Privacy Policy

Last updated: 16 August 2026 · PDPA (Singapore)

1. Introduction

Leaptechnology Pte Ltd (“Leaptech”, “we”, “us”, or “our”) is committed to protecting the personal data of our users in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you access or use the EnQuote application (“EnQuote”). By using EnQuote, you acknowledge that you have read and agreed to this Privacy Policy.

If you do not agree to this Privacy Policy, please do not use EnQuote and contact us at support@leaptech.sg.

2. Our Roles Under the PDPA

EnQuote is a business platform used by companies (“Business Users”) to run their operations. Because of this, Leaptech acts in two distinct capacities:

• As an organisation (data controller) — in respect of personal data we collect directly about Business Users and their staff, such as account information, usage data, and communications with us. This Privacy Policy governs that data.
• As a data intermediary — in respect of personal data that Business Users enter into EnQuote about their own customers, employees, and contacts (“Customer Data”), such as customer names, addresses, and contact details contained in quotations, contracts, and project records. For Customer Data, the Business User is the organisation responsible under the PDPA for obtaining consent and determining the purposes of processing. Leaptech processes Customer Data solely on the Business User’s behalf and in accordance with their instructions, our Terms of Use, and this Policy.

If you are a customer of a business that uses EnQuote (for example, a homeowner whose renovation firm manages your project through EnQuote), your renovation firm is responsible for how your personal data is collected and used. Leaptech processes that data only to provide the EnQuote service to your firm. A summary notice for individuals signing documents through EnQuote is available at the point of signing (see Section 4).

3. Personal Data We Collect

We collect the following types of personal data:

• Account Information — name, company name, email address, and phone number provided during account registration or setup
• Usage Data — information about how you interact with EnQuote, including login timestamps, features accessed, pages visited, session duration, and actions performed within the application
• User-Generated Content — data entered into EnQuote in the course of business operations, including quotations, invoices, customer records, and related business documents (this includes Customer Data, processed in our capacity as data intermediary — see Section 2)
• Signer Data — where an individual electronically signs a document through EnQuote’s signing portal, we collect the signer’s name, contact details, signature, and technical data (such as IP address and timestamp) necessary to evidence the signing
• Device and Technical Data — browser type, operating system, IP address, and device identifiers collected automatically when you access EnQuote
• Communication Data — records of your communications with Leaptech including support requests and correspondence, and, where a Business User enables messaging integrations (such as WhatsApp business messaging), messages and files submitted through those channels for capture into the Business User’s projects

4. How We Collect Your Personal Data

We collect personal data through the following means:

• Directly from you when you register for an account, update your profile, or contact us for support
• Automatically when you use EnQuote, through cookies, log files, and usage tracking technologies
• Through the EnQuote electronic signing portal, when an individual is invited by a Business User to review and sign a document
• Through messaging integrations (such as WhatsApp business messaging), where enabled by a Business User, when messages or files are sent to a designated EnQuote number
• From third party service providers such as cloud hosting, analytics, and advertising platforms used to operate and promote EnQuote

Individuals invited to sign documents through EnQuote are shown a short privacy notice at the point of signing, summarising how their Signer Data is used and linking to this Policy.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide, operate, and maintain EnQuote and your account
• To process and manage your Subscription
• To provide technical support during Office Hours
• To send service-related communications including system updates, maintenance notices, and policy changes
• To monitor and improve the performance, security, and functionality of EnQuote
• To detect, investigate, and prevent fraudulent or unauthorised activity
• To comply with applicable legal obligations
• To enforce our Terms of Use and other agreements
• To provide AI-assisted features, as described in Section 6
• To produce anonymised, aggregated benchmarking insights, as described in Section 7

Leaptech will make reasonable efforts to ensure that the personal data we collect and use is accurate and complete, particularly where such data is used to make decisions that affect you or is disclosed to third parties. We rely on you to provide accurate, current, and complete information and to promptly notify us of any changes.

We will not use your personal data for marketing purposes without your separate and explicit consent.

