Privacy Policy

Effective date: 15 October 2026
Last updated: 15 October 2026

This Privacy Policy explains how BSEEN PTE. LTD. ("Bseen", "we", "us", "our") collects, uses, shares and protects personal data when you visit bseen.io, join our waitlist, or use the Bseen app and platform.

Bseen is a marketplace that connects app and software brands ("Brands") with user-generated content creators ("Creators"). Creators make content about Brands' apps and post it from dedicated social media accounts. Brands can then run the best-performing Creator videos as paid ads on Meta (Facebook and Instagram).

Please note: Bseen currently runs a waitlist, and the Bseen app is expected to launch on or around 30 October 2026. Sections and items that say "once our app launches" or are labelled "(app)" describe how we handle data in the app. They apply from the date the app launches.

1. Who we are and how to contact us

BSEEN PTE. LTD. (formerly Real World Reviews Pte. Ltd.) is a private company incorporated in Singapore.

• Unique Entity Number (UEN): 202623358K

• Registered office: 20 Collyer Quay, #09-01, Singapore 049319

• Director: Ansh Patil

• Privacy contact: [email protected]

Data Protection Officer. As required by Singapore's Personal Data Protection Act 2012 ("PDPA"), we have appointed a Data Protection Officer ("DPO"), also known as our Data Privacy Compliance Officer. Our DPO is Ansh Patil, Director. You can contact our DPO at [email protected] (please mark your email "Attn: Data Protection Officer"). Bseen is responsible and accountable for the personal data we hold under the PDPA. Our DPO is appointed under the PDPA; we are not required to designate a data protection officer under Article 37 of the GDPR, and this appointment is not such a designation.

For the purposes of the EU and UK General Data Protection Regulation ("GDPR" and "UK GDPR"), Bseen is the "controller" of the personal data described in this policy.

EU and UK individuals. If you are in the EU, EEA or UK, you can contact our DPO directly at [email protected] about any privacy matter. Where the law requires it, we will appoint a representative in the EU and/or the UK under Article 27 of the GDPR or UK GDPR, and we will name them in this policy.

2. Who this policy covers

This policy applies to:

• Visitors to bseen.io;

• Waitlist members who sign up through our website or ads;

• Creators who use the Bseen app, once our app launches;

• Brand users, meaning the people who use Bseen on behalf of a Brand business account, once our app launches; and

• anyone who contacts us or interacts with our social media pages and ads.

Bseen is only for people aged 18 or over. See section 11.

3. The personal data we collect

3.1 Data you give us (website and waitlist)

When you join our waitlist or contact us, we collect:

• Identity and contact details: your name, email address and phone number.

• Interests and preferences: for example, whether you are interested as a Creator or a Brand, the kinds of apps or content you are interested in, and any other preferences you tell us in the sign-up form.

• Marketing preferences: whether you have agreed to receive marketing from us, and by which channels.

• Communications: anything you send us by email, form or social media message.

3.2 Data we collect automatically (website)

When you visit bseen.io, we and our service providers automatically collect:

• Device and connection data: IP address, browser type and version, operating system, device type, language settings and approximate location (city/country level, derived from your IP address).

• Usage data: pages viewed, links clicked, time on site, the website or ad that referred you, and similar analytics information (through Google Analytics 4).

• Security data: information needed to protect our website from attacks, fraud and abuse (through Cloudflare).

See section 8 for more on cookies.

3.3 Data from third parties (website)

• Search tools: aggregated reports from Google Search Console and Bing Webmaster Tools about how people find our website in search results.

• Advertising platforms: we advertise on Meta (Facebook and Instagram) and receive aggregated reports about how our ads perform. If you sign up through a Facebook or Instagram lead form, Meta passes us the details you submit in that form.

3.4 Creator data (once our app launches)

If you create a Creator account, we collect:

• Account details: name, email, phone number, login credentials (passwords are stored in hashed form), country of residence and confirmation that you are 18 or over.

• Profile details: display name, profile information, content niches and anything else you choose to add.

• Linked social account data: see section 3.5.

• Content: the videos and other content you create for campaigns, and any captions, links or metadata attached to them. This content may include your image, voice and likeness.

• Earnings and payout data: the campaigns you join, view counts, earnings calculations and payout history. Payouts are processed through Stripe Connect.

• Subscription and billing data: your subscription plan, billing status and payment history. Stripe collects and processes your card and payment details; we do not store your full card number.

• Identity verification and tax data: Stripe may require identity verification, bank account details and tax information to set up your payout account. Stripe collects this directly. We receive only limited information, such as your verification status, the last digits of your bank account and your payout status.

