Privacy Policy

AXL is operated by AXL Labs Pte. Ltd. (“AXL”, “we”, “us”), a company incorporated in Singapore. This policy explains how we collect, use, disclose and protect personal data when you use axl.sg and the AXL app (the “Platform”), in line with Singapore's Personal Data Protection Act 2012 (“PDPA”).

It applies to car owners and fleet operators (“Owners”), workshops and other vendors (“Workshops”), people who join our waitlist, and visitors. It forms part of our Terms of Service.

From Owners

• Account: name, email address, mobile number and password (stored only in hashed form by our authentication provider).
• Your cars: licence plate, make, model, year, colour, mileage, VIN (chassis number), and COE and road tax expiry dates if you add them.
• Service requests: what your car needs, your answers to our follow-up questions, photos you upload, the general area you want service in, urgency, and the brief we prepare from these.
• Quotes and jobs: the quotes you receive and accept, job progress, diagnosis and final quotes, final prices and your service history.
• Messages: chat messages, photos, videos and voice notes you exchange with a workshop after accepting its quote.
• Reviews you leave for workshops.

From Workshops

• Business details: business name, UEN, address and location, business phone and email, opening hours, services, brands serviced and GST status.
• Account holder: name, email address and mobile number.
• Activity: the quotes you send, jobs you pass on and your reasons, diagnoses, job updates, final prices and reviews you receive.

From everyone

• Support: what you tell us when you contact us, and our notes about your enquiry.
• Notifications: if you allow push notifications, a device token or subscription so we can send them.
• Technical data: your IP address (used briefly to prevent abuse — see section 9), and sign-in records kept by our authentication provider.
• Usage: anonymous, aggregated page-view statistics (see section 12).
• Waitlist: your name, email, mobile number, whether you're an owner or workshop, and how you heard about us.

We don't ask for your NRIC, passport or bank details, and please don't send them to us or to other users. Workshops' business contact details are business contact information; we share them with a customer once that customer accepts the workshop's quote.

We use personal data to:

• create and run your account and verify workshops;
• turn your request into a clear brief, match it to suitable workshops and deliver their quotes to you;
• let you and your chosen workshop arrange and complete the job, including chat, job updates, diagnoses and service history;
• send service notifications — for example new quotes, messages, job updates, and reminders when a job stalls or a diagnosis is waiting for your answer;
• keep the Platform fair and safe (section 5), handle disputes, and enforce our Terms;
• provide support and respond to your requests;
• understand how the Platform is used and improve it, including reviewing our automated questions and briefs for quality; and
• meet our legal obligations.

AXL is designed so that each side sees only what it needs:

• Before you accept a quote, workshops see your request, the brief, your photos and your car's make, model, year, mileage and VIN (if you've added it, so they can quote accurately) — but not your name, contact details or licence plate. You see each workshop's quote, rating and note, but not its identity.
• When you accept a quote, that workshop is shown to you and receives the car details it needs for the job (including your licence plate), and a chat opens between you.
• Workshops never see your location. The area you choose is used only to find nearby workshops.
• Reviews are shown on the workshop's profile.

To protect users and keep jobs on the Platform, we run automated checks and AXL staff review what they find:

• Contact details before acceptance. Phone numbers, emails, links, social handles and workshop names are removed automatically from quote notes and requests before the other side sees them, and the attempt is recorded for review.
• Chat. Messages are never changed, but messages that suggest dealing outside AXL or avoiding the Platform are automatically flagged for review by AXL staff.
• Job progress and prices. We monitor jobs that stall after a quote is accepted and send reminders, and we flag jobs completed without a final price or well below the approved price.
• Account standing. We keep records of no-shows, cancellations and confirmed attempts to take jobs off the Platform, and may combine these signals into an internal risk indicator for each account. They may lead us to contact you, restrict matching, or suspend or close an account under our Terms. These decisions are made by people, not automatically.

Authorised AXL staff may read chat messages and job records when needed to provide support, resolve a dispute, investigate a flag, or keep the Platform safe. Access is limited to staff who need it.

