How we handle personal data
Last updated 21 September 2026
Who we are
This website is operated by Oxus Metals AI Pte. Ltd. (UEN 202623664D), a company registered in Singapore, whose registered office is at 3 Fraser Street, #04-23A, DUO Tower, Singapore 189352. We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012.
What this policy covers
This policy covers the personal data we collect through this website and through the email addresses it publishes. It applies whether you simply browse the site or choose to contact us.
What we collect
When you browse the site. The site sets no cookies and runs no analytics or advertising trackers. To protect it from abuse, our web application firewall records each request: the IP address it came from and the country that address belongs to, the page requested, the time, the page you arrived from, and request headers such as your browser type. This is used only to keep the site secure, not to profile individual visitors.
When you contact us. We receive personal data only if you choose to send it — for example by writing to info@oxusmetals.ai about a project or partnership, or to dpo@oxusmetals.ai about privacy. Depending on what you send, this may include your name, email address, company and position, phone number, and the content of your message.
How we use it
We use personal data to reply to you and manage the correspondence; to evaluate and follow up on project and partnership enquiries; to keep the website secure; and to keep records as the law requires. We do not use personal data for marketing, and we do not sell or rent it. If we later introduce a newsletter or something similar, we will ask for your consent before adding you to it.
When we disclose it
We do not disclose personal data except to service providers who host or secure this website, such as Amazon Web Services, who are bound to protect it and use it only for our purposes; to our professional advisers; and where disclosure is required by law, a regulator, or an order of a court.
Where it is kept
The website and its records are hosted with Amazon Web Services, so data may be processed or stored in Singapore and, in the case of security logs, in the United States. When personal data is transferred outside Singapore, we take steps to ensure it receives a standard of protection comparable to that under the PDPA.
How long we keep it
Security logs are encrypted, kept for 365 days, and deleted automatically. Correspondence is kept for up to 24 months after our last exchange, or longer where the law requires, and is then securely deleted.
Your rights and how to reach us
You may ask for access to, or correction of, the personal data we hold about you, withdraw consent, or raise a concern about how we handle it, by writing to our Data Protection Officer at dpo@oxusmetals.ai. If you are not satisfied with our response, you may complain to the Personal Data Protection Commission at pdpc.gov.sg.
Changes to this policy
We may update this policy from time to time. The latest version is always posted on this page, with its date.