Privacy Policy

Last updated: 23 October 2026

1. Introduction

This Privacy Policy explains how Sourced Global Pte. Ltd., trading as oame (“oame”, “we”, “us” or “our”), collects, uses, discloses, stores, protects and otherwise processes personal data when you access or use our website, platform, applications, products and related services (collectively, the “Platform”).

oame is a platform for creative work. It lets creatives, talent, producers, agencies, brands, businesses and other industry participants create a creative card and portfolios, book each other, message each other and pay for bookings.

This Privacy Policy applies to visitors to our website, registered users, people who are booked or who book others, people invited to a booking by email, representatives of organisations, payment recipients, people who communicate with us, and other individuals whose personal data is provided to us in connection with a booking or use of the Platform.

By using the Platform or otherwise providing personal data to us, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will obtain that consent through an appropriate mechanism.

2. Who We Are

The Platform is operated by Sourced Global Pte. Ltd., trading as oame, with its registered address at 11 Collyer Quay #17-25, The Arcade, Singapore 049317.

Sourced Global Pte. Ltd. is responsible for personal data under its possession or control in connection with the operation of oame, except where another organisation independently determines how and why particular personal data is processed.

Questions, requests or complaints concerning this Privacy Policy or our handling of personal data may be directed to privacy@oame.io.

3. Personal Data We Collect

For the purposes of this Privacy Policy, “personal data” means information about an identifiable individual, or information treated as personal information, personal data or a similar concept under applicable privacy laws.

The information we collect depends on how you interact with oame and the features of the Platform that you use.

When you create or maintain an oame account, we collect information such as your name, email address, password (stored only in a securely hashed form, never as plain text), telephone number, company, profile photograph, location, gender (if you choose to give it), professional categories, website, social media links, portfolio information and other information you choose to provide.

If you sign up or log in with Google or Apple, we receive your name, email address and, where available, your profile photograph from that provider. We do not receive your Google or Apple password.

We also keep administrative information associated with your account, including your account creation date, plan, account status, verification status and relevant account activity.

4. Creative Cards and Portfolios

Users may create a creative card and portfolios through oame. Information associated with these may include photographs, writing, profile images, professional categories, clients, representation and agency details, social media links, websites, professional measurements or specifications, location and other professional information.

Your creative card and portfolios are public. Anyone with the link can see them, including people outside oame.

You should therefore avoid including information on your creative card or portfolios that you do not want publicly available.

5. Bookings, Quotes and Offers

When bookings, offers, counteroffers or quote requests are made through oame, we process information about the people involved, the booking name, dates, times, location, description, rates, fees, booking status, cancellations, acceptance or rejection of offers, payment status and related messages.

If a booker sends an offer to someone who is not on oame, we use the email address the booker provides to send that person the request.

If you subscribe to your oame calendar, your booking details are shared with your calendar app through a private calendar link. Anyone with that link can see those details, so you should not share it.

We keep records of bookings and transactions for operational, accounting, legal, security, fraud-prevention and dispute-resolution purposes.

6. Messages and Communications

When you use oame's messaging, we process messages between users and with oame, attachments, timestamps, sender and recipient information and communications relating to problems reported on a booking.

Communications made through the Platform should not be considered private from oame itself. Authorised oame personnel may access or review communications where reasonably necessary to operate the Platform, provide customer support, investigate complaints, resolve disputes, detect or prevent fraud, investigate suspected breaches of our Terms and Conditions, maintain Platform safety and security, comply with legal obligations or protect oame, our users or third parties.

We do not undertake to routinely monitor every communication between users.

7. Payments and Payouts

oame uses Stripe to provide payment and payout infrastructure.

When you make or receive a payment through oame, oame and/or Stripe may process information such as your name, contact information, billing information, bank or payout information, payment method information, transaction history, payment amounts and currencies, refunds, fees, payout status, chargebacks, disputes, tax-related information, business information, identity-verification information and information required for fraud prevention or regulatory compliance.

Card numbers and bank details are entered directly into Stripe's forms and are stored by Stripe, not by oame. oame may receive information from Stripe relating to customers, connected accounts, transactions, payments, payouts, refunds, disputes, verification, account status and fraud or risk information where necessary to operate the Platform.

