Privacy Notice
The short version
- We store your account, your company workspace, the campaign details you enter, your consent record and your outputs.
- AI providers process your inputs to produce the analysis and keep prompts and responses for up to 30 days. They do not use them to train models by default.
- Stripe handles payments. We never see your full card number.
- Analytics run only if you say yes. We do not sell personal data.
- Cross-customer benchmarking needs your separate permission.
This summary helps you read the document. It does not replace it.
1Scope
This notice explains how Skill Pilot Advisory Sdn Bhd ("we", "us") handles personal data when you use metamodel.systems and the MetaModel application (the "Service"). We are the data controller (or data user, under Malaysian law) for the processing described here.
We follow the Personal Data Protection Act 2010 (Malaysia) as amended, and, where they apply to you, India's Digital Personal Data Protection Act 2023, Singapore's Personal Data Protection Act 2012, Australia's Privacy Act 1988, and the EU and UK General Data Protection Regulation.
2What we collect
| Data | Source | When |
|---|---|---|
| Account data: email address and sign-in credentials | You | When you register |
| Company workspace name, membership and consent record, with the versions of the terms and notices you accepted | You | When you set up a workspace |
| Campaign inputs, text extracted from files you choose to upload, your confirmations, and the outputs produced | You and the Service | When you use the Service |
| Usage and cost records for each analysis job | The Service | When a job runs |
| Payment data: name, email, billing country, card details and transaction ID | You, through Stripe checkout | Only if you buy |
| Technical request data: IP address, browser, device, pages requested, time | Our hosting provider, automatically | Every visit |
| Usage events: pages viewed, buttons clicked, device type | Google Analytics 4 | Only if you accept analytics |
| Messages and contact details | You, by email | Only if you contact us |
Campaign briefs can name people, such as a client contact or an agency lead. Remove personal data you do not need before uploading. Do not give us sensitive data such as health, religion, ethnicity, political views or government ID numbers.
3Why we use it
| Purpose | Legal basis |
|---|---|
| Provide the Service, run analyses and deliver outputs | Performance of our contract with you |
| Run, secure and fix the Service, prevent abuse, control costs | Legitimate interests |
| Process purchases, receipts and refunds | Performance of our contract with you |
| Measure visits and improve pages | Your consent |
| Cross-customer benchmarking, if offered and if you opt in | Your separate consent |
| Keep tax and accounting records | Legal obligation |
| Answer your messages | Legitimate interests, or steps you asked us to take |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4AI processing
To produce a diagnostic, a brief or an explanation, we send your confirmed campaign inputs to an AI model provider. OpenAI is the primary provider and Anthropic is the fallback, used only if the primary fails. When you choose to refine a field or read a brief with AI, only the text you choose, or the text extracted from the file, is sent. The file itself stays in your browser.
Both providers keep prompts and responses for up to 30 days for abuse monitoring. Neither uses this content to train its models by default.
Public web research uses category and market terms only. The confidential text of your brief is never sent as a research query. Your data does not train a model for other customers.
6International transfers
Your workspace data is stored in Supabase's Singapore region. Our other providers may process data in the United States, the European Union, Singapore and other countries. Where required, we rely on contractual safeguards such as standard contractual clauses and on the providers' own transfer mechanisms, and we take steps so your data receives protection comparable to the law where you live.
7How long we keep it
- Workspace, campaign inputs and outputs: while your workspace is active, and for 30 days after you close it or ask us to delete it
- AI provider logs: up to 30 days, under each provider's terms
- Hosting logs: as set by our host, normally no more than 30 days
- Analytics data: 14 months
- Payment and tax records: 7 years, as required by Malaysian tax law
- Emails: up to 2 years after the conversation ends
8Your rights
Depending on where you live, you may have the right to access, correct, delete or port your data, to withdraw consent, to object to or restrict processing, to nominate someone to act for you, and to complain to a regulator. To use these rights, email systems@metamodel.systems. We may need to verify your identity. We aim to reply within 21 days, or sooner where the law requires.
9Security
We serve the Service over HTTPS only, set security headers, restrict each workspace's records to its members with database access rules, verify payments before granting access, load third-party scripts only after consent, and give providers only the data they need. No method of transmission or storage is completely secure. To report a vulnerability, see /.well-known/security.txt.
10Children
The Service is for adults aged 18 and over. We do not knowingly collect data from children.
11Changes
We will post any change here with a new effective date. If a change is material, we will ask for your consent again where needed.
12Contact and complaints
Data protection and grievance contact: Skill Pilot Advisory Sdn Bhd, Level 7, Mercu 3, No. 3, Jalan Bangsar, KL Eco City, 59200 Kuala Lumpur, Malaysia. Email: systems@metamodel.systems.
If you are not satisfied, you may complain to the Personal Data Protection Commissioner of Malaysia, or to the data protection authority where you live, such as the Data Protection Board of India, the Personal Data Protection Commission of Singapore, or the Office of the Australian Information Commissioner.