Privacy Policy
Pegotec Pte. Ltd. ("Pegotec", "we", "us", "our") operates the Smart Maintenance Task Manager website at sm-tm.app and the Smart Maintenance Task Manager mobile application (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data.
By using our Services, you agree to the collection and use of information in accordance with this policy.
1. Who We Are
Smart Maintenance Task Manager is a product operated by Pegotec Pte. Ltd. (UEN: 201716658D), a company incorporated in Singapore.
Data Protection Officer (DPO):
Email: privacy@sm-tm.app
160 Robinson Road, #14-04 SBF Centre, 068914 Singapore
If you have any questions or concerns about how we handle your personal data, contact our DPO at the address above.
2. Our Role: Controller and Processor
Our role under data protection law depends on which data is involved.
Where we are the controller. For our website, demo requests, sales enquiries, newsletter subscriptions and support correspondence, Pegotec decides why and how personal data is processed, and acts as the data controller.
Where we are a processor. For Customer Data submitted by our business customers — including task and maintenance records, work orders, uploaded photos, and employee user accounts — Pegotec acts as a data processor on behalf of the customer. The customer remains responsible for determining the purposes and means of processing personal data, including which of their personnel use the Services, what is recorded, and how long it is kept.
If you are an employee of one of our business customers, your employer's privacy notice governs that data. Requests to access, correct or delete it should be directed to your employer in the first instance, and we will assist our customer in responding.
Diagnostics. For the technical diagnostic data described in Mobile Application Diagnostics, Pegotec determines the purpose and means of processing — we collect it to keep the application reliable, rather than on a customer's instructions. For that limited category of data we act as an independent controller.
3. Personal Data We Collect
3.1 Account and Registration Data
When you book a demo, request a quote, or create an account:
- Full name
- Work email address
- Company name and job title
- Industry and company size
- Country and phone number (optional)
3.2 Usage Data
When you use our website:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and interaction data
When you use our mobile application:
- IP address
- Device model, operating system version, and application version
- Device and installation identifiers (see Mobile Application Diagnostics)
The mobile application does not track which screens you visit or which features you use. The technical data it does send is described in Mobile Application Diagnostics below.
3.3 Technical Synchronisation Data (Mobile App)
When your organisation uses the Smart Maintenance Task Manager application, the mobile app collects:
- Task execution data (completions, timestamps, recorded values)
- Photo and image files captured during task execution
- Device push notification token, together with your device model, operating system version and application version, registered so that we can send you task notifications. Notifications are delivered through Google Firebase Cloud Messaging.
3.4 Mobile Application Diagnostics
To keep the application reliable, released versions of the mobile app send technical diagnostic information to Google Firebase Crashlytics, a service provided by Google:
- Crash reports — when the app crashes or encounters an unexpected error: the error message, a stack trace, and technical device state (such as device model, operating system version, and available memory and storage).
- Diagnostic identifiers — crash reports are tagged with your account identifier, your organisation identifier, your assigned role, and the address of the server your app connects to, so that a fault can be traced to the installation that reported it.
- Session activity — when the app starts and when it moves between the foreground and the background, together with a session identifier, a session counter, and a Firebase installation identifier. This is generated by Google's software development kit as part of crash reporting, and the length of an app session can be derived from it.
This information is technical and is used solely to diagnose faults and improve the reliability of the application. It is not used for advertising and is not combined with data from other companies for tracking purposes. The application does not collect analytics about which screens you visit or which features you use.
Because your account identifier accompanies these reports, this diagnostic information is capable of being linked to you. Error messages and stack traces are technical output and are not intended to contain personal data, but we cannot exclude the possibility that technical detail relating to your use of the application appears in an individual report.
3.5 Communication Data
When you contact us by email or form: message content and attachments, email headers and metadata.
4. How We Use Your Personal Data
| Purpose | Legal Basis (PDPA) |
|---|---|
| To respond to demo requests and inquiries | Consent / Contract |
| To provide and operate the Services | Contract |
| To process account registrations | Contract |
| To send product updates and newsletters (if opted in) | Consent |
| To improve the website and mobile app | Legitimate interest |
| To detect and prevent fraud and security incidents | Legal obligation / Legitimate interest |
| To comply with legal and regulatory obligations | Legal obligation |
| To send transactional and system notifications | Contract |
We do not use your personal data for automated decision-making or profiling in ways that would significantly affect you.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. See our Cookie Policy for the full list.
