Privacy Policy

Checker Pte. Ltd. ("the Company," "we," "us," or "our") provides a payment infrastructure API that platform companies use to route transactions through multiple payment providers, automate reconciliation, and apply compliance rules at the API layer. This Privacy Policy describes how the Company collects, uses, and protects personal data in the course of delivering those services.

1. Our Commitment

The Company (9 Battery Road, Level 20, Singapore 049315) processes personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA"). For privacy enquiries, contact: [email protected].

The Company operates in two distinct roles. For personal data belonging to API account holders (developers, finance team members, and administrators at platform companies), the Company is the data controller. For payment transaction data, reconciliation records, and compliance screening data that platform customers submit through the Checker API, the Company acts as a data processor on behalf of the platform as data controller. That processing is governed by the data processing agreement between the Company and the platform, and the platform remains responsible for its own customers' personal data.

2. Personal Data We Collect

When you register for and use the Checker API, the Company may collect the following categories of personal data:

• Identity and contact data you submit at registration: name, work email address, company name, and job title;
• API usage data generated automatically: API key identifiers, request timestamps, IP addresses, routing decisions, response codes, and error logs;
• Billing information: billing contact name, email address, and payment method metadata (the Company does not store raw card numbers; payment card tokenisation is handled by a PCI-compliant payment processor acting as sub-processor);
• Support correspondence: email threads, technical support tickets, and compliance enquiries submitted to the Company;
• Site analytics: pages visited, browser and device type, and session duration data collected automatically when you access checkerfin.com and associated documentation pages.

Payment transaction data submitted through the Checker API, including payment instructions, recipient identifiers, transaction amounts and currencies, reconciliation records, and compliance screening results, is processed solely to deliver the routing, reconciliation, and compliance services requested by the platform. The Company does not use transaction data to profile end consumers, does not sell or share transaction data with third parties for marketing purposes, and does not use transaction content for any purpose beyond service delivery and regulatory compliance.

3. Notification, Consent, Purpose

The Company notifies API account holders of the purposes for which personal data is collected and uses personal data only for those purposes, or as otherwise permitted by law. The primary purposes are:

• Providing and operating the Checker API, including the payment routing engine, automatic reconciliation module, and compliance enforcement layer;
• Managing API accounts, issuing API keys, and processing billing for paid plans;
• Responding to technical support enquiries and compliance questions from platform customers;
• Sending material service notifications to registered API accounts, such as changes to API behaviour, planned maintenance windows, and updates to these policies (you may opt out of non-essential communications at any time by contacting us);
• Meeting the Company's obligations under the Singapore Payment Services Act 2019 and associated Monetary Authority of Singapore ("MAS") regulations applicable to payment service providers operating in Singapore.

4. Disclosure and Cross-Border Transfer

The Company discloses personal data only to sub-processors acting under written contract that limits their use of data to the purposes authorised by the Company. Current categories of sub-processors include cloud infrastructure providers (servers may be located outside Singapore), payment rail operators and financial institutions required to settle routed transactions, and anonymised site analytics providers. The Company does not sell personal data to third parties.

Where personal data is transferred outside Singapore, the Company ensures a standard of protection comparable to the PDPA through contractual clauses or other mechanisms recognised under Singapore data protection law. API account holders who require details of specific transfer safeguards may request this information by contacting the Company at the address below.

5. Your PDPA Rights

Under the PDPA, you have the following rights in respect of personal data the Company holds about you as an API account holder:

• Right of access: you may request a copy of the personal data we hold about you;
• Right to correction: you may request correction of inaccurate or incomplete personal data;
• Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice;
• Right to data portability: where applicable under the PDPA, you may request your personal data in a portable format.

To exercise any of these rights, email [email protected]. The Company will respond within 30 days of receiving a valid request. Note that withdrawing consent or requesting deletion of account data may affect your ability to access the Checker API.

6. Data Breach Notification

Notifiable data breaches affecting personal data held by the Company are reported to the Personal Data Protection Commission ("PDPC") and to affected individuals as required by the PDPA. The Company maintains an incident response procedure aligned with MAS technology risk management guidelines given the nature of payment data processed on behalf of platform customers.

7. Do Not Call

The Company is a business-to-business API service and does not conduct unsolicited marketing to consumer telephone numbers. Any operational communications sent by the Company to Singapore telephone numbers comply with the DNC Provisions of the PDPA. You may opt out of any marketing communications via the unsubscribe link in any such message or by contacting us directly.

8. Complaints and Contact

You may lodge a complaint about the Company's data protection practices with the PDPC at pdpc.gov.sg. The Company welcomes direct contact in the first instance to resolve concerns informally.

Checker Pte. Ltd.
9 Battery Road, Level 20
Singapore 049315
Email: [email protected]
Phone: +65 6812 4400