
xcube.co Data Policy.
Last updated 8 October 2026.
xcub-e Pte. Ltd., operating as xcube.co (“xcube.co”, “we”, “us”), originates venture studios for the financial industry and is based in Singapore. This Data Policy explains what personal data we collect through xcube.co, why we collect it, and the choices you have. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (“PDPA”).
This policy applies to this website, the contact form on it and the white paper download form.
01What we collect
We only collect what you give us through the forms on this website.
Through the contact form: your first and last name, your institution and position, your work email address, the studio and the role you are interested in, your message, and your consent to this Data Policy, with the date and time you gave it.
Through the white paper download form: your first and last name, your email address, your LinkedIn profile URL, your organisation, and your consent to this Data Policy, with the date and time you gave it.
Our hosting provider also processes standard technical data (such as your IP address and browser type) to deliver and secure the website. We do not use this data to identify you.
02Why we collect it
To respond to your enquiry and to get in touch with you about the studio or the role you are interested in, for example to arrange an introduction or a discussion.
To send you the white paper you requested, and relevant updates about the studio that published it.
To understand which organisations and roles are interested in our studios. Your LinkedIn profile helps us confirm your professional context.
To keep a record of your consent, and to comply with the law.
We will not sell your personal data, and we will not share it with third parties for their own marketing.
03Consent
We collect and use your personal data on the basis of the consent you give by ticking the box on our forms. The box is never pre-ticked, and you cannot submit a form without it. Your consent covers only the purposes described in this policy.
Withdrawing your consent. Your consent stays valid until you withdraw it in writing. You can withdraw at any time by emailing our Data Protection Officer, Julia Chin, at julia@xcube.co or by replying to any email we send you.
Upon receipt of your request, we may need reasonable time (depending on its complexity and its impact on our relationship with you) to process it and to tell you the consequences, including any legal consequences which may affect your rights and liabilities to us. In general, we will process your request within ten (10) business days. Once your withdrawal is processed, we will stop contacting you. If you change your mind, please tell us in writing.
Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where this is permitted or required under applicable law.
04Service providers
We use trusted service providers to host the website, deliver the forms and host our email. They process data on our behalf and only for the purposes in this policy, and some are located outside Singapore. We remain responsible for your personal data.
Web3Forms receives the forms and forwards them to our inbox.
Infomaniak hosts our email, where your submissions are stored (Switzerland).
Vercel hosts and delivers the website.
Transfers outside Singapore. Where your data is transferred overseas, we take steps to ensure it receives a standard of protection comparable to the PDPA, for example through contractual terms with the provider. We will not transfer your data overseas without these safeguards in place.
05How long we keep it
Enquiries and white paper requests: until you withdraw consent, or until we no longer need them to follow up on your interest.
Where we go on to work together: for as long as needed for legal, tax, accounting and contractual purposes, generally up to six years after our work together ends.
Consent records: for as long as we hold the related data.
We will stop retaining your personal data, or remove the means by which it can be associated with you, as soon as it is reasonable to assume that keeping it no longer serves the purpose it was collected for and is no longer necessary for legal or business purposes. If you withdraw consent or ask us to delete your data, we will do so within 30 days, unless the law requires us to keep it.
06Your rights
You can ask us to tell you what personal data we hold about you and how we have used or disclosed it (an access request), to correct any personal data that is inaccurate or incomplete (a correction request), or to stop contacting you or delete your data.
Email our Data Protection Officer, Julia Chin, at julia@xcube.co. A reasonable fee may be charged for an access request, and if so we will tell you the fee before processing it. We will respond as soon as reasonably possible and, in general, within ten (10) business days. If we cannot respond within thirty (30) days, we will tell you in writing within that time when we will be able to. If we cannot provide the data or make a correction, we will generally tell you why, except where the PDPA does not require us to.
Accuracy. We rely on the information you give us. If your details change, please let us know so that they stay current, complete and accurate.
If you are not satisfied with how we have handled your personal data, please contact us first. You may also complain to the Personal Data Protection Commission Singapore at pdpc.gov.sg.
07Security
This website is served only over encrypted HTTPS connections, and access to form data is limited to the people who need it, protected by sign-in controls. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security, but we review our measures regularly.
If a data breach is likely to result in significant harm to you, or is of a significant scale, we will notify the Personal Data Protection Commission and the people affected, as the PDPA requires.
08Cookies and trackers
This website does not use analytics or advertising cookies or trackers. We do not build profiles of visitors. The fonts used on this website are served from our own hosting.
09Minors
xcube.co is intended for professionals, and our services are not intended for anyone under 18. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.
10Changes to this policy
We may update this Data Policy from time to time, for example in response to changes in the law or in how we run the site. The “Last updated” date at the top shows when it last changed. If we ever want to use your data for a new purpose, we will ask for your consent first where the law requires it.
11Contact us
For any question about this policy or your personal data, including requests to our Data Protection Officer, Julia Chin, email julia@xcube.co.