KilatAutos is responsible for personal data under its control under Singapore's Personal Data Protection Act 2012 (PDPA). This Policy is a notice, not consent to activities for which separate consent is legally required.
1. Scope and accountability
This Policy applies to visitors, vehicle owners, wash partners, administrators and people who contact Support. KilatAutos determines why and how Platform data is handled; some providers, banks and authorities may independently handle data under their own legal duties.
2. Personal data we handle
- Account and contact data, including name, email, phone, language, credentials and verification status.
- Partner identity, profile, address, service-area, availability and PayNow mobile or NRIC/FIN beneficiary data.
- Booking and vehicle data, including location, schedule, instructions, number plate, chat, evidence photos, damage reports and reviews.
- Payment, payout, wallet and transaction identifiers, status, amounts, fees and reconciliation records.
- Device, session, network, security, audit, consent, Support and communications data.
3. How we obtain personal data
We receive data from you, matched users, your device and use of the Platform, Airwallex and payment networks, WhatsApp, mapping services, identity or fraud checks, Support interactions and lawful public or official sources. Please provide data about another person only when authorised.
4. Why we collect, use and disclose data
- Create and secure accounts, verify phone numbers and partner identity, and provide Support.
- Publish limited requests, match users, disclose booking details in stages, support chat and document wash completion.
- Process PayNow top-ups and payouts, maintain wallets, prevent fraud, reconcile records and resolve disputes.
- Send service messages, enforce rules, protect people and property, comply with law, audit and improve reliability.
5. Staged visibility
Before acceptance, a partner sees only limited request information needed to decide whether to accept. After acceptance, owner and partner receive the contact, location, vehicle and instruction details reasonably needed to perform the booking. Access narrows after the booking, although evidence may remain restricted for safety, audit and disputes. Public partner profiles may show approved profile and review information, never government identifiers or payout routes.
7. PayNow payments and payouts
For top-ups, KilatAutos sends Airwallex transaction references, amount, currency, shopper data and limited metadata and receives payment status; we do not collect online-banking credentials. For partner withdrawals we send the validated PayNow phone or NRIC/FIN proxy, beneficiary name and required identity/address information. Airwallex and financial institutions may perform compliance, sanctions, fraud and identity checks.
9. Security and incidents
Safeguards include password hashing, encryption of sensitive fields, private object storage with time-limited links, role-based and staged access, validation, rate limits, audit logs, webhook verification and restricted administration. No system is perfectly secure. We investigate incidents and notify Singapore's Personal Data Protection Commission and affected people when the PDPA requires it.
10. Transfers outside Singapore
Providers or support operations may process data outside Singapore. We use contractual, technical or organisational measures designed to provide protection comparable to the PDPA, subject to lawful exceptions. Provider locations may change.
11. Retention
We keep data only while needed for its purpose or a legal or business need. Account data may continue after closure for security or disputes; booking chat, evidence and damage records may remain while a claim can arise; financial, consent and audit records may be kept longer for law, tax and fraud controls. We then delete, anonymise or de-identify it, while protected backup copies expire on controlled cycles.
12. Your choices and rights
Subject to the PDPA and its exceptions, you may request access to and correction of your personal data, withdraw consent for future handling, change available communications, request account closure or complain. We may verify identity, clarify scope and charge a permitted reasonable access fee disclosed in advance. Withdrawal does not undo earlier lawful handling and may prevent us from providing a necessary feature.
13. Age requirement
KilatAutos is not intended for anyone under 18. If you believe a minor has provided personal data, contact our Data Protection Contact so we can investigate and take appropriate action.
14. Changes to this Policy
We may update this Policy for changes in law, providers, security or Platform features. We will update the version and effective date, give reasonable notice of material changes and seek a new acknowledgement or consent where required.
15. Data Protection Contact and complaints
Use dashboard Support and write 'Privacy request' for access, correction, withdrawal or complaints. Provide enough information to locate the account or booking, but do not send passwords or unnecessary identity documents initially. We will respond within a reasonable time. You may also contact Singapore's Personal Data Protection Commission.