Privacy policy

Recounta Pte. Ltd. (UEN: 202533146C) (“Recounta”, “we”) provides business compliance, accounting and management advisory for Singapore founders, from 88 Market St, #21-01, Singapore 048948. For anything in this policy, write to general@recounta.com.

This policy covers this website (recounta.com), the COAT client workspace at coat.recounta.com, and Coat Solo, our self-serve tool for keeping a business's compliance organised. It is written to Singapore's Personal Data Protection Act 2012 (PDPA).

The contact form collects your name, email address, subject and message — only when you submit it. We use it to answer you, nothing else.

The compliance check asks about your business (entity type, industry, and your answers to the questions). It is anonymous: no name, email or identifier is attached unless you choose to place an order at the end, at which point we collect your name, email, phone and company name to respond.

The COAT workspace holds the accounting and compliance records of Recounta's engaged clients, under the engagement terms agreed with each client. Workspace accounts are created by Recounta — there is no public sign-up. Before we act for a company, the law requires us to verify who owns and runs it, so each director or officer uploads an identity document (NRIC or passport). COAT keeps the document with only the ID type and its last four characters as a reference; an NRIC number is never used as a login or password.

Coat Solo collects what you tell it during sign-up and in your workspace. It is covered in its own section below.

Technical data. To rate-limit the public forms we store a salted one-way hash derived from request details, including your IP address. The IP address itself is not stored, and the hash cannot be turned back into who visited. Our hosting provider (Vercel) processes IP addresses transiently for security, bot detection and request routing, as any host does.

Coat Solo is a self-serve organising tool: you run it yourself, and Recounta does not act as your company secretary, accountant or lawyer through it. Here is what it collects and why.

What you give us at sign-up. Your name and work email, and your answers about the business: its type, name, UEN, registration date, financial year end, revenue band, staff, GST registration, whether it keeps personal data, and the names, roles and shareholdings of its people. We also record the plan you picked and the time you agreed to our terms.

What your workspace holds. Those business facts and people, the compliance calendar worked out from them, which deadlines you have marked done, who owns each one, and your reminder settings; the working copies of your registers you keep there (roles, appointment and cessation dates, shareholdings, and whether someone is a controller or nominee; never ID numbers, birth dates or home addresses); and any documents you upload, with their names, categories and dates. On the Solo Max plan, it also holds the monthly revenue figures you record for the ECI and GST watch, used only to work out where you stand against the GST and ECI thresholds; our staff never see the figures. If you use the ledger and payroll on Solo Max, it also holds the entries you key in and, for each employee you add, the name, birth month, wages and CPF amounts the IR8A and CPF workings need; our staff never see them either. If you set a password, our sign-in provider stores it only in a scrambled (hashed) form that nobody at Recounta can read.

Why we use it. To open and run your workspace: to email you sign-in links and account messages, work out your deadlines, send the deadline reminders you ask for, keep the service secure, and follow up on your sign-up if you might want help from Recounta. We do not use it for anything else without asking you first. You consent to these uses by ticking the box and submitting the sign-up, and you can withdraw that consent at any time (see your choices).

Other people's details. When you add directors, shareholders, partners or staff, you are giving us their personal data. Please only add people you are entitled to add, and let them know you use Coat Solo. We use their details only to build your registers, cap table, calendar and hand-over pack. If you add someone's email so they get their own deadline reminders, we store it and email them to ask them to confirm (up to three emails, if you resend). We email them reminders only after they confirm, and they can stop at any time from any email. A scrambled (hashed) record of those invitations is kept while your workspace exists, to enforce the limits. If they decline or stop, we keep a hashed form of their address indefinitely, so no Coat Solo user can email them again. Documents you upload may also contain other people's details; only upload documents you are entitled to keep and share.

No NRIC. Coat Solo never asks for an NRIC or other national identification number. Please do not type one into any field. Documents you upload (for example a BizFile profile) may contain ID numbers. They are stored privately for you, and our staff do not open them.

Who at Recounta sees what. Our staff can see your sign-up answers and whether your account is active, so we can support you. Our staff tools do not show the contents of your workspace or your documents. The one exception is when you ask us by email for a copy of your data or to close your account: a senior member of our team can then export or close it for you. When you sign up, our team gets an internal alert with your business type, plan and sign-up reference, but not your name or business name. If you ask Astria Consulting to contact you, we share your name, email, business name, business type and any note you add with them, for that purpose only. We keep that request until 12 months after it is closed or you withdraw it (withdrawing removes your name, email and note straight away), and delete it when you close your account.

Emails we send. Sign-in links and account messages are part of the service. Once deadline reminder emails are switched on, they are on by default because they are the point of the product; every reminder has an unsubscribe link, and you can turn them off in your account. These are service messages, not marketing. We will not send you marketing about other Recounta services unless you have agreed to receive it, and any marketing we send will always let you unsubscribe.