By creating an account, joining the waitlist or using the Platform, you consent to our collecting, using and disclosing your personal data as described in this policy. Where you give us personal data about someone else, you confirm you have their consent.

You can withdraw your consent at any time (section 11). Because the Platform can't match requests, deliver quotes or run jobs without this data, withdrawing consent may mean we can no longer provide the Platform to you, and we'll tell you what that means before acting on it. We may also collect, use or disclose personal data without consent where the PDPA or other law allows it.

We don't sell your personal data. We share it only:

• With other users, as described in section 4.
• With service providers who run the Platform for us, only for that purpose and under contract:
  • Supabase — database, file storage and sign-in;
  • Vercel — website hosting and anonymous usage statistics;
  • Anthropic — AI that asks follow-up questions, writes request briefs and helps match requests to workshops. It receives your description of the problem, your car's make, model, year and mileage, and the general area — not your name or contact details;
  • Google — address search when workshops enter their business address;
  • Apple, Google and browser vendors — delivering push notifications you've allowed.
• With authorities or others where required or permitted by law, or to protect the rights, property or safety of AXL, our users or the public.
• In a business transfer, such as a merger or sale of our business, subject to this policy.

Some of our service providers store or process data outside Singapore. In particular, our database and file storage are hosted by Supabase in India, and Vercel, Anthropic and Google process data in the United States and other countries.

When we transfer personal data outside Singapore, we take steps to ensure it receives a standard of protection comparable to the PDPA, including contractual data protection commitments from these providers.

We keep personal data only as long as we need it for the purposes in this policy, or as the law requires:

• Account, car, request, job and chat data — while your account is open, and afterwards only as needed for the purposes below.
• Completed job and price records — as long as needed to resolve disputes and meet legal, tax and accounting requirements.
• Integrity records (flags, no-shows and cancellations) — while relevant to your account's standing or an open dispute.
• IP addresses used to prevent abuse — deleted automatically within 2 days.
• Closed accounts — when you close your account, we delete or anonymise your personal data within 30 days, except records we must keep as described above, and a minimal record of the closure (name, email, mobile number and dates) which we keep for up to 2 years to handle disputes and prevent abuse, then delete.

We protect personal data with reasonable security arrangements, including encryption in transit, database access rules that limit each user to the data they're entitled to, private storage for chat files with short-lived access links, hashed passwords, restricted staff access, and automated removal of contact details before acceptance. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

Under the PDPA you can ask us to:

• access the personal data we hold about you and how it has been used or disclosed in the past year;
• correct personal data that is inaccurate or incomplete — you can also update most details yourself in the app;
• withdraw consent to our collecting, using or disclosing your personal data; and
• close your account and have your personal data deleted as described in section 9.

Email our Data Protection Officer at info@axl.sg. We may need to verify your identity first. We'll respond within 30 days, or tell you within that time when we will. We may charge a reasonable fee for an access request, and will tell you the amount before proceeding.

We use only what the Platform needs to work:

• Sign-in cookies that keep you logged in securely;
• A preview-access cookie if you entered an access code during our preview;
• Local storage in your browser to remember preferences such as light or dark mode.

Our usage statistics (Vercel Web Analytics) don't use cookies and don't identify you. We don't use advertising or cross-site tracking cookies.

Notifications about your requests, quotes, jobs and account are part of the service. We'll only send you marketing messages if you've agreed to receive them, and you can opt out at any time using the link in the message or by contacting us. We won't send marketing calls or texts to a Singapore number listed on the Do Not Call Registry unless you've given us clear consent.

If a data breach occurs, we'll act promptly to contain it and assess its impact. Where a breach is likely to cause significant harm to you, or is of a significant scale, we'll notify the Personal Data Protection Commission and, where required, notify you directly.

We may update this policy from time to time. We'll notify registered users of material changes by email or a prominent notice on the Platform. The “Last updated” date above shows when it last changed.

For questions, requests or complaints about your personal data, contact our Data Protection Officer:

If you're not satisfied with our response, you may contact the Personal Data Protection Commission at pdpc.gov.sg.