Redclip Privacy Policy

Last Updated: 7 October 2026

1. Introduction

Redclip (“Redclip”, “we”, “us” or “our”) respects the privacy, confidentiality and security of information entrusted to our platform.

This Privacy Policy explains how Redclip collects, uses, processes, stores, transfers, discloses, retains and protects personal data when individuals and organisations access or use our websites, software, applications, artificial intelligence systems, platforms and related services (collectively, the “Services”).

Redclip provides an AI powered operating platform designed for corporate service providers, professional firms, registered agents, accounting firms, compliance professionals and other businesses involved in corporate administration and professional services.

Depending on the Services subscribed to, Redclip may provide functionality relating to entity management, CRM and workflow management, KYC and compliance, document automation, statutory records, payments, marketplace services, artificial intelligence and related professional workflows.

Because our customers may use Redclip to manage confidential corporate, KYC and professional information, data protection and information security form an important part of how Redclip designs and operates its Services.

2. Scope

This Privacy Policy may apply to information concerning:

• Redclip customers and account holders
• authorised users and employees of customers
• clients of corporate service providers and professional firms
• directors and company officers
• shareholders
• beneficial owners and ultimate beneficial owners (“UBOs”)
• authorised representatives and agents
• counterparties and business contacts
• prospective customers
• website visitors
• individuals identified within documents uploaded to Redclip
• other individuals whose personal data is processed through the Services.

This Privacy Policy should be read together with Redclip’s Terms of Service, applicable Data Processing Agreement (“DPA”) and any additional terms governing particular Services.

3. Our Role in Processing Personal Data

Redclip may process personal data in different capacities depending on the circumstances.

Redclip Acting for Its Own Purposes

Redclip may determine how personal data is processed in connection with matters such as:

• account administration
• subscriptions and billing
• customer support
• product administration
• security
• fraud prevention
• communications
• service analytics
• legal and regulatory compliance.

Where applicable, Redclip will process such information in accordance with applicable data protection laws.

Redclip Processing Customer Data

Where a customer uploads, stores or otherwise processes information concerning its own clients or other individuals through Redclip, the customer generally determines why that information is being processed.

In these circumstances, Redclip generally processes the information on behalf of the customer and in accordance with the customer’s instructions, applicable contractual arrangements and applicable law.

Customers are responsible for ensuring that they have the necessary authority, notices, consents or other lawful grounds required to collect and provide such information to Redclip.

Redclip does not assume the customer’s professional, fiduciary, statutory or regulatory obligations merely because the customer uses the Services.

4. Customer Data Ownership

As between Redclip and the customer, customers retain their rights in information, documents and records submitted to the Services (“Customer Data”), subject to applicable law and third party rights.

Customers do not transfer ownership of Customer Data to Redclip merely by using the Services.

Customers grant Redclip only such rights as are reasonably necessary to host, process, transmit, secure, back up and otherwise handle Customer Data for the purposes of providing, maintaining and supporting the Services and performing our contractual and legal obligations.

Redclip does not sell Customer Data or personal data.

5. Information We May Process

Depending on the Services used, Redclip may process the following categories of information.

Account and Contact Information

This may include:

• name
• email address
• telephone number
• business address
• employer
• company name
• job title
• username
• account credentials
• communication preferences.

Identity and KYC Information

Where Redclip’s KYC or compliance functionality is used, information may include:

• full legal name
• date of birth
• nationality
• residential address
• passport or identification information
• copies of identification documents
• photographs
• proof of address
• occupation and employment information
• company affiliations
• directorships
• shareholdings
• beneficial ownership information
• source of funds information
• source of wealth information
• KYC and customer due diligence information
• politically exposed person information
• sanctions and watchlist information
• risk assessments
• screening results
• other information relevant to AML, KYC or regulatory requirements.

Corporate and Entity Information

Information may include:

• company names
• registration numbers
• jurisdictions
• registered offices
• directors
• shareholders
• beneficial owners
• company secretaries
• auditors
• authorised representatives
• ownership structures
• share capital
• statutory registers
• resolutions
• corporate filings
• accounting information
• financial information
• corporate documents and records.

Corporate information may constitute personal data where it identifies or relates to an individual.