Necessary Cookies (always active)
Required for the website to function. Cannot be disabled — session cookies, security cookies, cookie consent preference storage.
Analytics Cookies (require consent)
Google Analytics 4 — collects anonymous usage statistics to help us understand how visitors use our website. Data retention: 14 months.
Marketing Cookies (require consent)
We do not currently use marketing cookies. This will be updated if advertising tools are added.
You can manage your cookie preferences at any time using our cookie consent tool. Click Cookie Settings in the footer.
6. Disclosure of Personal Data
We do not sell your personal data to third parties.
We may share your personal data with:
6.1 Service Providers
Third-party vendors who process data on our behalf under data processing agreements:
- Cloud hosting provider (for application hosting)
- Google Analytics (website usage analytics)
- Google Firebase (crash reporting and diagnostics, and push notification delivery, for the mobile application)
- CookieHub (cookie consent management)
- Postmark / email delivery provider (transactional emails)
- Beehiiv (newsletter platform — only for opted-in subscribers)
6.2 Legal Requirements
We may disclose personal data when required by Singapore law, court orders, or requests from government authorities.
6.3 Business Transfers
If Pegotec is acquired or merged, personal data may transfer as part of that transaction. You will be notified via email or website notice.
7. Transfers Outside Singapore
Our Services involve storing and processing data outside Singapore. Our principal recipients are:
- Google Firebase — crash diagnostics and push notification delivery for the mobile application. Firebase Crashlytics and Firebase Cloud Messaging operate as global services and may process data at any Google data-centre location.
- Postmark — delivery of transactional email.
- Our cloud hosting provider — application hosting.
When we transfer personal data outside Singapore, we take steps to ensure equivalent protection, including entering into data transfer agreements with the recipient.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Website inquiry data | 2 years from last contact |
| Customer account data | Duration of contract + 3 years |
| Task and maintenance records | Duration of contract + 5 years (or as required by law) |
| Analytics data (website) | 14 months (GA4 default) |
| Crash diagnostics (Firebase Crashlytics) | 90 days |
| Backup copies | 90 days after deletion |
9. Security
We implement appropriate technical and organisational measures to protect your personal data:
- HTTPS/TLS encryption for all data in transit
- Passwords and access tokens stored hashed, never in recoverable form
- Access controls and authentication for all systems
- Regular security testing
- Employee data protection training
Data Breach Notification: Where required by applicable data protection law, we will notify competent supervisory authorities and affected individuals within the timeframes prescribed by the applicable law.
10. Your Rights Under the PDPA
10.1 Right to Access
You may request a copy of the personal data we hold about you and information about how it is used.
10.2 Right to Correction
You may request that we correct any inaccurate or incomplete personal data.
10.3 Right to Withdrawal of Consent
Where we process data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
10.4 Right to Data Portability
Where provided by applicable data protection law, you may request your personal data in a structured, commonly used, machine-readable format. The scope of this right differs between jurisdictions.
10.5 Right to Erasure
Where provided by applicable data protection law, you may request deletion of your personal data, subject to legal retention requirements and to any instructions of the business customer that controls the data. The scope of this right differs between jurisdictions.
To exercise any of these rights: Email privacy@sm-tm.app with your name, email address, and a description of your request. We will respond within 30 calendar days.
11. Marketing Communications
We will only send you marketing emails if you have opted in. You may opt out at any time by clicking "Unsubscribe" in any marketing email or emailing privacy@sm-tm.app.
We comply with Singapore's Do Not Call (DNC) Registry and will not contact you by phone or SMS for marketing purposes without your express consent.
12. Children's Privacy
Our Services are not directed to children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read their privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify registered users by email.
15. Contact Us
Data Protection Officer
Pegotec Pte. Ltd. (UEN: 201716658D)
160 Robinson Road, #14-04 SBF Centre, 068914 Singapore
Email: privacy@sm-tm.app
Personal Data Protection Commission (PDPC) Singapore
If you are unsatisfied with our response, you may lodge a complaint at www.pdpc.gov.sg