VERSION 2026-07-14.2
Privacy Notice
This notice explains what personal data FCN Risk Lab collects, why it is used and the choices available to you.
Data we collect
- Account data: name, verified email, policy acceptance and account timestamps.
- Information you provide: client profiles, FCN terms, portfolio context and uploaded term sheets.
- Service records: assessments, reports, monitoring settings, alerts and model/data timestamps.
- Security records: sessions, access events and audit records needed to protect and operate the service.
How we use it
We use this data to authenticate you, provide FCN product-risk analytics, save and monitor FCNs, generate requested reports, maintain an audit trail, secure the service, respond to support requests and meet applicable legal obligations. We do not sell personal data or use uploaded documents for advertising.
Service providers and overseas processing
Google Firebase, Cloud Run, Cloud SQL and Cloud Storage support identity, hosting, database and document storage. Primary application resources are configured in Singapore. Public market-data providers receive ticker or company queries, not your identity or uploaded documents. If you request an emailed report, the report and your verified email are sent to the email-delivery provider. Some providers may process data outside Singapore; appropriate contractual or other safeguards should be maintained for those transfers.
Retention
We keep account and FCN records while your account is active and for as long as reasonably needed to provide the service or meet a legal or business requirement. Expired sessions are removed. When information is no longer required, it should be deleted or anonymised. Account deletion removes your account and saved workspace data unless a specific legal preservation requirement applies.
Your choices and rights
From Account & privacy, you can correct your name, request a password change, download your data or delete your account. Client profiles and FCN terms can be corrected in their relevant workflows. You may also contact us to request access or correction, ask a privacy question, make a complaint or withdraw consent. Withdrawal may mean we can no longer provide the service.
Security and incidents
We use verified-email authentication, access controls, encryption in transit, restricted storage, audit records and security monitoring. No system is completely secure. Suspected breaches are assessed and the PDPC and affected individuals will be notified when required by law.
Contact
For access, correction, complaints or other privacy questions: admin@fcnrisklab.com