Documents and Files

Users may upload documents including:

• identification documents
• incorporation documents
• statutory records
• agreements
• resolutions
• financial records
• compliance documents
• correspondence
• supporting documents
• other professional or corporate records.

These documents may contain personal data relating to persons other than the user uploading the document.

Payment and Transaction Information

Where applicable, Redclip may process:

• invoices
• subscriptions
• transaction information
• payment status
• payment references
• billing information.

Certain banking, card or payment information may be processed directly by authorised payment service providers rather than stored by Redclip.

Technical and Security Information

We may automatically collect:

• IP addresses
• device information
• browser information
• operating systems
• login information
• timestamps
• session information
• application activity
• audit trails
• access records
• feature usage
• security events
• diagnostic information
• system performance information.

6. How Information Is Collected

Information may be collected:

• directly from users
• from customers
• from customers’ employees or representatives
• through documents uploaded to Redclip
• through authorised integrations
• through corporate registries
• through regulatory or compliance databases
• through sanctions and screening providers
• from publicly available sources
• from authorised third party service providers
• automatically through use of the Services.

Customers submitting information concerning another person are responsible for ensuring that they have appropriate authority and lawful grounds to do so.

7. How We Use Information

Redclip may process information where reasonably necessary to:

• provide and operate the Services
• establish and administer accounts
• manage entities and corporate records
• provide KYC and compliance functionality
• assist with identity verification
• perform or facilitate sanctions and watchlist screening
• analyse corporate structures
• manage customer relationships
• automate documents and workflows
• maintain statutory information
• process authorised instructions
• provide payment related functionality
• provide technical and customer support
• authenticate users
• manage permissions and access
• maintain audit trails
• prevent fraud and unauthorised access
• investigate security events
• maintain system reliability
• improve authorised Services
• comply with applicable laws
• enforce contractual rights
• establish, exercise or defend legal claims.

Where applicable law requires a specific lawful basis for processing, Redclip will process personal data on an appropriate basis.

8. Artificial Intelligence

Certain Redclip Services may use artificial intelligence, machine learning, automated workflows, large language models or agentic AI systems.

Depending on the functionality selected, these systems may assist with:

• document extraction and classification
• data entry and reconciliation
• document preparation
• corporate structure analysis
• KYC and compliance workflows
• identification of missing information
• identification of inconsistencies
• screening assistance
• risk indicators
• document summaries
• workflow recommendations
• preparation of reports
• professional and administrative workflows.

AI generated information may contain errors, omissions or incomplete conclusions.

Unless expressly agreed otherwise, Redclip’s AI functionality is intended to assist human professionals rather than replace professional judgement.

9. AI and Customer Data

Redclip recognises that Customer Data may contain confidential and highly sensitive business and personal information.

Redclip will not sell Customer Data.

Redclip will not use confidential Customer Data, identification documents, KYC records or customer uploaded documents to train publicly available general purpose AI models without appropriate authorisation.

Where Customer Data is processed using third party artificial intelligence or technology providers, Redclip will seek to implement appropriate contractual, technical and organisational safeguards consistent with the nature of the processing.

Where technically and legally appropriate, Redclip may use aggregated, anonymised or de identified information that does not reasonably identify a customer or individual for purposes including service improvement, security, analytics and product development.

Redclip maintains internal controls intended to reduce the risk of Customer Data being disclosed between unrelated customer environments.

10. Customer Environment and Data Segregation

Redclip is designed as a multi customer platform.

We implement technical and organisational controls intended to maintain appropriate separation between customer environments and restrict access according to authorised permissions.

Customer Data belonging to one customer should not be intentionally made available to another unrelated customer except:

• where authorised by the relevant customer
• through functionality intentionally designed for authorised information sharing
• where the parties are legitimately connected through a transaction or workflow and appropriate authority exists
• where required by applicable law.

Redclip applies access controls and other safeguards intended to prevent unauthorised cross customer access.

11. Human Responsibility for Compliance Decisions

Redclip provides technology to assist professional and compliance workflows.

Unless expressly agreed otherwise, Redclip does not act as the customer’s compliance officer, registered agent, legal adviser, auditor, accountant or regulatory decision maker merely by providing the Services.

AI generated risk ratings, screening results, alerts, recommendations and other outputs are intended to assist the customer’s review.

