Income AI Mastery Pte. Ltd. ("Income AI Mastery", "we", "our") operates incomeaimastery.one and delivers hands-on AI skills training for income-oriented professional work in Singapore. This Privacy Notice explains our personal data practices under the Personal Data Protection Act 2012 (PDPA). It applies to website visitors, workshop participants, corporate enrolments, and anyone who contacts our Rochester studio.
Who we are
Income AI Mastery Pte. Ltd.
UEN 202941582K
31 Rochester Drive, #12-03, Singapore 138637
[email protected] · +65 6974 8163
We are a vocational training provider — not a financial adviser, not a get-rich-quick promoter, and not an AI consulting agency. Data we collect supports mastery course delivery, billing, and lawful communications about your enrolment.
What we collect
Enrolment & identity: name, employer (optional), job role, billing details, NRIC/FIN only when invoicing requires it, workshop attendance records, mastery assessment submissions, certificate names.
Contact channels: email, phone, postal address, messages submitted through our PDPA-compliant enquiry form at /contact.php.
Technical signals: IP address, browser user-agent, device type, pages viewed, referral URLs, cookie consent choices stored for six months, aggregated analytics if you opt in.
Corporate programmes: HR contact details, team roster names, purchase order references, and attendance confirmations for sponsoring organisations.
We do not intentionally collect health data, biometric identifiers, or children's data. Programmes target working adults eighteen and above pursuing career income growth through practical AI tool skills.
Why we use personal data
- Respond to mastery course enquiries and process registrations for ChatGPT, Claude, Gemini, and Copilot workshops.
- Deliver live cohort sessions, weekend intensives, self-paced modules, and corporate mastery labs.
- Issue participation certificates, manage waitlists, and communicate schedule changes at our one-north studio.
- Process SGD payments, refunds, and accounting records required by Singapore law.
- Improve curriculum quality using anonymised feedback — never to guarantee income outcomes.
- Send marketing about new mastery tracks only with your consent; service messages may still be sent for active enrolments.
- Detect abuse of our website, protect facilitator safety, and comply with PDPC or court orders.
Sharing and overseas processing
We do not sell personal data. We share limited data with:
- Payment processors handling card transactions (we do not store full card numbers).
- Email and calendar tools used to confirm Rochester workshop bookings.
- Cloud hosts that may process data outside Singapore under contractual PDPA safeguards.
- Professional advisers (lawyers, accountants) bound by confidentiality.
- Corporate clients receiving attendance confirmation for staff they enrolled.
Request a list of current sub-processors by emailing [email protected] with subject "PDPA subprocessors".
Your rights under Singapore PDPA
You may request access to personal data we hold, correction of inaccurate records, withdrawal of marketing consent, and information about uses and disclosures in the past year. Email [email protected] with "PDPA request" in the subject line. We respond within thirty calendar days unless an extension is permitted. A reasonable fee may apply to access requests as allowed by law.
If you registered with the Do Not Call Registry, we will not send marketing texts or calls to that number without clear consent. Enrolment confirmations and certificate notices are service messages, not marketing.
Unsatisfied with our response? Contact the Personal Data Protection Commission at www.pdpc.gov.sg.
Retention schedule
| Data type | Retention |
|---|---|
| Enquiry form submissions | 24 months unless enrolment follows |
| Enrolment & payment records | 7 years after programme end |
| Attendance & assessment files | Programme duration + 24 months |
| Marketing consent logs | 6 months after withdrawal |
| Analytics (if enabled) | 14 months aggregated |
| Cookie banner preference | 6 months in local storage |
Security measures
We use HTTPS, role-based access for staff, secure disposal of paper records, and vendor due diligence. No electronic storage is perfectly secure; please use strong passwords on accounts we provision and avoid submitting employer secrets into classroom AI exercises without permission.
We maintain an incident response plan. If a breach likely causes significant harm, we will notify affected individuals and the PDPC as required.
Photography, AI exercises, and updates
Workshop photography for marketing is optional — facilitators announce cameras before capture. Session recordings for absent learners are deleted within ninety days unless you request earlier removal.
During mastery labs you may paste sample client briefs into generative AI tools. Do not upload personal data you are not authorised to share. We teach verification and professional judgment because AI outputs can be wrong.
We review this notice annually and when vendors or laws change. Material updates appear on this page with a revised "Last updated" date. Continued use of incomeaimastery.one after changes constitutes acknowledgement. Active participants receive email notice of material revisions affecting enrolment data.
Privacy questions: [email protected] or +65 6974 8163, Mon–Fri 09:00–18:00 SGT.
Automated decision-making
We do not make solely automated decisions with legal or similarly significant effects. Mastery assessments are reviewed by facilitators. Website analytics are aggregated and do not determine individual pricing or admission without human review.
Payment card data
Card payments are processed by our payment partner. We retain transaction references, amounts, and dates for seven years but do not store full card numbers on incomeaimastery.one servers.
Staff and contractor data
We process facilitator and employee records under employment obligations separate from this notice. Contractors sign confidentiality agreements before accessing learner rosters.
Anonymised research
Survey responses may be anonymised to improve mastery curriculum design. Anonymised datasets cannot reasonably identify individuals and may be retained indefinitely for statistical analysis.
Third-party websites
Links to ChatGPT, Claude, Gemini, Copilot, PDPC, or venue partners are provided for convenience. Their privacy practices are governed by their own policies. We are not responsible for data you submit directly to third-party AI platforms during personal practice outside our supervised labs.
Accuracy of your data
Please keep enrolment records accurate. Incorrect email addresses may cause you to miss schedule updates for Rochester workshops. Notify [email protected] within five business days if your employer, billing entity, or contact number changes mid-cohort.
Withdrawing consent
You may withdraw marketing consent without affecting lawful processing required to complete an active mastery programme you have paid for. Withdrawal may limit alumni forum invitations and optional product announcements about new income sprint modules launching in 2026.
Complaints timeline
We acknowledge PDPA requests within seven business days and aim to complete them within thirty days. Complex requests may require an extension permitted under the PDPA; we will explain any delay in writing.
International participants
Our primary audience is Singapore-based professionals. If you enrol while travelling or relocate after registration, inform us so we can assess whether additional safeguards apply to cross-border data transfers from your new jurisdiction.
Marketing preferences
Marketing emails about new mastery tracks, income sprint modules, or Rochester open-house events are sent only with consent. Each message includes an unsubscribe link. Service emails about your active enrolment are not marketing and may be sent without separate consent.
Previous versions
Archived privacy notice versions are available on request for two years after supersession. Email [email protected] with the version date you need for audit or corporate compliance reviews.
Data minimisation
We collect only personal data reasonably necessary for the purposes described in this notice. Enquiry forms do not require NRIC unless you proceed to invoiced corporate enrolment. Optional fields are clearly marked and may be left blank without affecting general information requests about our mastery programmes.
If you believe we hold inaccurate data, you have the right to request correction under the PDPA at no charge for reasonable requests.