Privacy Notice- KORE WEB PORTAL

Effective Date: 01 October 2025

Last Updated: 30 July 2026

Force7 Labs Pte. Ltd. ("Force7", "Company", "we", "us", or "our") owns and operates the Kore Web Portal ("Portal"), an enterprise Software-as-a-Service (SaaS) platform that enables authorised management personnel to monitor, analyse, manage, and improve business operations.

The Portal provides authorised users with access to Force7 products assigned to them, User analytics, product(s) analytics, Company management, User management, Product management, pricing and discount management, and other enterprise management capabilities.

We respect your privacy and are committed to protecting the Personal Data entrusted to us. This Privacy Notice explains how we collect, use, disclose, store, transfer, and protect Personal Data processed through the Portal.

Please read this Privacy Notice carefully before accessing or using the Portal.

BY ACCESSING OR USING THE PORTAL, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY NOTICE.

If you do not agree with this Privacy Notice, you must not use the Portal.

You may withdraw consent (where consent is the legal basis for processing) by contacting us at admin@force7.ai.

This Privacy Notice is intended to comply with the Personal Data Protection Act 2012 (Singapore) ("PDPA") and other applicable data protection laws where relevant.

1. DEFINITIONS

Personal Data means any data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which Force7 has or is likely to have access.

Management User means any authorised individual accessing the Portal on behalf of a customer organisation, including Directors, Executives, Managers, Supervisors, Administrators, or other authorised personnel.

Business Data means operational, commercial, employee, sales, inventory, customer, financial, and business information processed through the Portal.

Customer Organisation means the company that has subscribed to the Portal.

2. WHAT PERSONAL DATA DO WE COLLECT?

We may collect Personal Data relating to Management Users as well as Business Data provided by or on behalf of the Customer Organisation.

A. Personal Data About Management Users

When you access the Portal, we may collect:

  • Name

  • Business email address

  • Business telephone number

  • Job title

  • Department

  • Organisation

  • Employee or user identification number

  • Assigned role and permissions

  • Authentication credentials

  • Profile photograph (if provided)

B. Portal Usage Information

We automatically collect information including:

  • Login history

  • Session duration

  • IP address

  • Browser type

  • Operating system

  • Device identifiers

  • Access timestamps

  • Reports viewed

  • Dashboards accessed

  • Workflow approvals

  • Configuration changes

  • Report exports

  • Administrative activities

C. Business Information

The Portal may process information including:

  • Company information including Regions, Areas and Branches

  • Product information including variants

  • Pricing information including discounts

  • Customer interaction history

  • Business KPIs

  • Operational metrics

  • AI-generated insights

  • Forecasts

  • Reports

  • Workflow approvals

Where such information identifies an individual, it may constitute Personal Data.

D. Communications

We may collect information contained in:

  • Support requests

  • Emails

  • Customer feedback

  • Service tickets

  • Training sessions

3. ACCURACY OF INFORMATION

The Customer Organisation and its authorised users are responsible for ensuring that Personal Data entered into the Portal is accurate, complete, and up to date.

Where you provide Personal Data relating to another individual, you represent that your organisation has obtained all necessary legal authority, notices, or consents required under applicable law.

Force7 is not responsible for independently verifying the accuracy or lawfulness of information provided by Customer Organisations.

4. HOW WE USE PERSONAL DATA

We use Personal Data for purposes including:

Providing the Portal

  • Authenticating users

  • Managing accounts

  • Providing dashboards

  • Delivering reports

  • Operating workflow approvals

  • Providing AI-powered analytics

  • Supporting business intelligence

Platform Administration

  • User administration

  • Role-based access management

  • Technical support

  • Service maintenance

  • Product improvements

  • Performance optimisation

Security

  • Identity verification

  • Fraud prevention

  • Security monitoring

  • Incident response

  • Audit logging

  • Risk detection

Communications

  • Product notifications

  • Service announcements

  • Security alerts

  • Maintenance notifications

  • Customer support

  • User training

Business Analytics

We may analyse usage patterns to:

  • Improve functionality

  • Enhance usability

  • Develop new features

  • Improve AI models

  • Monitor system performance

Where reasonably possible, analytics are performed using aggregated or anonymised information.

Legal and Regulatory Compliance

We may process Personal Data where necessary to:

  • Comply with applicable laws

  • Respond to lawful requests

  • Protect legal rights

  • Resolve disputes

  • Enforce contractual obligations

5. LEGAL BASIS FOR PROCESSING

Where applicable, we process Personal Data based on:

  • Consent

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate business interests

  • Customer instructions as a data processor

6. ROLE OF FORCE7

In most cases:

  • The Customer Organisation acts as the Data Controller (or equivalent).