Customers remain responsible for their final professional and regulatory decisions, including:

• customer acceptance
• customer rejection
• KYC approval
• AML risk classification
• enhanced due diligence
• sanctions escalation
• suspicious transaction reporting
• regulatory reporting
• statutory filings
• corporate actions
• professional advice.

Redclip assists compliance professionals. It does not replace professional judgement, statutory responsibilities or regulatory obligations.

12. Automated Decision Making

Certain functionality may generate automated indicators, recommendations, classifications or risk assessments.

Where required by applicable law, appropriate safeguards will be applied to automated processing that produces legal or similarly significant effects on individuals.

Customers should independently review material automated outputs before relying upon them for significant decisions.

13. Third Party Service Providers and Subprocessors

Redclip may engage carefully selected third party providers to support the operation of the Services.

These may include providers of:

• cloud infrastructure
• databases
• artificial intelligence
• document processing
• communications
• analytics
• cybersecurity
• compliance screening
• identity verification
• payment processing
• customer support
• backup and disaster recovery.

Such providers may process information only to the extent reasonably necessary to perform the relevant services and subject to appropriate contractual or legal safeguards where required.

Where appropriate, Redclip may maintain information concerning material subprocessors used to deliver the Services.

14. Third Party Integrations

Customers may choose to connect Redclip with third party applications, APIs, banks, payment services, corporate registries, compliance providers or other external services.

When a customer authorises an integration, information may be exchanged with that third party as necessary to provide the requested functionality.

Third parties may operate under their own terms and privacy policies.

Customers should review those terms before enabling an integration.

15. International Data Transfers

Redclip may operate internationally and may engage service providers located in different jurisdictions.

Personal data may therefore be transferred to, stored in or accessed from jurisdictions outside the location where it was originally collected.

Where required by applicable law, Redclip will implement appropriate contractual, organisational or other safeguards intended to ensure an appropriate standard of protection for transferred personal data.

16. Information Security

Redclip takes reasonable technical and organisational measures designed to protect Customer Data and personal data from unauthorised access, disclosure, alteration, misuse, loss or destruction.

Depending on the nature of the Services, these measures may include:

• encryption
• authentication controls
• role based permissions
• access management
• tenant segregation
• audit logging
• security monitoring
• infrastructure protection
• vulnerability management
• backup and recovery procedures
• incident response procedures
• security testing.

Redclip continually reviews its security practices as its platform, technology and risk environment develop.

However, no internet connected service or electronic storage system can guarantee absolute security.

Customers are responsible for maintaining appropriate user permissions, protecting credentials and promptly removing access from persons who are no longer authorised to use their accounts.

17. Audit Trails

Certain Redclip Services may maintain audit records concerning actions performed within the platform.

Depending on the functionality, these may include records of:

• logins
• access
• document activity
• changes to information
• approvals
• workflow actions
• administrative activities
• security events.

Audit information may be retained for security, compliance, dispute resolution and regulatory purposes where appropriate.

18. Data Retention

Redclip retains personal data only for as long as reasonably necessary for the purposes for which it was collected or as required for legitimate contractual, legal, regulatory, security or operational purposes.

Retention periods may depend upon:

• the nature of the information
• customer instructions
• contractual requirements
• corporate record keeping requirements
• AML and KYC requirements
• accounting and tax requirements
• security requirements
• litigation or dispute requirements
• applicable laws.

At the end of the applicable retention period, information may be deleted, anonymised or securely disposed of.

Residual information may remain temporarily within protected backups until those backups are overwritten or deleted in accordance with applicable backup procedures.

19. Data Deletion

Where applicable, customers may request deletion of Customer Data subject to:

• applicable legal requirements
• regulatory retention obligations
• contractual requirements
• legitimate security requirements
• litigation holds or legal claims
• technical backup cycles.

Deletion procedures may apply to production databases, stored documents and other active systems according to Redclip’s applicable data retention and deletion procedures.

Certain security and audit records may be retained where reasonably necessary to protect the integrity of the Services or comply with legal obligations.

20. Data Portability and Account Exit

Redclip recognises that customers may need access to their information when changing service providers or terminating their use of the Services.

Where applicable to the relevant subscription and technically available, Redclip may provide functionality or reasonable procedures allowing customers to export Customer Data.

