ClearHR is a payroll and HR platform for Singapore businesses. This policy explains, in plain English, what data we hold, why we hold it, and how we protect it.
ClearHR ("we", "us") provides an HR and payroll system for Singapore SMEs. When your company uses ClearHR, you are the data controller [the party that decides how the data is used], and we act as your data processor [the party that stores and processes it on your instruction].
To run your payroll and HR, ClearHR stores the data your company enters about its employees. This can include:
We hold this data for one purpose only: to run your company's payroll, HR and statutory compliance [the reports you are legally required to file, such as CPF and IR8A]. We do not use employee data for our own marketing, and we never sell it.
We only share data where the law requires it — for example, submitting CPF contributions or IR8A filings to the relevant Singapore authorities. We do not share data with advertisers or third parties for their own use.
Your payroll data is stored in Singapore. Our database provider, Supabase, keeps our database in its Singapore region, and every connection to it is encrypted.
Some of the work happens outside Singapore, though — and we would rather you knew that before you put your employees' data in. Here is the whole list:
A cross-border transfer does not change who answers for the data. Under section 26 of the PDPA [the transfer limitation obligation — the rule that says personal data may only be sent out of Singapore if it is protected to a comparable standard], we stay responsible to your company for that data while it is with a provider listed above, and we only use providers that are bound by data-protection terms. If you want it in writing which provider holds what, and where, ask us and we will send it.
Consent to those transfers. Your company decides what happens to its employees' data and instructs us to act on it (section 1). Asking us to run ClearHR — opening an account, or carrying on using it after this page was updated — is that instruction, and it covers the transfers described above. That consent can be withdrawn at any time, free of charge. If you would rather personal data did not leave Singapore, tell us before you upload it: email [email protected]. We will answer in 1 working day and tell you plainly what we can do instead. The AI features are the only part that sends data to an AI provider and they only send anything when someone chooses to use them, so they can simply be left alone; the payroll, CPF and reporting side cannot work without the hosting and database providers, and we will say so rather than pretend otherwise. An employee who objects can raise it with their employer or write to us directly at the same address — free of charge, and we will confirm within 1 working day. Where an objection cannot be met, we will tell you so instead of moving the data quietly.
An honest limit: we name the countries our providers tell us they use, but what happens inside a provider's own systems is described in that provider's own privacy notice, which we cannot rewrite for them.
We keep your data for as long as your company holds an active ClearHR account. On request, we delete employee records in line with Singapore's statutory record-keeping requirements [the minimum period the law requires you to keep records].
Under Singapore's Personal Data Protection Act (PDPA) [Singapore's data-privacy law], individuals have the right to access and correct their personal data. Employees can view and request corrections through ClearHR directly, or contact us at the address below.
We measure how many people visit our public website (clearhr.io) and which pages they read, using Cloudflare Web Analytics. It is cookieless and privacy-friendly: it sets no cookies, does not fingerprint devices, does not follow anyone across other websites, and does not identify individuals. No employee data and no data you enter into ClearHR is ever included. Because it sets no cookies, no cookie banner is needed. We use only these aggregate numbers, for example to see which pages people find useful.
Questions about this policy or your data? Email [email protected].
Automated analysis — please verify critical findings before acting.