Privacy policy

Recounta provides business compliance, accounting and management advisory for Singapore founders, from 88 Market St, #21-01, Singapore 048948. For anything in this policy, write to general@recounta.com.

This policy covers this website ( recounta.com ) and the RAAS client workspace at raas.recounta.com. It is written to Singapore's Personal Data Protection Act (PDPA).

The contact form collects your name, email address, subject and message — only when you submit it. We use it to answer you, nothing else.

The compliance check asks about your business (entity type, industry, and your answers to the questions). It is anonymous: no name, email or identifier is attached unless you choose to place an order at the end, at which point we collect your name, email, phone and company name to respond.

The RAAS workspace holds the accounting and compliance records of Recounta's engaged clients, under the engagement terms agreed with each client. Workspace accounts are created by Recounta — there is no public sign-up.

Technical data. To rate-limit the public forms we store a one-way hash derived from request details, deliberately not your IP address — the hash cannot be turned back into who visited. Our hosting provider (Vercel) processes IP addresses transiently for security, bot detection and request routing, as any host does.

No advertising trackers, no selling or sharing of personal data for marketing, no profiling, no cross-site tracking. The only cookies this site sets are essential: keeping a signed-in workspace session alive and remembering your light/dark theme choice.

We count page views with Vercel Web Analytics, which is deliberately cookieless: it sets no cookies, fingerprints no devices, and follows nobody across the web. We see aggregate numbers — which pages are read, roughly where visits come from — never a profile of you. Visits are counted using a daily-rotating anonymous identifier that cannot be linked back to you or reused across days.

We keep the list short, and each processor sees only what its job requires:

• Vercel — hosts this website and screens traffic for automated abuse.
• Supabase — the database and authentication behind the workspace and the compliance check.
• Resend — delivers our email (enquiry confirmations, workspace invitations).

Internal staff alerts (a new enquiry arrived, an order was placed) go to a private Telegram channel and deliberately contain no personal data — a prompt to check the inbox, not the contents of it. If you tap the WhatsApp button or the directions link, you leave this site for WhatsApp or Google Maps under their own terms; nothing is sent to them until you do.

These providers operate infrastructure that may sit outside Singapore. Where personal data is stored or processed overseas, we take steps to ensure it receives protection comparable to the PDPA's standard — through the providers' contractual data-protection commitments and the security measures described here.

Enquiries are kept for as long as needed to handle them and for a reasonable period after, then deleted. Client accounting records are kept for the retention periods Singapore law requires (generally five years). Anonymous compliance-check answers are kept in aggregate to improve the questions.

You may ask what personal data we hold about you, ask us to correct it, or withdraw consent for us to keep it (which may mean we can no longer act for you). Our designated data protection contact is general@recounta.com — write there and we will respond within the timelines the PDPA sets. If you are unsatisfied with our answer, you may complain to Singapore's Personal Data Protection Commission.

If a data breach ever puts you at risk of significant harm, we will notify you and the Commission as the PDPA requires.

If what the site collects changes, this page changes in the same release, with a new date below. That is how the Analytics section above arrived when cookieless page-view counting was added on 10 August 2026.