Privacy policy

Last updated: 2026-05-21. Effective from public launch.

WaterDoctor Pte Ltd ("WaterDoctor", "we") operates AquaMind V2 ("the service"). This privacy notice explains what data we collect, how we use it, and what choices you have. It is written to be plain enough to act on; the binding terms are in the Terms of Service.

What we collect

Account data. When you create an AquaMind V2 account we collect your email address, a hashed password, your organization name, your preferred UI language, and your timezone.

Case data. When you submit a case we collect the data you supply: the structured intake form, any free-text notes, and the attachments you upload (photos, water-quality logs, PDF reports).

Billing data / payment records. When paid plans are enabled, we collect and retain billing records — your plan tier, subscription status, invoice amounts and dates, and the billing identifiers issued by our payment processor. Card numbers are handled entirely by Stripe on Stripe-hosted pages; we never receive, store, or log your full card number, CVC, or PAN.

Usage telemetry. Standard server-side request logs (IP, user agent, timestamps), and product-event logs of which features you used. We do not deploy third-party analytics or advertising trackers.

How we use it

• To run the service. Authenticate you, route notifications, render your case page, and run the multi-agent pipeline against your case.
• To improve the service. Anonymized, aggregated patterns (e.g., "what fraction of cases hit insufficient evidence") inform our evaluation and routing work. Raw content is never used for this and is never shared outside WaterDoctor.
• To bill you, eventually. When paid plans launch (Phase 2), we will use account data for billing and pricing communications.

Third parties we send data to

• Foundation-model providers (Anthropic). Case prompts and contextual passages are sent to the model provider to produce specialist outputs. We use providers in a no-training mode where supported, so your data is not retained for training.
• Crossref and DataCite. We resolve DOIs against these registries to verify citations. Only the DOI strings are sent — never your case content.
• Transactional email vendor. Account verification, password reset, and notification emails are delivered via a transactional-email vendor. Only your email address and the message body are shared.
• Payment processor (Stripe). When paid plans are enabled, subscription billing and payments are processed by Stripe, Inc. Your card details are entered on Stripe-hosted pages and are never sent to our servers. We share your billing identifiers, plan, and invoice records with Stripe to operate your subscription. See Stripe's privacy policy.
• Cloud storage and infrastructure. Attachments are stored encrypted at rest on infrastructure operated by WaterDoctor and its named cloud providers. Storage region: Singapore unless otherwise agreed.

We do not sell your data. We do not share it with advertisers, data brokers, or any party not listed above.

Showcase opt-in

A case is published to the public showcase only if you explicitly mark it eligible. Before publication, a WaterDoctor admin reviews and removes operator-identifying details (farm name, GPS, identifiable staff, distinctive equipment in photos). You can withdraw a published case from the showcase at any time from the case page.

Retention

Active accounts. Case data is retained for the life of the account.

Account deletion. When you delete your account, account and case data are soft-deleted for 30 days (recoverable if you change your mind), then permanently removed. Backups roll over within 90 days, after which no copy remains.

Anonymized derivatives. Aggregated, non-identifying statistics may be retained indefinitely for product improvement.

Your rights

Under Singapore's Personal Data Protection Act (PDPA), and equivalent provisions where applicable, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Withdrawal of consent / deletion — close your account and have your data deleted as described above.
• Portability — request your case data in a machine-readable format.

To exercise any of these, write to [email protected]. We aim to respond within 30 days.

Security

Data is transmitted over TLS, stored encrypted at rest, and access is restricted to the agents and named human reviewers assigned to a case. We do not have a paid bug bounty during beta, but we will credit responsibly disclosed reports — write to [email protected].

Contact

Data Protection Officer: [email protected]. General privacy questions during beta: [email protected].