Saaga Online
← Back to Saaga Online
Saaga Online
← Back to Saaga Online
Effective date: 12 July 2026 · Last updated: 12 July 2026
Saaga Online Pte Ltd ("Saaga Online", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use:
By using our Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Services.
Account information. When you register or place an order, we collect your name, email address, and phone number.
Delivery address & location. We collect the delivery address you provide, and — where you grant permission on the Android app — your device's approximate or precise GPS location, to help auto-fill your address, verify delivery zones, and improve delivery accuracy.
Payment information. Payments are processed by third-party, PCI-DSS compliant payment processors. We do not store your full card number, CVV, or bank credentials on our servers — we only receive a transaction reference and status.
Device & usage information. We collect device identifiers, app version, operating system, crash logs, and in-app usage/analytics events to diagnose issues and improve the Services.
Push notification data. If you enable notifications, we collect a device push token to send order confirmations, delivery updates, and (with your consent) promotional messages.
Cookies. Our website and web app use cookies and similar technologies for session management and analytics. You can control cookies through your browser settings.
We do not sell your personal data. We share information only as needed to operate the Services:
| Recipient | Purpose |
|---|---|
| Delivery riders / logistics partners | Name, address, and phone number needed to complete your delivery |
| Payment processors | To securely process your payment |
| Cloud & infrastructure providers (AWS, Supabase, Amazon Cognito) | Hosting, database, and secure authentication of your account |
| Analytics & crash-reporting providers | App stability, performance, and usage insights |
| Regulators / law enforcement | Only where required by law |
Your data is hosted on Amazon Web Services infrastructure in Singapore (ap-southeast-1). We use industry-standard safeguards including TLS encryption in transit, encryption at rest, access controls, and secure authentication via Amazon Cognito. While we work hard to protect your data, no method of transmission or storage is 100% secure.
We retain your personal data for as long as your account is active or as needed to provide the Services, and thereafter as required to meet legal, accounting, or tax obligations. When no longer required, data is securely deleted or anonymised.
Under the PDPA, you have the right to:
To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe.
You may disable any of these permissions in your device settings; some features (e.g. address auto-fill) may not work correctly if disabled.
Our Services are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Saaga Online Pte Ltd