Privacy policy

Draft: this policy has not yet been reviewed by a lawyer.

the operator of Talaria ("we") provides Talaria. This explains what personal data we handle, in line with Malaysia's Personal Data Protection Act 2010.

What we collect and why

• Sign-in email addresses of your team, to let them in and show who did what.
• Text of tender emails you forward (a capped excerpt, no attachments), to turn them into tenders. It is deleted after the number of days your admin sets in Settings (30 by default).
• Your GEP login (stored encrypted) and the tender details we read from GEP.
• Billing details: legal name, address, billing email and company tax numbers you enter. We never see or store your card number; payments are handled by CHIP.

Who processes it

We use these service providers: Anthropic (reads forwarded email excerpts to extract tender fields, and orders the items in summary emails from tender details), CHIP (payments), Neon (database, Singapore), