Privacy Policy

Effective date: 4 August 2026

1. Introduction

Tech Chain Global Pte Ltd ("TCG", "we", "us") operates the TCG Express delivery platform ("Platform"), including the mobile application and web portal at app.techchainglobal.com. We are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore.

This Privacy Policy explains what data we collect, why we collect it, who we share it with, and how you can exercise your rights — including how to delete your account.

2. Data We Collect

Category	Data collected
Account & identity	Full name (contact name), email address, phone number, company name, UEN (business accounts), password (hashed)
Delivery addresses	Pickup address, delivery address, and any special instructions provided per job
Location data	Real-time GPS location of Drivers during active deliveries (latitude, longitude, heading, speed). Collected only when the Driver has an active job and has granted device permission.
Photos	Pickup proof photos, delivery proof photos, customer signatures, and images shared in chat messages
Push notification token	Expo push token for delivering notifications about jobs, chat messages, and payment updates to your device
Payment & transaction records	Wallet balance, top-up history, job payment records, driver payouts, Stripe payment intents and customer IDs
Driver documents	Driving licence, vehicle type and plate number, bank/PayNow details for payouts, KYC verification documents
Device & usage data	Device type, operating system, IP address, and interaction patterns for security and improvement
Communications	In-app chat messages between Clients and Drivers, inquiry messages, and support correspondence

3. How We Use Your Data

Delivery service — Job matching, bidding, driver assignment, live tracking, proof of delivery, and invoicing.
Payments — Processing wallet top-ups, escrow holds, driver payouts, and refunds via Stripe.
Notifications — Sending push notifications for new jobs, bids, chat messages, payment confirmations, and delivery status updates.
Customer support — Resolving disputes, answering enquiries, and processing complaints.
Safety & security — Fraud detection, identity verification, and platform integrity.
Improvement — Analysing usage patterns to improve Platform features and performance.
Legal compliance — Meeting regulatory requirements and responding to lawful requests.

4. Third-Party Service Providers

We share data with the following third-party services, solely for the purposes described:

Provider	Purpose	Data shared
Stripe	Payment processing	Name, email, payment details, transaction amounts
Supabase	Database & file storage	All account and transaction data, uploaded photos
Expo (EAS)	Push notifications	Push tokens, notification content
Vercel	Web hosting & API	API requests, server logs
Google Maps	Address autocomplete & geocoding	Address strings, coordinates
Sentry	Error monitoring	Error logs, device info (no PII)

We do not sell your personal data to third parties for marketing or advertising purposes.

5. Data Retention

Account data — Retained while your account is active, plus 30 days after deletion request to allow recovery.
Transaction records — Retained for 5 years as required by Singapore tax and audit regulations.
Location data — Retained for 90 days after delivery completion, then deleted.
Chat messages & photos — Retained for 1 year after the related job is completed.
Push tokens — Deleted immediately when you log out or delete your account.

6. Account Deletion

You can request full deletion of your account and associated personal data at any time.

To delete your account, email us at support@techchainglobal.com with the subject line "Account Deletion Request" and the email address associated with your account.

Upon receiving your request, we will: (1) verify your identity, (2) cancel any active jobs, (3) process any pending wallet balance refund, and (4) permanently delete your account and personal data within 30 days. Transaction records required by law will be retained in anonymised form.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including: encrypted data transmission (TLS/SSL), secure database access controls (Row Level Security), hashed password storage, JWT-based authentication with expiry, and regular security reviews.

8. Your Rights Under PDPA

Under the PDPA, you have the right to:

Access — Request a copy of the personal data we hold about you.
Correction — Request correction of inaccurate or incomplete personal data.
Withdrawal of consent — Withdraw consent for collection, use, or disclosure of your data, subject to legal and contractual restrictions.
Deletion — Request deletion of your account and personal data (see Section 6 above).

To exercise these rights, contact our Data Protection Officer at the details below. We will respond within 30 business days.

9. Cookies

The web platform uses essential cookies for authentication and session management only. No third-party advertising or tracking cookies are used.

10. International Transfers

Your data may be processed on servers located outside Singapore through our cloud service providers. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with the PDPA.

11. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification. The "Effective date" at the top indicates the latest revision.

13. Contact & Data Protection Officer

For questions, data access requests, deletion requests, or complaints:

Data Protection Officer
Tech Chain Global Pte Ltd
Email: support@techchainglobal.com
Website: www.techchainglobal.com

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.