How long we keep it. If you never open your workspace from the emailed link, the account and its workspace are deleted automatically after seven days. An open workspace is kept for as long as your account is open. When you close your account, we delete the workspace and every document stored in it within 30 days. Hand-over packs you generate are deleted from our storage within a day. Coat Solo is not a record-keeping service: keep your own copies of documents the law requires you to keep. We keep the sign-up record (your answers and when you agreed to the terms) for up to 12 months after that, as a record of what you agreed to, unless we need it longer to deal with a dispute. To limit repeat emails we keep a scrambled (hashed) form of the addresses we send links to, never the address itself. If paid plans start, invoices and payment records are kept for the five years Singapore tax law requires.

No advertising trackers, no selling or sharing of personal data for marketing, no profiling, no cross-site tracking. The only cookies we set are strictly necessary ones that keep you signed in to COAT or Coat Solo. Your light/dark theme choice and your unfinished Coat Solo sign-up answers are kept in your own browser's storage, not sent to us until you submit. Our host may set a short-lived security cookie if it needs to check that a visitor is not a bot.

We count page views with Vercel Web Analytics, which is deliberately cookieless: it sets no cookies, fingerprints no devices, and follows nobody across the web. We see aggregate numbers — which pages are read, roughly where visits come from — never a profile of you. Visits are counted using a daily-rotating anonymous identifier that cannot be linked back to you or reused across days.

We keep the list short, and each provider sees only what its job requires:

• Vercel — hosts this website, COAT and Coat Solo, and screens traffic for automated abuse (including Vercel BotID, which checks technical signals from your browser on our forms to tell people from bots).
• Supabase — the database, file storage and sign-in service behind COAT, Coat Solo and the compliance check.
• Resend — delivers our email (enquiry confirmations, workspace invitations, Coat Solo sign-in links and reminders).
• Telegram — carries internal alerts to our team (see below).

Internal staff alerts for enquiries and orders go to a private Telegram channel and deliberately contain no personal data — a prompt to check the inbox, not the contents of it. A new Coat Solo sign-up's alert carries only your business type, plan and sign-up reference, never your name, business name or email. If you tap the WhatsApp button or the directions link, you leave this site for WhatsApp or Google Maps under their own terms; nothing is sent to them until you do.

Data outside Singapore. Our database and application servers are set up in Singapore, but these providers are based overseas and may process data (for example email delivery, logs and support) outside Singapore. When personal data is transferred or processed overseas, we make sure it gets protection comparable to the PDPA's standard, through the providers' binding data-protection commitments and the security measures described here.

We make reasonable security arrangements to protect personal data from unauthorised access, use, loss or disclosure. These include encrypted connections, database rules that keep each client's and each Coat Solo user's records visible only to them, keeping COAT and Coat Solo accounts separate, two-factor sign-in for our staff, and limits on repeated requests. No system is perfectly secure, so please keep your email account and any password safe.

Enquiries are kept for as long as needed to handle them and for a reasonable period after, then deleted. Client accounting records are kept for the retention periods Singapore law requires (generally five years). Anonymous compliance-check answers are kept in aggregate to improve the questions. Coat Solo's retention is set out in its section. Once we no longer need personal data for a purpose above or for legal or business reasons, we delete it or make it anonymous.

You may ask what personal data we hold about you and how it has been used or disclosed in the past year, and ask us to correct it. We respond as soon as reasonably possible and within 30 days; if we need longer, we will tell you within those 30 days when we will be able to respond. We may charge a reasonable fee for an access request, and will tell you the amount first.

You may also withdraw your consent to our collecting, using or sharing your personal data. We will tell you what that means for you before acting on it: for COAT it may mean we can no longer act for you, and for Coat Solo it means closing your account, because the service cannot run without your details. You can ask us to close your Coat Solo account and to send you a copy of your business facts, people, registers, calendar and documents first.

Our Data Protection Officer can be reached at general@recounta.com — please put “Data protection” in the subject line. If you are unsatisfied with our answer, you may complain to Singapore's Personal Data Protection Commission.

If a data breach is likely to cause significant harm to the people affected, or affects 500 or more people, we will notify the Personal Data Protection Commission within three calendar days of assessing it as notifiable, as the PDPA requires. If it is likely to cause you significant harm, we will also tell you directly, with what happened and what you can do to protect yourself.

If what we collect changes, this page changes in the same release, with a new date below. That is how the Analytics section above arrived when cookieless page-view counting was added on 10 August 2026, and how the Coat Solo section arrived on 27 September 2026, followed the same day by Coat Solo's registers and document storage. If a change affects how we use the data of Coat Solo users, we will also tell you by email before it applies.