Privacy Policy
Last updated: 20 July 2026
Who we are
BLUE FLAME AI AUTOMATIONS (UEN 53521440E) is a sole proprietorship registered in Singapore. On this website we call ourselves Blue Flame.
This notice explains what personal data we collect, why we collect it, who else handles it, and what you can ask us to do about it.
For any question about your data, or to make an access, correction, or withdrawal request, contact us at thien@blueflameautomations.com.
What we collect
When you use our contact form, we collect your name, your email address, and the message you write.
When you message our demo line on WhatsApp or Instagram, we collect your phone number or your handle, and the content of the messages you send us. You are messaging an AI. If you ask whether it is an AI, it will tell you.
When you visit this website, we collect technical data such as page views, browser type, approximate country, and the site you came from. We use Vercel Analytics, which is cookieless and aggregated, and does not follow you across other websites. We do not use advertising cookies or tracking pixels.
We do not collect anything else on this site. We do not buy lists.
Why we collect it
- To reply to your enquiry.
- To show you how our AI works, if you message the demo line.
- To understand which parts of this site are useful.
- To meet our legal, tax, and accounting obligations.
Where your data is stored
Your enquiries and demo-line conversations are stored in a database hosted on Amazon Web Services in Singapore (region ap-southeast-1). That database is our system of record. It is where your data lives.
The server function that receives your contact form submission also runs in Singapore.
The workflow that routes your enquiry to us, and that runs the AI on our demo line, sits on our own server in Kuala Lumpur, Malaysia. Your message passes through that server, and is logged there temporarily as part of running the system. Those logs are deleted automatically after 96 hours.
Who else handles it
We use the service providers below. Some operate outside Singapore, which means your data may be transferred overseas. Where that happens, we take steps to ensure your data receives protection comparable to that required by the PDPA.
| Provider | What they handle | Where |
|---|---|---|
| Vercel | Website hosting and cookieless analytics: technical and log data | Server functions run in Singapore. Vercel is a United States company, so analytics and log data may be processed overseas. |
| Supabase, on Amazon Web Services | Storing your enquiry: name, contact, message | Singapore |
| Our own server infrastructure | Processing the workflow that routes your enquiry to us, and running the AI on our demo line. Your message transits this server and is logged there for up to 96 hours, then deleted automatically. | Malaysia (Kuala Lumpur) |
| Telegram | Sending us an internal alert so we see your enquiry quickly | Overseas |
| Meta (WhatsApp, Instagram) | Delivering messages to and from our demo line | Overseas |
| Anthropic | Generating the AI's replies on the demo line | Overseas |
AI and training
We never use your data to train AI models. Our AI provider is contractually barred from training on it.
How long we keep it
- Enquiries and demo-line conversations: 12 months from your last interaction with us, then deleted.
- Temporary operational logs on our processing server in Malaysia: deleted automatically after 96 hours.
- If you become a client: for as long as we work together, plus 12 months after the engagement ends.
- Invoices and accounting records: for as long as Singapore law requires us to keep them.
Your rights
Under the Personal Data Protection Act you can:
- Ask what personal data we hold about you, and how we have used it in the past year.
- Ask us to correct anything that is wrong.
- Withdraw your consent at any time.
Email thien@blueflameautomations.com. We will respond within 30 days. If we cannot, we will tell you when we can.
Withdrawing consent means we stop contacting you. If you are a client, it may mean we cannot continue providing the service.
Security
We limit access to your data to what we need to do the job. Our databases require authentication and use encrypted connections.
No system is perfectly secure. If a breach occurs that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the law requires.
Changes to this notice
If we change this notice, we will update the date at the top of this page. If a change is material, we will say so here.
Contact
BLUE FLAME AI AUTOMATIONS UEN 53521440E thien@blueflameautomations.com