6. AI-Assisted Features

Certain EnQuote features use artificial intelligence to assist with tasks such as extracting information from documents and floor plans, drafting quotations, and configuring workflows. Where you use these features:

• Relevant data (such as an uploaded floor plan, document content, or your instruction) may be processed by third party AI service providers acting as our data intermediaries, under written agreements restricting their use of the data to providing the service to us
• Such processing may take place on servers located outside Singapore, subject to the safeguards described in Section 9
• We do not permit our AI service providers to use your data, or your Customer Data, to train their general-purpose models
• AI-generated output (such as a draft quotation) is a suggestion for your review; you remain responsible for verifying it before use

A current list of the categories of AI service providers we use is available on request from our Data Protection Officer.

7. Aggregated and Anonymised Benchmarking Data

As described in Section 16 of the Terms of Use, we process operational data (such as quotation amounts, pricing, cost figures, and project categories) across multiple accounts to produce anonymised, aggregated benchmarking and market insights.

Before any such use:

• All personal data and customer-identifying information is removed or irreversibly anonymised in accordance with the Personal Data Protection Commission’s guidance on anonymisation
• Insights are only produced at aggregation levels that prevent the identification of any individual, company, or project — we apply minimum aggregation thresholds so that no output reflects the data of fewer than a minimum number of distinct businesses
• No Business User’s identifiable data, pricing, or commercial terms are disclosed to any other party in identifiable form

Data that has been anonymised and aggregated in this way is no longer personal data under the PDPA.

8. Disclosure of Personal Data

We may disclose your personal data to the following categories of third parties strictly for the purposes outlined in this Policy:

• Cloud Hosting Providers — for the storage and operation of EnQuote
• Analytics Service Providers — for monitoring application performance and usage patterns to improve EnQuote
• Advertising Platforms — in connection with our own marketing of EnQuote (for example, measuring the effectiveness of our advertising on our public website), as described in Section 13
• AI Service Providers — for the AI-assisted features described in Section 6
• Communications Providers — for delivering email, messaging, and, where enabled, WhatsApp business messaging integrations
• Legal and Regulatory Authorities — where required by law, court order, or regulatory obligation
• Professional Advisors — including lawyers, auditors, and insurers where necessary for the operation of our business

All third party service providers engaged by Leaptech who process personal data on our behalf act as data intermediaries under the PDPA. They are bound by written agreements requiring them to process personal data only in accordance with our instructions, to implement appropriate security measures, to notify us without undue delay of any data breach, and to delete or return personal data upon termination of the engagement.

We do not sell, rent, or trade your personal data to any third party.

A current list of our material sub-processors is available on request from our Data Protection Officer.

9. Data Storage, Security, and Cross-Border Transfers

Personal data collected through EnQuote is primarily stored on servers located in Singapore.

Certain service providers we use — including analytics, advertising, AI, and communications providers — may process personal data on servers located outside Singapore. Where personal data is transferred outside Singapore, Leaptech ensures that the receiving organisation is bound to provide a standard of protection comparable to that under the PDPA, through contractual arrangements or other legally recognised transfer mechanisms.

Leaptech implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to encrypted data transmission, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your EnQuote account credentials. Please notify us immediately at support@leaptech.sg if you suspect any unauthorised access to your account.

10. Data Breach Notification

A data breach is notifiable under the PDPA where: (a) it results in, or is likely to result in, significant harm to any affected individual (including any breach involving prescribed personal data such as national identification numbers, financial account information, or authentication credentials); or (b) it affects, or is likely to affect, 500 or more individuals.

In the event of a notifiable data breach, Leaptech will:

• Assess any suspected data breach promptly to determine whether it is notifiable
• Notify the Personal Data Protection Commission (PDPC) within three (3) calendar days of completing its assessment that the breach is notifiable
• Notify affected Users as soon as reasonably practicable where the breach is likely to result in significant harm
• Take immediate steps to contain the breach and mitigate any potential harm

Where a breach affects Customer Data processed on behalf of a Business User, we will notify the affected Business User without undue delay so that they can meet their own obligations under the PDPA.

Breach notifications to Users will be sent to the email address registered to your EnQuote account.

11. Retention of Personal Data

We retain your personal data for as long as your account remains active or as necessary to fulfil the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Upon termination or cancellation of your Subscription, Leaptech will retain your data for a period of 30 days during which your account may be reactivated. Following the 30-day period, your data will be archived or deleted unless a longer retention period is required by law.

