Last updated: October 2026
The Optint platform ("Optint", "we", "us", "our") is owned and operated globally by Bluestone Pacific Pte. Ltd. (UEN: 201632973E), a company incorporated in Singapore with its registered office at 10 Anson Road, #13-09 International Plaza, Singapore 079903.
This statement explains what personal information we collect, why, and how your rights are protected. We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA), the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), and applicable international data protection standards, including the General Data Protection Regulation (GDPR).
From website visitors and business contacts: name, business email address, company name, role, and any information you send us when you request a briefing, a scan, or contact support. We do not use third-party advertising trackers on this site.
From customers using the Optint service: financial and procurement exports your organisation chooses to provide — accounts payable, corporate card, and expense data. These files contain vendor names, transaction amounts, billing dates, cost centres, and payment references. They may incidentally contain limited business-contact personal information, such as an employee's name attached to a card transaction. Full card numbers are masked prior to ingestion and are never stored.
We collect information directly from you or your organisation. We do not purchase personal data from third-party brokers, and we never connect directly to your internal financial or banking systems — our sole input is the export file your organisation provides.
To respond to enquiries, deliver briefings, and fulfill scan requests.
To deliver the Optint service: identifying, verifying, and reporting software, SaaS, and shadow AI spend waste in the financial data your organisation provides.
To administer agreements, billing, user authentication, and support.
With your organisation's agreement under its engagement terms, to build anonymised, aggregated market benchmarks. No benchmark output can identify you, your company, or your fund, and no comparative statistic is produced for any vendor with fewer than seven independent contributing companies.
We do not sell personal information. We do not use your financial data or personal information to train public AI models.
We share data only with trusted service providers bound by contractual confidentiality and data processing obligations no less protective than this statement:
Microsoft Azure: Cloud hosting and processing infrastructure, located in the Australia East (Sydney) region.
Auth0 (Okta Identity): Secure user identity management, multi-factor authentication, and login access controls.
Professional advisers, and regulatory or government bodies where required by law.
We do not sell, rent, or disclose your information to any third party for marketing purposes or without your consent.
All customer data is hosted on Microsoft Azure in the Australia East region. Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Customer data is isolated at the database layer using row-level security and strict tenant segregation, ensuring one customer's data can never be accessed by another customer's account. Access is limited to authorised personnel solely to deliver the service, and every file received is cryptographically fingerprinted to maintain an auditable chain of custody.
Customer financial data is retained for 24 months on a rolling basis to allow year-over-year verification of savings and contract cycles. When an engagement ends or upon written request, customer data is deleted within 30 days and deletion can be certified in writing. The only exceptions are statutory records required by law and anonymised, de-identified aggregates that cannot identify any individual or organisation. Business contact details are retained while an active relationship exists and deleted on request.
When you request a scan, we ask for a verified business email address and contact details before providing results. Uploaded scan files are processed solely to produce your diagnostic report and are removed from active processing storage following report delivery. Anonymised, aggregated patterns may be retained to improve market benchmarking, never tied to your organisation. Accepting these terms is a condition of the free scan. We may contact you regarding your scan results.
International Transfers
Your information may be processed on secure infrastructure located outside your home jurisdiction (including Singapore and Australia). In all cross-border disclosures, Bluestone Pacific Pte. Ltd. ensures that equivalent data protection safeguards and standard contractual clauses are strictly enforced.
Your rights and contact details
Depending on your jurisdiction (including rights under the PDPA, Privacy Act 1988, and GDPR), you have the right to request access to, correction of, or deletion of personal information we hold about you, or to withdraw consent for processing.
To exercise these rights or contact our Data Protection Officer:
Email: support@optint.ai
Postal Address: Data Protection Officer, Bluestone Pacific Pte. Ltd., 10 Anson Road, #13-09 International Plaza, Singapore 079903
We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your relevant supervisory authority, such as the Personal Data Protection Commission (PDPC) in Singapore, the Office of the Australian Information Commissioner (oaic.gov.au), or your competent European Data Protection Authority.