3.5 Linked social accounts (once our app launches)

To measure campaign performance and calculate your earnings, you connect the social account you use for Bseen campaigns. Bseen never posts, comments or messages on your behalf. We only read the data described below.

Instagram. You connect an Instagram professional account (Creator or Business) through Meta's Instagram API with Instagram Login. We receive your Instagram account ID and username. You then select the campaign post or Reel in the app, and Bseen retrieves its views.

TikTok. You connect your TikTok account through TikTok Login Kit, with these permissions only:

• user.info.basic: your basic profile information (such as your TikTok user ID, display name and avatar); and

• video.list: a list of your public videos, so that you can select the campaign video in the app. Bseen then queries that video's metrics (such as views, likes, comments and shares).

How long and how often. We collect view data from your selected campaign post for 7 days after it goes live, to calculate your earnings. We store the access tokens needed to keep the connection working until you disconnect.

Disconnecting. You can disconnect a social account at any time in the Bseen app, or remove Bseen's access in your Instagram or TikTok app settings. If you disconnect during a campaign, we may not be able to measure your views or pay you for that campaign. Your use of Instagram and TikTok is also governed by those platforms' own terms and privacy policies.

3.6 Brand data (once our app launches)

If you use Bseen on behalf of a Brand, we collect:

• Business account details: your name, work email, phone number, job title, company name, company website and billing details.

• Campaign Studio data: the information you enter or upload when creating and running a campaign, including:

• app details and download links;

• audience goals;

• performance reports you choose to upload (optional);

• budget and creator CPM;

• brand guidelines and content brief uploads;

• posting schedule;

• product access and approvals;

• content usage terms; and

• campaign tracking data, such as Creator handles, earnings caps, video links, views and review feedback.

• Billing data: invoices, payment history and payment method details (processed by Stripe).

Bseen does not currently connect to Brands' Meta ad accounts. If we add this in the future, we will update this policy before the feature goes live.

3.7 App usage data (once our app launches)

When you use the app, we collect log data, device information, in-app activity, error and crash reports, and messages sent through the platform.

4. How we use your personal data and our legal bases

We use personal data only for the purposes below. Under the PDPA and the Australian Privacy Act, we rely on your consent (including deemed consent) or an exception the law allows. If you are in the EU or UK, the GDPR requires us to tell you the "lawful basis" for each purpose; these are shown in the table.

Where we rely on legitimate interests, we have weighed our interests against your rights. You can ask us for more detail, and you can object (see section 12).

If we want to use your personal data for a new purpose that you would not reasonably expect, we will ask for your consent again.

AI features (app). Some Bseen features use reputable third-party AI model providers, which may be located in the USA, to process content and briefs (for example, Campaign Studio uploads and Creator content). These providers process the data on our behalf to deliver those features. Where available, we choose providers whose terms do not allow them to train their models on our customers' content.

Automated decisions. We may use automated tools to help match Creators with campaigns or to detect fraudulent views. We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing.

5. Marketing: your consent and how to opt out

Email. If you join our waitlist and agree to receive marketing, we will send you emails about Bseen, such as launch updates, early access and offers. Every marketing email includes an unsubscribe link.

Phone, SMS and messaging apps. We will only send marketing calls, SMS or messages to your phone number if you have clearly agreed to it.

• Singapore numbers: we comply with the PDPA Do Not Call ("DNC") provisions. Before we send a marketing message to a Singapore phone number, we check the number against the DNC Registry, unless you have given us clear and unambiguous consent, in written or other accessible form, to receive those messages. Our marketing messages identify Bseen, include our contact details and tell you how to opt out.

• Other countries: we follow local rules on electronic marketing, including Australia's Spam Act 2003 and Do Not Call Register Act 2006, and the EU and UK electronic marketing rules.

How to opt out. You can withdraw your consent at any time, free of charge, by:

• clicking "unsubscribe" in any marketing email;

• following the opt-out instructions in any marketing SMS or message; or

• emailing [email protected].

We will act on your request promptly, and in any case within the time the law requires (for Singapore DNC purposes, within 10 business days). Opting out of marketing does not stop service messages, such as account, security or payout notices.

Our ads on Meta. We advertise Bseen on Facebook and Instagram. We do not use the Meta Pixel, the Meta Conversions API or Custom Audiences, and we do not upload your contact details to Meta. Meta may use its own data to show you ads under its own privacy policy; you can manage this in your Meta ad preferences.

6. Who we share your personal data with

We do not sell your personal data. We share it only as described below.

Service providers. We use trusted providers to run our business. They may use your data only to provide services to us.