Where you set up payouts through oame, information may be exchanged between oame and Stripe as necessary to provide the relevant payment and payout functionality. Stripe may also independently process personal data in accordance with its own terms and privacy practices.

8. Identity and Business Verification

We or our service providers may request information necessary to verify your identity, business or eligibility to use particular Platform functionality. Depending on the circumstances, this may include your legal name, date of birth, address, business registration information, identification information, tax information, bank information and information concerning directors, beneficial owners or authorised representatives.

Some verification information may be collected directly by Stripe and may not be stored directly by oame.

9. Reported Problems, Complaints and Customer Support

Where a problem is reported on a booking, or a complaint, cancellation or payment issue arises, we may process information necessary to investigate and resolve the matter. This may include booking information, payment information, messages between users, the reason and description given, files, photographs, screenshots and other evidence submitted by users, account history, cancellation information, refund information and relevant internal notes.

Where reasonably necessary, authorised oame personnel may review information already available through the Platform in order to investigate a complaint or dispute.

When you contact us, send us feedback or ask for support, we may collect your account information, contact information, the content of your request, attachments and correspondence history in order to investigate and respond to the issue.

10. Information About Other People

Users may provide information concerning other individuals when making bookings, booking someone by email, representing talent, providing client or agency information, submitting evidence about a reported problem or uploading content containing identifiable individuals.

If you provide personal data concerning another person, you are responsible for ensuring that you are authorised to provide that information to oame and, where required by applicable law, that the person has been appropriately informed or has provided any necessary consent.

11. Information Collected Automatically

When you access or use oame, we and our hosting provider may automatically collect certain technical information. This may include your IP address, device and browser type, operating system, pages requested, timestamps, approximate location derived from your IP address, errors and security events.

We use this information to provide, secure, maintain and improve the Platform.

We also count views of creative cards so that their owners can see how many times their card has been viewed. These counts do not identify who viewed the card.

12. Cookies and Similar Technologies

oame uses a small number of cookies and similar technologies that are needed for the Platform to work:

(a) a login cookie that keeps you signed in;

(b) short-lived cookies used while you sign up or log in with Google or Apple;

(c) a cookie that remembers the currency you chose for showing prices;

(d) local storage in your browser that remembers whether you have finished or closed the dashboard tour.

At the date of this Privacy Policy, oame does not use analytics, advertising or tracking cookies. If we add any in future, we will update this Privacy Policy and, where the law requires, ask for your consent first.

13. Information We Receive From Third Parties

We may receive personal data from third parties where necessary to operate oame. These may include Stripe, Google and Apple (if you sign in with them), other oame users (for example, a booker who books you by email), agencies, representatives, businesses, brands and production companies.

The information we receive depends on your relationship with the relevant third party and the functionality being used.

14. How We Use Personal Data

We use personal data primarily to provide and operate oame. This includes creating and administering accounts, authenticating users, maintaining creative cards and portfolios, facilitating bookings, enabling quotes and offers, providing messaging, processing payments and payouts, handling reported problems and disputes, providing customer support and delivering other Platform functionality.

We may also use information to facilitate transactions between users, calculate and collect fees, administer refunds and chargebacks, maintain financial records, investigate suspicious activity, protect accounts, prevent fraud and unauthorised access, enforce our Terms and Conditions and maintain the safety and security of the Platform.

We may analyse information concerning the use and performance of oame to diagnose technical issues, understand how our services are used, improve user experience, develop new functionality and conduct internal research and business analysis. Where reasonably possible and appropriate, this analysis uses aggregated or de-identified information.

We use your contact information to send account notifications, booking updates, payment notifications, security alerts, administrative communications, support responses, legal notices and information concerning material changes to oame. You can choose which notifications you receive in your account settings, except for essential operational messages.

Subject to applicable law, we may also send information concerning new oame functionality, opportunities, events, partnerships, announcements and other promotional communications. Where consent is legally required, we will obtain it. You may opt out of marketing communications without opting out of essential operational communications.