  • Force7 acts as a Data Processor (or service provider) processing Personal Data on behalf of the Customer Organisation.

The Customer Organisation determines:

  • what information is collected;

  • why it is collected;

  • how long it is retained;

  • who has access to it.

Force7 processes Personal Data only in accordance with customer instructions, contractual obligations, and applicable law.

7. ROLE-BASED ACCESS CONTROL

Access to Personal Data is restricted through Role-Based Access Control (RBAC).

Users can only access information authorised by the Customer Organisation based upon their assigned role.

Customer administrators are responsible for assigning and managing user permissions.

8. AI-ASSISTED FEATURES

The Portal may generate:

  • forecasts;

  • predictive analytics;

  • performance indicators;

  • recommendations;

  • operational insights;

  • business summaries.

These outputs are generated using customer data and statistical models.

Force7 does not use AI to make decisions that produce legal or similarly significant effects on individuals without appropriate human oversight.

AI-generated insights are intended solely to assist decision-making and should not be relied upon as the sole basis for management decisions.

9. WHO DO WE SHARE PERSONAL DATA WITH?

We may disclose Personal Data to:

Service Providers

Including providers of:

  • Cloud infrastructure

  • Data hosting

  • Identity management

  • Analytics

  • Customer support

  • AI infrastructure

  • Security monitoring

  • Communication services

All providers are contractually required to protect Personal Data.

Customer Organisation

Personal Data may be available to authorised administrators within the Customer Organisation.

Legal Authorities

Where required by law, regulation, court order, or governmental authority.

Corporate Transactions

Where Force7 undergoes a merger, acquisition, restructuring, financing, or sale of assets.

10. CROSS-BORDER DATA TRANSFERS

Personal Data may be processed or transferred outside your country of residence.

Where Personal Data is transferred outside Singapore, Force7 implements reasonable safeguards to ensure protection comparable to that required under the PDPA.

11. INFORMATION SECURITY

Force7 implements commercially reasonable administrative, technical, and organisational safeguards designed to protect Personal Data, including:

  • Encryption in transit

  • Encryption at rest where appropriate

  • Access controls

  • Audit logging

  • Network security controls

  • Vulnerability management

  • Security monitoring

  • Backup and disaster recovery procedures

No internet-based system can guarantee absolute security.

Users are responsible for protecting their own login credentials and authorised access.

12. AUDIT LOGGING

To protect the integrity and security of the Portal, Force7 maintains audit logs that may include:

  • User authentication

  • Login history

  • Dashboard access

  • Report access

  • Workflow approvals

  • Administrative actions

  • Configuration changes

  • Security events

  • Data exports

Audit logs are retained for security, compliance, troubleshooting, and legal purposes.

13. RETENTION OF PERSONAL DATA

We retain Personal Data only for as long as necessary to:

  • provide the Services;

  • comply with legal obligations;

  • resolve disputes;

  • enforce contractual rights.

Generally:

  • User account information is retained while accounts remain active and thereafter in accordance with contractual or legal requirements.

  • Audit logs may be retained for security and compliance purposes.

  • Business Data is retained in accordance with the Customer Organisation's contractual instructions or applicable law.

Upon termination, Personal Data may be deleted, anonymised, or archived where legally permitted.

14. CHILDREN'S PRIVACY

The Portal is designed exclusively for business users.

It is not intended for individuals under the age of 18, and Force7 does not knowingly collect Personal Data from children.

15. LINKS TO THIRD-PARTY SERVICES

The Portal may contain links or integrations with third-party systems.

Force7 is not responsible for the privacy practices of those third parties.

Users should review the applicable privacy notices of such third parties.

16. YOUR PRIVACY RIGHTS

Subject to applicable law, you may have the right to:

  • request access to your Personal Data;

  • request correction of inaccurate Personal Data;

  • withdraw consent where consent applies;

  • request deletion where legally permitted;

  • request information regarding disclosures;

  • lodge a complaint regarding our handling of Personal Data.

Where Force7 acts as a Data Processor, requests relating to Business Data should generally be directed to the Customer Organisation.

17. GOVERNING LAW

This Privacy Notice shall be governed by the laws of Singapore.

18. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time.

Material changes will be communicated through the Portal or by email where appropriate.

Continued use of the Portal after such changes become effective constitutes acceptance of the updated Privacy Notice.

19. CONTACT US

If you have questions, requests, or complaints regarding this Privacy Notice or our handling of Personal Data, please contact:

Force7 Labs Pte. Ltd.

20A Tanjong Pagar Road

Singapore 088443

Email: admin@force7.ai