Byteforce. Byteforce Development LLC builds and maintains the Bseen app and supports our technical security and data breach response. For maintenance, Byteforce may access anonymised or aggregated usage data. All end-user data belongs to Bseen, and Byteforce may use it only to provide services to Bseen.

Stripe (app). Stripe processes payments and Creator payouts. For some data it collects (for example, for identity verification and anti-money-laundering checks), Stripe acts as an independent controller under the Stripe Privacy Policy (stripe.com/privacy) and the Stripe Connected Account Agreement.

Between Creators and Brands (app). To make the marketplace work:

• Brands can see Creators' profiles, campaign content, campaign account handles, and performance data (such as views, earnings caps and review feedback) for their campaigns.

• Creators can see Brand names, campaign briefs, brand guidelines and other information needed to take part in a campaign.

• When a Brand runs a Creator's video as a Meta ad, that video (which may include the Creator's image, voice and likeness) is shared with the Brand and with Meta, and is shown publicly as an ad. Content rights are covered in our Creator Terms, available on our website or in the app.

Social media platforms (app). When you link an Instagram or TikTok account, we exchange data with that platform within the permissions you grant (see section 3.5).

Professional advisers. Lawyers, accountants, auditors and insurers, who are bound by duties of confidentiality.

Authorities and legal requirements. Regulators, law enforcement, courts or others where the law requires or permits it, or where needed to protect the rights, safety and property of Bseen, our users or others.

Business changes. A buyer, investor or successor in connection with a merger, acquisition, financing or sale of all or part of our business. They will be required to protect your data in line with this policy.

With your consent. Anyone else, where you have asked us to share or agreed to it.

7. International transfers

Bseen is based in Singapore, our users are around the world, and our service providers operate in several countries. Your personal data will be transferred to, stored in or accessed from:

• the United States: DigitalOcean, Google, Stripe and Byteforce Development LLC;

• Thailand: Byteforce's development team in Bangkok; and

• other countries where our service providers operate, including Cloudflare's global network and our email, CRM, form, SMS and AI providers.

Some of these countries may not have privacy laws equivalent to those in your country. Whenever we transfer personal data internationally, we take steps to make sure it is protected to a comparable standard:

• Singapore (PDPA): we only transfer personal data outside Singapore where the recipient is bound by legally enforceable obligations (such as a contract) to protect it to a standard comparable to the PDPA, or where another basis the PDPA allows applies.

• Australia (APP 8): before disclosing personal information overseas, we take reasonable steps to make sure the recipient handles it in line with the Australian Privacy Principles.

• EU/EEA and UK (GDPR / UK GDPR): where personal data goes to a country without an adequacy decision, we use appropriate safeguards. These are usually the European Commission's Standard Contractual Clauses ("SCCs") and, for UK data, the UK International Data Transfer Addendum. Where a recipient is certified under the EU–US Data Privacy Framework, we may rely on that instead. Singapore and Thailand do not currently have EU adequacy decisions, so transfers to Bseen in Singapore and to Byteforce in Thailand are covered by SCCs or another valid safeguard.

You can ask us for more information about these safeguards, including a copy of the relevant clauses (commercial details may be removed), by emailing [email protected].

8. Cookies and similar technologies

Cookies are small files placed on your device. bseen.io uses only the following:

We do not use advertising cookies, the Meta Pixel or other tracking pixels on bseen.io.

Your choices. You can block or delete cookies in your browser settings. You can also opt out of Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout). Blocking strictly necessary cookies may stop parts of the site working.

9. How long we keep your data

We keep personal data only for as long as we need it for the purposes in this policy, or as long as the law requires. We then delete or anonymise it. As a guide:

10. How we protect your data

We use reasonable security measures to protect personal data from unauthorised access, collection, use, disclosure, copying, changing, loss or destruction. These include:

• encrypting data in transit (HTTPS/TLS) and, where supported, at rest;

• protecting our website with Cloudflare against attacks and abuse;

• access controls, so only people who need data to do their jobs can see it;

• multi-factor authentication on key systems;

• once our app launches, using Stripe, a PCI DSS-certified provider, so we do not store full card or bank details ourselves;

• read-only access to linked social accounts, limited to the permissions described in section 3.5; and

• choosing service providers carefully and requiring them to protect your data.

No system is completely secure. If you think your account or data has been compromised, please contact us immediately at [email protected].

11. Children

Bseen is only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal data, please contact us and we will delete it. Creators must confirm they are 18 or over before using the app, and we may ask for proof of age once our app launches.

12. Your rights

Depending on where you live, you have rights over your personal data. We will respond to all genuine requests, wherever you live, as far as we reasonably can.

