Privacy notice

Prepared with the Personal Data Protection Act 2010 in mind. Draft for review by counsel before commercial launch. Last updated 13 November 2026.

What we collect

Your name, email, company name and password (stored only as a salted hash); records of payments (we never see or store your full card number — GKash handles card data and gives us a renewal token); and the reports we generate for you.

Your documents

Files you upload are processed on servers in Amazon Web Services' Singapore region and analysed by Anthropic's Claude through the Anthropic API (processed in the United States). Anthropic does not train models on API data. Uploaded files are deleted as soon as your report is generated. We keep the report and a SHA-256 fingerprint of each file so that the report can be verified later.

Who can see what

Only your account can see a report's findings. Anyone with a report ID can see the verification page, which shows the report date, score, file names and fingerprints, but not the findings.

Your rights

You may ask for access to, correction of, or deletion of your personal data and reports by emailing shihao.pang@appbaystudio.com.