Privacy Policy

Applicable entity: Song Dynasty Pte. Ltd. (referred to as "we," "us," or "the Company"), incorporated in Singapore.
Applicable scope: This Policy applies to the processing of personal data of visitors to the dynastysong.com portal website (the "Website"), including business inquiry emails sent through the contact details on the Website and emails relating to personal data requests (such as requests to access, correct, or withdraw consent). This Policy does not apply to data processing within the consoles of the Company's three SaaS products — once the consoles launch, separate privacy terms will be established within the scope of the applicable terms of service for those products.

1. Who We Are

Company name: Song Dynasty Pte. Ltd., incorporated in Singapore.
Registration Number (UEN): 202004248C.
Registered address: 2 VENTURE DRIVE, VISION EXCHANGE #12-26, SINGAPORE 608526.
Data Protection Officer (DPO) contact email: [email protected].

2. Information Collected Through This Website

This Website does not have user accounts or online forms, and does not use visitor analytics or advertising tracking tools; the handling of server access logs and inquiry emails is described below.

• Browsing behavior: This Website does not use analytics, statistics, or advertising tracking tools, and does not identify visitors' personal identity based on browsing behavior (see Section 5).
• Language preference: When you actively switch the display language on this Website, your browser saves a single key-value pair, lang (with a value such as zh/en/id/ja), in your browser's local storage (localStorage), solely to remember your language choice. This value is not uploaded to our servers and contains no personally identifiable information. The automatic language-detection redirect on first visit does not by itself write this value.
• Server access logs: See Section 6.
• Inquiry emails: See Sections 3 and 7.

3. Information Collected When You Contact Us by Email

The only contact method on this Website is a mailto link pointing to [email protected]; clicking this link opens your own local email client to send an email, and the Website server itself does not receive, store, or otherwise handle the content of that email. However, once an email is actually sent to that address, the Company will process the information it contains. For how such emails are received and stored, see Section 7, "Receipt and Storage of Inquiry Emails." As to the content of the email itself, the following rules apply:

• Information collected: The information we plan to retain includes the sender's email address, name, company name, the body of the inquiry, and any necessary attachments; we do not proactively request other personal information unrelated to the inquiry.
• Purpose: Intended for responding to the inquiry and related sales follow-up; we do not plan to automatically add your information to any marketing list.
• Retention period: We plan to delete inquiry emails 12 months after the last contact, except where retention is required by law, for dispute handling, or for an already-concluded contract; the relevant cleanup mechanism is being put in place.
• Access: As stated by the Company, only the Company's person in charge and the Data Protection Officer (DPO) have access to this mailbox; access is not granted to other personnel.
• Import into other systems: As stated by the Company, inquiry email information is not currently imported into a customer relationship management (CRM) system or any other system for further processing. Should this change in the future, we will update this Policy accordingly and list the relevant third-party services.

4. How We Use Your Information

We use the information you provide by email only within the scope described in Section 3, namely to respond to inquiries and for related sales follow-up. This Website does not integrate with any analytics or statistics tools, does not profile visitors based on their behavior, and does not use such information for advertising.

5. Cookies and Local Storage

This Website does not use cookies. Based on live testing (checking response headers across 5 pages and confirming browser cookie behavior), this Website does not set any cookies and does not integrate with any third-party analytics, statistics, or advertising tools. This Website uses browser local storage (localStorage) only when you actively switch languages, to save a single key-value pair, lang, to remember your language choice; you may clear this data at any time through your browser settings.

The testing described above was conducted before the switch to Cloudflare Pages. According to Cloudflare's official documentation, cookies such as __cf_bm, cf_clearance, __cflb, __cfwaitingroom, and _cfuvid appear only when the corresponding feature (such as Bot Management, challenges, load-balancing session affinity, waiting room, or rate-limiting rules) is enabled, but Cloudflare does not state that no cookies whatsoever are set when no such feature is enabled. The conclusion in this Section is subject to a fresh round of response-header and browser cookie testing on the Cloudflare production environment before formal launch; until that retest is confirmed, this Section shall not be published as a final, conclusive statement. If the retest finds any Cloudflare-related cookies, this Section will be rewritten to disclose their names, triggering conditions, purposes, and retention periods.

6. Handling and Records Relating to Website Access Requests (Cloudflare)

The production version of this Website is hosted on Cloudflare Pages. Requests that visitors make to this Website are first received and processed by Cloudflare's global edge network before the Website's content is returned. With respect to the handling of such requests, Cloudflare acts as our data processor — Section 2.3 of the Cloudflare Customer Data Processing Addendum (DPA) states: "the parties acknowledge and agree that the Customer is the Controller…and Cloudflare is a Processor." Cloudflare may record information relating to requests (such as source IP, timestamp, request URL, status code, and user agent) as needed for its own product and security operations; the specific fields, purposes, and retention rules for such records are governed by Cloudflare's publicly published privacy policy and DPA. Based on our review, Cloudflare's public documentation does not disclose a uniform retention period specifically for "website visitor request logs"; the "12 months" stated in the DPA's annex refers only to Cloudflare's retention of access logs for its own processing infrastructure, and is not specific to website visitor request logs.