Everyone can ask us to:

• access the personal data we hold about you and find out how it has been used or disclosed;

• correct personal data that is inaccurate, incomplete or out of date;

• withdraw consent to our use of your data (for example, for marketing); and

• delete your data, where we no longer need it.

If you are in Singapore (PDPA): you can request access to, and correction of, your personal data, and you can withdraw consent at any time by giving us reasonable notice. We will tell you the likely consequences of withdrawing consent (for example, that we may not be able to provide the app to you). We may charge a reasonable fee for access requests, and will tell you the fee before we process the request.

If you are in Australia (Privacy Act 1988 and Australian Privacy Principles): you can ask to access and correct your personal information. You may deal with us anonymously or using a pseudonym where it is lawful and practical (for example, when browsing our website), but we need your real details to add you to the waitlist, run an account or pay you.

If you are in the EU, EEA or UK (GDPR / UK GDPR): you also have the right to:

• erasure (the "right to be forgotten");

• restrict how we use your data;

• data portability: receive the data you gave us in a structured, machine-readable format, or have it sent to another organisation;

• object to processing based on legitimate interests, and to direct marketing at any time;

• not be subject to decisions based solely on automated processing that have legal or similarly significant effects; and

• withdraw consent at any time, without affecting the lawfulness of processing before you withdrew it.

If you are in the United States: see section 15.

How to make a request. Email [email protected] (marked "Attn: Data Protection Officer" if you prefer) or write to us at our registered office in section 1. We may need to verify your identity before acting on your request. Where the law allows, you can use an authorised agent.

How quickly we respond. We aim to respond within 30 days (within one month for GDPR requests). If we need more time, or cannot meet your request (for example, because the law requires us to keep certain data), we will tell you why. We will not discriminate against you for exercising your rights.

13. Data breaches

If a data breach is likely to cause you significant harm, we will act quickly to contain it and assess the risk. We will notify the relevant regulators and affected individuals as the law requires, including:

• the Personal Data Protection Commission (PDPC) in Singapore, under the PDPA's mandatory data breach notification rules;

• the Office of the Australian Information Commissioner (OAIC), under the Notifiable Data Breaches scheme;

• the relevant EU supervisory authority or the UK Information Commissioner's Office (ICO), generally within 72 hours of becoming aware of a reportable breach; and

• other regulators where local law requires it.

Where required, we will tell you what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.

14. Complaints

If you have a concern about how we handle your personal data, please contact our DPO, Ansh Patil, first at [email protected]. We will acknowledge your complaint, look into it and respond, normally within 30 days.

If you are not satisfied with our response, you can complain to a privacy regulator:

• Singapore: Personal Data Protection Commission, www.pdpc.gov.sg

• Australia: Office of the Australian Information Commissioner, www.oaic.gov.au, phone 1300 363 992

• EU/EEA: the data protection supervisory authority in the country where you live or work, or where the issue occurred. A list is available at www.edpb.europa.eu

• UK: Information Commissioner's Office, www.ico.org.uk, phone 0303 123 1113

You can complain to an EU or UK regulator at any time, but we would appreciate the chance to resolve your concern first.

15. Additional information for US residents

Some US states, including California, give residents specific privacy rights. To the extent these laws apply to Bseen:

• Categories of data we collect: identifiers (such as name, email, phone number and IP address); internet and network activity; approximate geolocation; commercial and financial information (app); audio-visual content, such as Creator videos (app); and professional information (Brand users) (app). Sections 3 to 6 describe the sources, purposes and recipients.

• Sensitive personal information: account login credentials and financial account details (app), used only to provide our services and as the law permits.

• No sale or sharing: we do not sell personal data, and we do not share it for cross-context behavioural advertising or targeted advertising.

• Your rights: you may have the right to know, access, correct and delete your personal data, and to appeal our decision on a request. To exercise these rights, email [email protected]. If we decline your request, you can appeal by replying to our decision, and we will review it.

• No discrimination: we will not treat you differently for exercising your rights.

16. Links to other websites and platforms

Our website and app may link to third-party websites, apps and platforms, such as Instagram, TikTok and app stores. We are not responsible for their privacy practices, so please read their privacy policies.

17. Changes to this policy

We will update this policy from time to time, for example when we add features or start using new service providers. We will post the updated version on this page and change the "Last updated" date. If we make material changes, we will tell you by email or in the app before they take effect and, where the law requires, ask for your consent.

18. Contact us

If you have any questions about this policy or how we handle your personal data, contact:

Ansh Patil, Data Protection Officer
BSEEN PTE. LTD.
20 Collyer Quay, #09-01, Singapore 049319
[email protected]