Protection Act 2012 (PDPA).

1. Who we are

Espresso is software for licensed financial advisers in Singapore. It is run by SALARIED BOTS PTE. LTD. (UEN 202618032Z). You can reach our data protection officer at hello@espresso.insure, or through our contact page.

2. Two kinds of people, two roles

• Advisers (the financial advisers who sign up for Espresso). For your own account details, we decide how the data is used, and this policy is our notice to you.
• Clients of an adviser. Your adviser decides why and how your personal data is used in Espresso. We handle it on your adviser’s behalf, only to provide Espresso to them (in PDPA terms, we are a data intermediary). If you are an adviser’s client and want to see or correct your data, ask your adviser first; you can also write to us and we will help.

3. The personal data we handle

Advisers: your name, email address, mobile number, company or agency name, and password (kept only in scrambled form by our sign-in provider; we cannot read it); your plan and trial dates, and what you pay (the plan, its price, when it renews and whether the last payment went through: your card number is held by Stripe and we never see it); what you enter in the dashboard; your WhatsApp number and your messages with Maya; the time and version when you accepted our terms and agreed to receive WhatsApp messages; and records of how the service is used, kept for security and support.

An adviser’s clients: what the adviser or the client puts into Espresso: name, WhatsApp number, email, date of birth, address, occupation, next-of-kin details, policy details (insurer, product, policy number, premium, renewal date), claim details, the documents and photos uploaded (for example a policy document, a receipt or a medical report), and the client’s conversation with Maya.

What we deliberately do not keep: an NRIC or FIN number or a bank account number typed in to complete a claim form is used for that form only. It is not stored, not written to our logs and not sent to our AI providers, and the copy of the form we keep leaves those two boxes blank. Documents that are uploaded can themselves contain such numbers; we keep the file, and we do not copy those numbers out of it into your records.

Website visitors: the technical data a browser sends (IP address, browser type, the pages visited), and the cookies described in section 12.

4. Why we use it

• to create and run your account, to take payment for your plan, and to provide Espresso: the dashboard, Maya’s answers, renewal and premium reminders, claim support and document handling;
• to send the WhatsApp messages and emails described in section 5 and on our WhatsApp messaging page;
• to answer questions and give support;
• to keep the service secure and to prevent fraud and abuse (for example by limiting how many messages one number can send);
• to maintain and improve Espresso, and to meet our legal obligations.

We do not sell personal data, and we do not use an adviser’s clients’ data for advertising.

5. WhatsApp

Maya talks to people on WhatsApp through the WhatsApp Business Platform, which is run by Meta. Messages to and from Maya pass through Meta’s systems, and Meta’s own terms and privacy policy apply to that part. We keep a copy of the conversation in our database so that the adviser can see it and Maya has the context. We message advisers about their account and their clients, and we message an adviser’s clients only on that adviser’s behalf, about their policies, renewals, premiums, claims and documents. We do not send marketing or promotional messages. To stop WhatsApp messages, see section 11.

6. AI

Maya is an AI assistant. The AI models behind Maya, and the tools that read uploaded documents and voice notes, are provided by AI service providers (currently Anthropic, Google and Voyage AI). When Maya answers, a document is read or a voice note is turned into words, the relevant part of the conversation, the client’s policy details, the document or the recording is sent to them over encrypted connections. Maya’s answers are produced by AI and can be wrong, so advisers are asked to check anything important. Maya does not give financial advice, and she tells the people she writes to that she is an AI assistant and that the adviser can see everything written in the chat. No AI decides whether someone is offered a product, what they pay or whether a claim is paid: that is for the adviser and the insurer. Advisers can see each use of AI, the data it sees and who checks what it says on the page “How Espresso uses AI” in their dashboard.

7. Who else sees the data

Only the service providers we need to run Espresso, under terms that require them to protect it:

We may also disclose personal data where the law requires it, or to protect our rights, or in a sale or restructuring of the business (the buyer would be bound by this policy). Espresso does not send anything to an insurer: an adviser downloads a claim form and submits it themselves.

8. Sending data outside Singapore

Client records are stored in a database in Singapore. Some of our providers, listed above, process data in other countries. When we send personal data abroad we take steps to make sure it is protected to a standard comparable to the PDPA, mainly through our contracts with those providers.

9. How long we keep it

We keep an adviser’s data while the account is open. An adviser can remove policies and claims in the dashboard, and can ask us at any time to delete a client’s record or to close the whole account. After an account is closed we keep the data for 30 days, so the adviser can ask for a copy, and then delete it or make it anonymous, unless the law requires us to keep it longer. Copies in backups are overwritten in the normal backup cycle. We delete data on a valid request too (section 11).

10. How we protect it

• Data travels over encrypted connections, and the database and files are encrypted when stored.
• Each adviser can see only their own clients: access is restricted at the level of each row in the database.
• We take care to keep phone numbers, names and message contents out of our logs, and we limit how many requests one sender can make, to stop abuse.
• Access for our own people is limited to what the work needs.

No system is perfectly secure. If a breach of personal data happens that the law says we must report, we will tell the Personal Data Protection Commission and the people affected as the PDPA requires.

11. Your rights and choices

You may ask us to tell you what personal data we hold about you, to correct it, or to delete it, and you may withdraw a consent you gave. To do so, email hello@espresso.insure. We may need to confirm who you are, and we aim to reply within 30 days.

To stop WhatsApp messages from Maya: tell us by email, or block the number in WhatsApp, or tell your adviser. We will stop messaging that number and tell the adviser. If you are an adviser, stopping messages ends Maya’s service to you.

If you are not satisfied with our reply, you can complain to the Personal Data Protection Commission (pdpc.gov.sg).

12. Cookies and fonts

We use only the cookies needed to keep you signed in. We do not use advertising or analytics cookies. Our pages load fonts from Google Fonts, so Google may receive your IP address when a page loads.

13. Who this is for

Espresso is a business tool for advisers aged 18 or over. It is not meant for children.

14. Changes to this policy

If we change this policy we will post the new version here with a new date, and tell advisers by email if the change is important.

15. Contact

Questions about this policy or your personal data: hello@espresso.insure.