We may also process personal data where necessary to comply with applicable law, respond to lawful requests from authorities, maintain legally required records, enforce agreements, protect our rights or establish, exercise or defend legal claims.

15. Grounds for Processing Personal Data

The legal or permitted basis on which we process personal data depends on the relevant information, your location and the circumstances of the processing.

Depending on applicable law, we may process personal data with your consent, where necessary to provide services you request or perform a contract, where necessary to comply with a legal obligation, for legitimate business purposes recognised by applicable law, to prevent or investigate fraud or unlawful activity, to protect legitimate interests or where processing is otherwise authorised or required by law.

Where Singapore's Personal Data Protection Act 2012 applies, we will collect, use and disclose personal data in accordance with the PDPA and any applicable exceptions.

16. How We Share Personal Data

Because oame facilitates bookings and payments between people and businesses, certain information must be shared with other users for the Platform to work.

For example, when you book someone or are booked, the other person sees the booking details and your name and profile. Contact details such as email address and phone number are shown to the other person once a booking is confirmed.

The information made available depends on the particular feature or transaction. Users receiving personal data through oame are independently responsible for handling that information appropriately and in accordance with applicable law.

Information you publish on your creative card and portfolios is public.

17. Sharing Information With Stripe and Service Providers

We share information with Stripe where necessary to provide payment processing, payouts, connected-account functionality, identity verification, fraud prevention and related financial services. Information may also be provided by Stripe to oame where necessary for these purposes.

We also use third-party service providers that support our infrastructure and operations. Where they process personal data on our behalf, we take reasonable steps to require appropriate handling and protection of that information in accordance with applicable contractual and legal requirements.

At the date of this Privacy Policy, our main service providers are:

(a) Stripe, for payments, payouts and identity verification;

(b) Vercel, for hosting the Platform and storing photos and files you upload;

(c) Neon, for our database;

(d) Resend, for sending automatic emails from mail.oame.io;

(e) Google and Apple, if you choose to sign up or log in with them;

(f) Photon, an OpenStreetMap service run by Komoot, which suggests places as you type a location (only the text you type is sent);

(g) Google Workspace, for oame's own email.

18. Professional Advisers, Authorities and Legal Disclosures

We may disclose personal data to our lawyers, accountants, auditors, insurers, consultants and other professional advisers where reasonably necessary for them to provide their services.

We may also disclose personal data where we reasonably believe disclosure is required or appropriate to comply with applicable law or legal process, respond to a court, regulator or law enforcement authority, investigate fraud or unlawful activity, protect the safety or rights of oame or another person, or establish, exercise or defend legal claims.

19. Corporate Transactions

If Sourced Global Pte. Ltd. becomes involved in a merger, acquisition, investment, financing, corporate restructuring, reorganisation, sale of assets, insolvency process or transfer of all or part of its business, personal data may be disclosed to relevant counterparties, advisers and service providers and may form part of the assets transferred in that transaction, subject to applicable law.

We may also disclose personal data where you specifically direct or consent to the disclosure.

20. Photographs, Writing and Creative Content

Because oame is a platform for creative work, photographs, writing, portfolios and other creative content form an important part of the Platform.

Creative content may itself contain personal data where identifiable individuals appear in photographs or other material. We process this content to host portfolios, operate creative cards, facilitate bookings, display work, provide Platform functionality, investigate reported problems and otherwise operate oame.

Copyright ownership and oame's licence to use creative content are governed separately by our Terms and Conditions. This Privacy Policy addresses the personal data contained in or associated with that content.

oame may feature users' public creative card and portfolio content, and work produced through oame, on the Platform, our website and our social media and marketing channels, as described in our Terms and Conditions. You may ask us to stop using your content for promotion at any time by emailing privacy@oame.io. We will stop new promotional uses within 14 days.

Users who provide content to oame are responsible for ensuring that they have any necessary authority, permissions, licences or releases required to provide that content and permit its intended use. Photographs may show other people. If you upload content showing other people, you must have their consent for it to be used as described in our Terms and Conditions.

21. International Data Transfers

Sourced Global Pte. Ltd. is based in Singapore, but oame is intended for an international creative community. Personal data may therefore be processed or stored outside the country in which you live, including in countries where our service providers or infrastructure are located.