Following termination, Redclip may provide a reasonable period during which eligible Customer Data can be retrieved.

After the applicable retrieval and retention period expires, Redclip may delete or anonymise Customer Data unless continued retention is legally or contractually required.

The applicable Terms of Service or customer agreement may specify additional export, transition and deletion arrangements.

21. Security Incidents and Personal Data Breaches

Redclip maintains procedures for identifying, assessing and responding to suspected security incidents and personal data breaches.

Where required by applicable law or contract, Redclip will notify affected customers and/or applicable authorities within the required timeframe.

Where Redclip processes personal data on behalf of a customer, Redclip will provide reasonable cooperation and relevant information to assist the customer in meeting its applicable notification obligations.

22. Government, Regulatory and Legal Requests

Redclip may disclose information where required by applicable law, court order, regulatory requirement or other legally binding process.

Where legally permitted and reasonably appropriate, Redclip may notify the affected customer before disclosing Customer Data pursuant to such a request.

Redclip may review requests to determine whether they appear legally valid and may seek to limit disclosure to information reasonably required by the applicable legal process.

Nothing in this section requires Redclip to challenge a lawful governmental, judicial or regulatory request.

23. Corporate Transactions

If Redclip undergoes a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, information may be transferred or disclosed as reasonably necessary in connection with that transaction.

Where appropriate, confidentiality and data protection safeguards will continue to apply.

24. Cookies and Similar Technologies

Redclip may use cookies and similar technologies to:

• authenticate users
• maintain sessions
• remember preferences
• maintain security
• understand usage
• diagnose technical issues
• improve platform performance.

Where required by applicable law, appropriate choices will be provided regarding non essential cookies.

25. Marketing Communications

Where permitted by applicable law, Redclip may send customers and prospective customers information concerning products, services, updates and events.

Recipients may unsubscribe from marketing communications using the mechanism provided in the relevant communication.

Essential security, service, transactional and account communications may continue to be sent where necessary.

26. Individual Data Protection Rights

Depending on applicable law, individuals may have rights to:

• request access to personal data
• request correction of inaccurate information
• withdraw consent where applicable
• request deletion where legally available
• object to certain processing
• request restriction of certain processing
• request portability where applicable
• request information regarding the use or disclosure of personal data
• lodge a complaint with an applicable regulatory authority.

These rights may be subject to legal limitations and exceptions.

Where Redclip processes information solely on behalf of a customer, individuals may need to direct their request to that customer.

Redclip will provide reasonable assistance to customers where required by applicable law or contractual arrangements.

27. Children’s Privacy

Redclip is designed for businesses and professional users.

The Services are not directed towards children and Redclip does not knowingly offer user accounts to children below the applicable legal age for entering into the relevant contractual relationship.

28. Singapore Personal Data Protection Act

Where the Singapore Personal Data Protection Act 2012 (“PDPA”) applies, Redclip will handle personal data in accordance with its applicable obligations under the PDPA.

This may include obligations relating to:

• notification
• consent where required
• purpose limitation
• access and correction
• accuracy
• protection
• retention limitation
• transfer limitation
• data breach notification
• accountability.

Redclip will designate an appropriate Data Protection Officer where required.

29. European Economic Area and United Kingdom

Where the EU General Data Protection Regulation or UK GDPR applies, Redclip will process personal data using an appropriate lawful basis.

Depending on the circumstances, this may include:

• performance of a contract
• compliance with legal obligations
• legitimate interests
• consent.

Individuals may have additional statutory rights including access, rectification, erasure, restriction, objection and data portability.

Where required, appropriate safeguards will be implemented for international transfers of personal data.

30. Changes to this Privacy Policy

Redclip may update this Privacy Policy periodically to reflect developments in:

• our Services
• technology
• artificial intelligence
• security practices
• regulatory requirements
• applicable law
• business operations.

The latest version will be identified by the “Last Updated” date.

Where changes are material and applicable law requires notification, Redclip will take reasonable steps to notify affected users.

31. Contact and Data Protection Officer

Questions regarding this Privacy Policy, personal data or Redclip’s privacy practices may be directed to:

Individuals may also contact us regarding applicable access, correction or other data protection requests.

32. Our Privacy Principle