Where we are required by law to retain certain personal data beyond the 30-day grace period (such as financial records, tax documentation, or data relevant to ongoing or anticipated legal proceedings), we will retain only the minimum data necessary and for no longer than required by the applicable legal obligation.

Data that has been irreversibly anonymised and aggregated in accordance with Section 7 is no longer personal data and may be retained and used after the deletion of the underlying personal data, including after account termination.

If you wish to request permanent deletion of your data prior to or following this period, please contact us at support@leaptech.sg.

12. Your Rights Under the PDPA

Under the PDPA, you have the right to:

• Access — request access to the personal data we hold about you
• Correction — request correction of any inaccurate or incomplete personal data
• Withdrawal of Consent — withdraw consent to the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions
• Data Portability — request a copy of your personal data in a commonly used machine-readable format where applicable

To exercise any of these rights, please submit a written request to our Data Protection Officer (see Section 19). We will respond to your request as soon as reasonably possible and in any event within thirty (30) days of receiving your request. If we are unable to respond within thirty (30) days, we will inform you in writing of the time by which we will be able to respond.

If you are a customer of a Business User and wish to exercise these rights in respect of Customer Data held in that business’s EnQuote account, please direct your request to that business in the first instance, as they are the organisation responsible for that data. We will support our Business Users in responding to such requests.

We may charge a reasonable fee to cover the cost of responding to an access request. If a fee is applicable, we will inform you of the estimated fee before processing your request and may require payment before providing the information.

Before processing your withdrawal of consent, we will inform you of the likely consequences of such withdrawal. These may include the inability to continue providing some or all of EnQuote’s services to you, termination of your account, and the loss of access to data stored within EnQuote. Withdrawal of consent does not affect the legality of any data processing carried out before the withdrawal.

13. Cookies and Tracking

EnQuote and the EnQuote public website use cookies and similar tracking technologies to improve user experience, maintain session security, collect usage analytics, and measure the effectiveness of our marketing. The types of cookies we use include:

• Essential Cookies — required for EnQuote to function properly, including session management and security
• Analytics Cookies — used to understand how users interact with EnQuote and our website to improve performance and usability
• Advertising Cookies — used on our public website to measure the effectiveness of our advertising campaigns and to show relevant EnQuote advertisements to website visitors on third party platforms. These cookies may be set by third party advertising platforms and may involve the transfer of technical data (such as device identifiers and page-visit events) to those platforms

Advertising cookies are used only on our public marketing website and are not used to track your activity inside the EnQuote application.

You may configure your browser to refuse cookies; however, doing so may affect the functionality of EnQuote. By continuing to use EnQuote and our website, you consent to our use of cookies in accordance with this Policy.

We do not currently respond to Do Not Track (DNT) signals as there is no industry-wide standard for DNT compliance. We will update this Policy if our practice changes.

14. Children’s Privacy

EnQuote is not directed at individuals under the age of 15. We do not knowingly collect personal data from anyone under 15 years of age. If you become aware that a person under 15 has provided us with personal data without appropriate consent, please contact us at support@leaptech.sg and we will take steps to delete such data.

15. Marketing Communications

We will only send you marketing or promotional communications if you have explicitly opted in to receive them. You may opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you
• Contacting us directly at support@leaptech.sg

Please note that opting out of marketing communications does not affect service-related communications which are necessary for the operation of your account.

16. Third Party Links and Integrations

EnQuote may integrate with or link to third party services or platforms. Where a Business User chooses to enable an integration (such as WhatsApp business messaging), data shared through that integration is also governed by the third party’s own terms and privacy policy. Leaptech is not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third party services you access through EnQuote.

17. Changes to This Privacy Policy

Leaptech reserves the right to update this Privacy Policy at any time. When we do, we will update the “Last Updated” date at the top of this page and notify users via the EnQuote login page.

Your continued use of EnQuote following notification of any update constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you should discontinue use of EnQuote and contact us at support@leaptech.sg.

18. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Singapore. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

19. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer at dpo@leaptech.sg (or support@leaptech.sg), or write to Leaptechnology Pte Ltd, Attention: Data Protection Officer.

If you are not satisfied with our response to your request or have concerns about how we handle your personal data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at https://www.pdpc.gov.sg.