Where personal data is transferred outside Singapore or another jurisdiction that imposes restrictions on international transfers, we will take the steps required by applicable law to provide an appropriate standard of protection.

Depending on the circumstances, these measures may include contractual safeguards, recognised transfer mechanisms, obligations imposed on service providers or other legally recognised protections.

22. Data Security

We take reasonable administrative, organisational and technical measures designed to protect personal data against unauthorised access, disclosure, misuse, interference, alteration, destruction, accidental loss and other unauthorised processing.

These measures include encrypted connections, securely hashed passwords, restricted administrative access, and contractual controls over service providers.

No electronic system, internet transmission or storage system is completely secure. Accordingly, while we take reasonable steps to protect personal data, we cannot guarantee absolute security.

You are also responsible for maintaining the confidentiality of your account credentials and securing devices used to access oame. You should notify us promptly if you believe your account has been compromised.

23. Data Breaches

If a personal data breach occurs, we will investigate and respond to the incident in accordance with applicable law.

Where legally required, we will notify the appropriate data protection or regulatory authority and affected individuals. We may also take steps to contain the incident, mitigate potential harm, identify its cause and reduce the risk of recurrence.

Where the law requires, we will notify the relevant authority within the required time. This includes notifying the Personal Data Protection Commission in Singapore within 3 calendar days of assessing that a breach is notifiable, notifying the relevant authority within 72 hours where the UK or EU GDPR applies, and assessing a suspected eligible data breach within 30 days and notifying the Office of the Australian Information Commissioner and affected individuals where the Australian Privacy Act applies.

24. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal and business purposes.

The appropriate retention period will depend on the nature of the information and may take into account whether your account remains active, whether bookings remain outstanding, financial and accounting requirements, tax obligations, fraud-prevention requirements, disputes, applicable limitation periods, security requirements and the need to establish or defend legal claims.

If you close your account, certain information may continue to be retained where reasonably necessary for completed or outstanding transactions, financial records, tax or accounting requirements, disputes, fraud prevention, security, enforcement of agreements or legal compliance.

Information that is no longer required for a legitimate legal or business purpose will be deleted, anonymised or otherwise disposed of in accordance with our retention practices.

We may retain aggregated or de-identified information that no longer identifies you and use that information for research, product development, business planning and other legitimate purposes.

As a guide, financial, booking and transaction records are kept for at least 5 years, or 7 years where Australian tax law applies. When an account is closed, its public creative card and portfolios are removed within 30 days, except for records we must keep.

25. Accessing and Correcting Your Personal Data

Depending on applicable law, you may have the right to request access to personal data we hold about you and information concerning how that data has been used or disclosed. You may also have the right to request correction of inaccurate or incomplete information.

Most account, creative card and portfolio information can be updated directly in your account settings.

Privacy requests may be submitted to privacy@oame.io. We may request information reasonably necessary to verify your identity before responding to a request.

Access and correction rights may be subject to exceptions and limitations under applicable law.

26. Withdrawal of Consent

Where we rely on your consent to collect, use or disclose personal data, you may withdraw that consent by providing reasonable notice to us at privacy@oame.io.

Where required by law, we will explain any reasonably foreseeable consequences of withdrawing consent. Depending on the information concerned, withdrawal of consent may prevent us from continuing to provide some or all Platform functionality.

Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.

27. Other Privacy Rights

Depending on where you live, you may have additional rights concerning your personal data. These may include rights to request deletion of personal data, restrict or object to certain processing, receive certain information in a portable format, withdraw consent, object to direct marketing or make a complaint to an appropriate data protection authority.

These rights are not absolute and may be subject to legal exemptions or limitations. We will respond to valid requests in accordance with the law applicable to the request.

28. Marketing and Communication Preferences

You may opt out of marketing communications by using the unsubscribe mechanism contained in the relevant communication, by changing your notification settings or by contacting us at privacy@oame.io.

Opting out of marketing will not prevent us from sending communications necessary to operate your account or the Platform, including security alerts, booking information, payment notifications, transaction information, communications about reported problems and important legal or administrative notices.

