Privacy without hidden machinery.

1. Who is responsible

DR ZAM'S ENTERPRISES PTE. LTD. is the organisation and controller for Business Heroes' own prospecting, applications, billing, security and product analytics. When processing client-supplied data strictly on written instructions, it acts as a data intermediary or processor under the governing data-processing agreement.

Data-protection enquiries and requests may be sent to privacy@thebusinessheroes.com.

2. What we collect

• Business identity, role, company, work contact details and public source URL.
• Application, mandate, conversation, qualification and meeting evidence.
• Client CRM identifiers, opportunity stages and collected-revenue evidence used for attribution.
• Billing references and Stripe object identifiers; Business Heroes does not store raw card or bank details.
• Consent, opt-out, suppression, jurisdiction and policy-decision records.
• Limited AI voice transcript, disclosure evidence, duration and outcome. Business Heroes does not request or retain an audio recording.
• Security, audit and cost telemetry with personal data redacted where feasible.

3. Why we use it

We use data to evaluate applications, deliver approved B2B revenue mandates, communicate about relevant services, qualify and schedule meetings, form and administer contracts, collect payment, attribute outcomes, enforce suppression, secure the service and comply with law. We do not sell personal data or train public models on client campaign data.

4. AI agents and decisions

Disclosed AI agents may research companies, draft and send permitted messages, classify replies, answer bounded questions, qualify fit, schedule meetings and administer standard billing. A deterministic policy engine checks external actions. Agents do not make consequential eligibility, employment, credit, health, legal or similar decisions.

An application may be automatically prioritized or declined against published commercial-fit criteria. You may request an explanation or human review through the DPO channel.

5. Sources and sharing

Business contact data comes from information you or a client provides, public company websites and licensed business sources. It may be processed by contracted providers for cloud hosting, enterprise AI, email, calendars, CRM, security and payments. Providers receive only the data required for their function and are subject to contractual confidentiality and security terms.

If you choose microphone input, your browser or operating-system speech-recognition provider may process audio under its own privacy terms before returning text to Business Heroes. You can avoid that processing by typing instead.

6. International transfers

Business Heroes operates from Singapore and may use service providers in other countries. We apply contractual and technical safeguards intended to provide protection comparable to the Singapore PDPA and, where required, approved transfer clauses.

7. Retention

• Unsuccessful application working data: 90 days.
• Campaign contact and conversation data: the client mandate plus 90 days, unless law or dispute preservation requires longer.
• Voice transcripts: 30 days unless attached to a qualification or dispute record.
• Commercial, invoice and contract records: at least five years or the applicable statutory period.
• Suppression evidence: a minimal one-way contact hash retained as long as needed to prevent future marketing.

8. Your choices

You may ask for access, correction, withdrawal of consent, cessation of marketing, deletion where applicable, or information about how a decision was reached. Every marketing message includes an unsubscribe path. Opt-outs are applied immediately to new sends.

9. Security and changes

Controls include least-privilege service identities, encryption, secret isolation, signed tasks, rate limits, tamper-evident audit events and independent kill switches. No internet service is risk-free. Material changes to this notice will be versioned and dated here.