Legal

Privacy Policy

Version 1.0 · Last updated 8 June 2026

1. Who we are

This Privacy Policy describes how TWO TWO PTE LTD (“TWO TWO”, “we”, “our”) collects, uses and protects personal data through this website (https://www.twotwotech.ai) and the services associated with it. We are committed to handling your data lawfully under Singapore's Personal Data Protection Act 2012 (PDPA).

Registered office: 6 Raffles Quay, #14-06, Singapore 048580. Contact for privacy-related questions: enquiries@twotwotech.ai.

2. What we collect

We collect the minimum data necessary to respond to you:

Contact form / demo qualifier: your name, work email, company, role, phone (optional), and the message or context you share with us.
Booking: when you book a demo through Cal.com, the time slot and any meeting metadata they share with us.
Server logs: your IP address, user-agent and referer, retained for 30 days to investigate abuse.
Marketing attribution: UTM parameters from links that brought you here, kept alongside the form submission.

We do not use third-party analytics or advertising trackers on this site.

3. Why we collect it

To reply to your enquiry or schedule the demo you requested.
To improve the relevance of follow-ups and route your enquiry to the right person internally.
To comply with our legal and regulatory obligations.
To detect, prevent and investigate abuse (spam, fraud, security incidents).

Our lawful basis under PDPA is your consent (you've chosen to send us the form) plus our legitimate business interests in B2B communication.

4. Who we share it with (sub-processors)

We use a small number of carefully chosen sub-processors:

Microsoft Azure (Singapore region) — hosts the website, stores form submissions in Cosmos DB, runs the API.
SendGrid (Twilio) — delivers transactional notification and confirmation emails.
Cal.com — runs the demo slot picker; receives your name, email and chosen time.

We do not sell, rent or trade your data to anyone. We do not transfer your data outside Singapore except as needed to deliver email (SendGrid operates globally) and where you book a Cal.com slot.

5. How long we keep it

Contact messages and demo bookings: 24 months, after which they are anonymised or deleted.
Server logs: 30 days.
Marketing-list emails (if you opt in to one): until you unsubscribe.

6. Your rights

Under PDPA you can ask us to:

Access the personal data we hold about you.
Correct any data that's wrong.
Withdraw your consent (we'll stop processing within a reasonable period).
Delete your data, subject to legal record-keeping obligations.

Send any of these requests to enquiries@twotwotech.ai with the subject line “PDPA request”. We will respond within 30 days.

7. Security

Data in transit is encrypted via HTTPS (TLS 1.2+). Data at rest in Cosmos DB is encrypted by Microsoft Azure. Access to the admin console is gated by Microsoft Entra ID with role-based authorisation.

8. Children

This website and its services are intended for business users aged 18 and above. We do not knowingly collect data from minors.

9. Updates

We may update this policy from time to time. Material changes will be flagged at the top of this page; the version and date in the header will change with every revision.

10. Contact

For any question about this policy or our data practices, contact enquiries@twotwotech.ai or write to us at 6 Raffles Quay, #14-06, Singapore 048580.