Cloudflare Pages does not provide us with per-request visitor access logs: log export (Logpush) is available only on Cloudflare's Enterprise plan, and is not included in the Free, Pro, or Business plans; we have not subscribed to this feature, and therefore do not bulk-export or obtain visitor access logs through Logpush. If a page uses Cloudflare Pages Functions, its debug logs are only viewable as a real-time stream and are not retained after the session ends. Beyond these two points, this Policy does not currently disclose whether other Cloudflare dashboard features (such as Security Events or WAF Events) display or retain per-request visitor records to us. Should we enable log export in the future, or confirm that another feature provides us with visitor request records, we will update this Policy and describe the retention period and purpose.

We separately maintain a testing environment that is not open to the public (Alibaba Cloud Singapore), used solely for internal deployment verification; it does not process requests from visitors to the production Website, and its logging practices are outside the scope of, and not disclosed in, this Policy.

7. Receipt and Storage of Inquiry Emails

For the purposes of this Section, "inquiry emails" refers to business inquiry emails and personal-data-related request emails (such as requests to access, correct, or withdraw consent) that you send to [email protected] or [email protected].

Based on domain resolution records (verified by a dig lookup on 2026-09-25), the mail routing (MX records) for dynastysong.com is configured to use Cloudflare Email Routing (route1/2/3.mx.cloudflare.net, with the SPF record including include:_spf.mx.cloudflare.net). That is, emails sent to the addresses above first pass through Cloudflare's email forwarding service before ultimately being stored in the Gmail service provided by Google.

• Forwarding provider: Cloudflare Email Routing (verified through the domain's MX/SPF records).
• Destination mailbox provider: Google (Gmail).
• Storage and backup: Email storage and backup are handled by Google under its own policies; As stated by the Company, no separate backup export is currently made.
• Cross-border processing: See Section 12, "Governing Law," for information on cross-border data transfer and storage.

This Section describes only the forwarding and final storage path of emails; ownership and administration of the Cloudflare account itself are outside the scope of this Policy.

8. Website Hosting and Third-Party Services

The production version of this Website is hosted on Cloudflare Pages and is distributed via Cloudflare's global content delivery network (CDN). Aside from Cloudflare (hosting and CDN, see Section 6) and the email forwarding provider described in Section 7, this Website does not integrate with any payment gateway, SMS provider, third-party login, or customer-service widget. Fonts, logos, and other visual and display assets used on the Website are self-hosted on the site and do not trigger requests to any third-party server (such as Google Fonts).

Regarding analytics and advertising tracking tools: we have not enabled Cloudflare Web Analytics or any other analytics or advertising tracking tool — this is confirmed by checking, item by item, that these are turned off/not enabled in the Cloudflare dashboard prior to switching to the production domain. As to the Web Analytics product itself, Cloudflare states that it does not set cookies, does not perform cross-site tracking, and does not build long-term individual profiles based on IP address, user agent, or similar identifiers.

For how Cloudflare, as our hosting and CDN provider, processes visitor request data, see Section 6.

Note (hosting provider change record): This Website's testing environment was previously hosted on Alibaba Cloud's Singapore data center; that environment is now retained solely as an internal testing environment not open to the public, no longer processes requests from visitors to the production Website, and its related records are not covered by this Policy.

9. Data Security

As stated by the Company, access to the inquiry mailbox is restricted to the Company's person in charge and the Data Protection Officer (DPO) (see Section 3). This Website does not have a user account system and does not store passwords or other sensitive credentials.

10. Your Rights

Under Singapore's Personal Data Protection Act (PDPA), you may exercise rights such as access, correction, and withdrawal of consent with respect to personal data we hold about you. To exercise these rights or if you have any questions, please contact our Data Protection Officer (DPO) using the contact details in Section 14.

11. Children

This Website is directed at enterprise customers, is not intended for minors, and we do not knowingly collect personal data from minors.

12. Governing Law

We comply with applicable data protection laws based on our actual business and personal data processing activities. The Company's current customer base and marketing activities are focused on Singapore.

This Website's visitor requests are processed through Cloudflare's global network (see Sections 6 and 8); inquiry emails are forwarded through Cloudflare's email forwarding service (whose nodes are likewise distributed globally) and are ultimately stored in the Gmail service provided by Google. The above processing, forwarding, and storage steps may all involve the transfer and storage of data outside Singapore.

The above forwarding, hosting, and storage steps may involve the transfer and storage of data outside Singapore. We will handle the relevant data in accordance with the cross-border transfer requirements of Singapore's Personal Data Protection Act (PDPA); the specific arrangements relied upon (including Cloudflare's Customer Data Processing Addendum and Google's relevant terms) are subject to confirmation by legal counsel. Google's own cross-border transfer mechanisms are governed by its own policies, and this Policy does not make any commitment on Google's behalf.

Language Versions

This Policy is provided in four language versions — Chinese, English, Indonesian, and Japanese — for the reference of visitors in different languages. In the event of any ambiguity or inconsistency between language versions, the Chinese version shall prevail.

13. Changes to This Policy and Effective Date

This Policy is versioned V1.0 and takes effect on 26 September 2026. If we make material changes to this Policy in the future, we will provide notice in a prominent place on the Website; if a specific change requires individual notice to known contacts, we will notify them separately by email.

14. Contact Us

If you have any questions about this Policy or your personal data, please contact our designated Data Protection Officer (DPO) through the following channels:

• Data Protection Officer (DPO) contact email: [email protected]
• General business inquiries email: [email protected]

Company name: Song Dynasty Pte. Ltd.
Registration Number (UEN): 202004248C.
Registered address: 2 VENTURE DRIVE, VISION EXCHANGE #12-26, SINGAPORE 608526.

The Chinese version of this Policy shall prevail in case of any discrepancy.