Privacy Policy

1. About this policy

BidBoard is operated by Shortcut Ventures Pte. Ltd. ("we", "us", "our"), a company incorporated in Singapore. This policy explains the personal data we collect when you use the BidBoard mobile app, website, and related services (together, the "Service"), and how we handle it under the Singapore Personal Data Protection Act 2012 ("PDPA").

By using the Service, you confirm you have read and understood this policy.

2. Data we collect

We collect only what we need to verify who you are, match you with jobs, hold and settle payment, and keep the marketplace safe.

From Singpass / MyInfo (with your authorisation)

• Full name and partially masked NRIC / FIN
• Date of birth and nationality
• Residential address (used to determine service eligibility)
• Driving licence class and validity (PDVL, BDVL, qualified driving licence)
• Mobile number and registered email (where available)

From your profile and vehicle setup

• Vehicle registration number, vehicle type, and seating capacity
• Profile photo (optional)
• Payout bank account details (held by our payments partner — see Section 5)

From your activity on BidBoard

• Jobs you post, bid on, accept, complete, or cancel
• In-app messages between drivers and callers
• Ratings, reviews, and reported incidents
• Wallet balance, transaction history, and withdrawal records

From your device

• Device model, OS version, app version, and language
• IP address, mobile network, and approximate region
• Diagnostic and crash logs
• Precise GPS location while a job is active (see Section 6)

3. How we use your data

• Verify your identity and confirm you hold a valid licence to drive the vehicle class you list.
• Match drivers and callers — filtering job feeds by your licence, vehicle, and location, and showing your name, plate, and rating to the other side of a confirmed booking.
• Process payments — holding fares in escrow before a trip and releasing them to driver wallets on completion.
• Operate and improve the Service — including troubleshooting, fraud prevention, dispute resolution, and product analytics.
• Communicate with you — job updates, payment notifications, support replies, security alerts, and material changes to our terms.
• Comply with legal obligations — including responding to lawful requests from regulators, law enforcement, or the courts.
• Send marketing only where you have opted in. You can opt out at any time without affecting your ability to use the Service.

4. Singpass and MyInfo

We use the Singpass MyInfo service to verify your identity and licence. When you authorise the MyInfo pull, GovTech sends us the fields listed in Section 2 directly — we never see your Singpass password or two-factor codes.

Your NRIC / FIN is displayed in a masked form (e.g. S****123A) on your profile. We do not store, share, or display your full NRIC except where required to comply with the law.

5. Payments and escrow

Fares on BidBoard are held in escrow by our regulated payments partner before each trip begins. We do not store full payment card numbers, CVCs, or bank credentials on our servers — these are tokenised and held by the payments partner under their own security controls and privacy policy.

We see and retain:

• The fare amount, currency, and status of each transaction
• The last four digits and brand of any card used
• The masked bank account or PayNow handle a driver has nominated for withdrawals
• Records of refunds, chargebacks, and disputes

6. Location data

BidBoard collects precise GPS location only while a job is active — that is, between the moment a booking is confirmed and the moment the job is marked complete. This is used to:

• Show the caller where their driver is during pick-up and drop-off
• Surface nearby jobs in your feed if you opt in
• Resolve disputes (e.g. confirm a job was actually performed)

You can revoke location permission in your device settings at any time. If you do, you can still post and bid on jobs, but live-tracking features and distance-based filtering will not work.

7. Who we share data with

We share personal data only with the parties below, and only to the extent necessary:

• The other side of a booking. Once a bid is confirmed, the driver and caller see each other's first name, profile photo, rating, vehicle plate (driver), and live location for the duration of the job.
• Our payments partner (Airwallex or another licensed payment institution) — for escrow, payouts, and KYC checks.
• Identity verification providers — Singpass / MyInfo via GovTech.
• Infrastructure and analytics providers — cloud hosting, error monitoring, and product analytics vendors operating under written data-processing agreements.
• Authorities — where we are required to disclose by law, a court order, or a binding regulatory request, or to investigate fraud or threats to safety.
• A successor entity — in the event of a merger, acquisition, restructuring, or sale of assets, subject to equivalent protections.

We do not sell your personal data. We do not share it with advertisers for behavioural advertising.

8. How long we keep data

• Account profile and verification data — for as long as your account is active, plus up to 24 months after closure to handle disputes and audits.
• Job, message, and rating history — for up to 36 months after the job, to support disputes, safety investigations, and reputation continuity.
• Payment, wallet, and tax records — for at least 5 years, as required by Singapore tax and AML rules.
• Diagnostic logs — typically up to 90 days.

9. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest for sensitive fields, role-based access controls, and logging of administrative access. No system is perfectly secure — if we become aware of a personal-data breach affecting you, we will notify you and the Personal Data Protection Commission as required by the PDPA.

10. Your rights

Under the PDPA you have the right to:

• Ask what personal data we hold about you and how it has been used or disclosed in the past year
• Ask us to correct inaccurate data
• Withdraw your consent for any purpose that is not legally required (note: this may mean we can no longer provide the Service to you)
• Ask us to delete your account, subject to the retention rules in Section 8

Send requests to admin@bidboard.sg. We will respond within 30 days. We may charge a reasonable fee for access requests where allowed by law, and we will tell you in advance.

11. Cookies and similar technologies

Our website uses a small number of cookies and local-storage entries — for keeping you signed in, remembering preferences, and measuring traffic. You can block cookies in your browser, though some parts of the site may not work as a result.

12. Children

BidBoard is not directed at anyone under 18. You must be at least 18 and hold a valid Singapore driving licence to register as a driver. If you believe a minor has provided personal data to us, contact admin@bidboard.sg and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If a change is material, we will notify you through the app or by email before it takes effect. Continued use of the Service after the effective date means you accept the updated policy.

14. Contact us

For privacy questions or to exercise the rights in Section 10, contact our Data Protection Officer:

Shortcut Ventures Pte. Ltd.
Attn: Data Protection Officer
Email: admin@bidboard.sg
Singapore