29. Children's Privacy

oame is designed for professional creative-industry participants and is not intended for children to create accounts.

Users must be at least 18 years old to create an oame account.

Where a person under 18 takes part in creative work arranged through oame, their participation must be managed by an appropriately authorised parent, legal guardian, agency, representative or other responsible adult where required by applicable law.

If we become aware that personal data concerning a child has been collected in circumstances inconsistent with applicable law or our policies, we may take appropriate steps to restrict or delete the information.

30. Third-Party Websites and Services

The Platform contains links to websites and services operated independently by third parties, such as social media profiles and websites that users add to their creative cards.

Those third parties may collect and process personal data under their own privacy policies. Except where applicable law provides otherwise, oame is not responsible for the independent privacy practices of third parties.

We encourage users to review the privacy policies of third-party services before providing information to them.

31. Social Media

If you interact with oame through a social media service, the relevant provider may independently collect and process information concerning you.

Information you choose to publish publicly on social media may also be visible to oame and other people. Your use of those services is governed by the applicable provider's terms and privacy practices.

32. Automated Systems

We may use automated systems to assist with Platform security, fraud detection, spam prevention, account integrity and operational efficiency.

If oame introduces automated decision-making that produces legal or similarly significant effects on individuals, we will provide any additional disclosures, safeguards or controls required by applicable law.

33. Business, Agency and Organisational Accounts

Where you use oame on behalf of a company, agency, production company, brand or another organisation, that organisation may independently determine how certain personal data relating to you or other people is processed.

In those circumstances, the relevant organisation may have its own privacy obligations independently of oame.

34. Accuracy of Information

We take reasonable steps to ensure personal data used or disclosed by us is accurate and complete where required by applicable law.

Users are responsible for keeping information associated with their accounts accurate and current. If you believe information we hold about you is inaccurate, you may update it through your account where possible or contact us at privacy@oame.io.

35. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Platform, our business, our service providers, our data practices or applicable law.

The current version will be published on the oame website and will identify the date on which it was last updated.

Where a change materially affects how we process personal data, we may provide additional notice or obtain consent where appropriate or required by law.

36. Singapore Personal Data Protection Act

Where the Singapore Personal Data Protection Act 2012 (“PDPA”) applies, Sourced Global Pte. Ltd. will process personal data in accordance with its obligations under the PDPA.

These obligations include, where applicable, requirements concerning accountability, notification of purposes, consent, purpose limitation, access and correction, accuracy, protection, retention, transfers of personal data outside Singapore and notification of qualifying data breaches.

Nothing in this Privacy Policy is intended to exclude or limit any right or obligation that cannot lawfully be excluded under the PDPA.

37. Australian Privacy Act

Where the Privacy Act 1988 (Cth) applies, we handle personal information in accordance with the Australian Privacy Principles.

You may request access to or correction of your personal information, and you may make a complaint about how we have handled it, by contacting us at privacy@oame.io. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

You may opt out of direct marketing at any time.

38. United Kingdom and European Union

Where the UK General Data Protection Regulation or the EU General Data Protection Regulation applies, we process personal data on the following bases: to perform our contract with you (for example, providing your account and bookings); to meet legal obligations (for example, tax and financial records); for our legitimate interests (for example, keeping the Platform secure and promoting oame), balanced against your rights; and with your consent where required.

You have the right to access, correct, erase, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent at any time. You may object at any time to the use of your personal data for direct marketing or promotion.

You may complain to the Information Commissioner's Office in the UK (ico.org.uk) or to the data protection authority in your EU country.

39. Complaints and Contact

If you have a question, request or complaint concerning this Privacy Policy or the way oame handles personal data, please contact us. We encourage you to contact us first so that we have an opportunity to investigate and respond to your concern.

Depending on where you live, you may also have the right to make a complaint to the relevant privacy or data protection authority.

Our contact details are:

Sourced Global Pte. Ltd.

Trading as oame

11 Collyer Quay #17-25

The Arcade

Singapore 049317

Privacy and data protection enquiries: privacy@oame.io General enquiries: info@oame.io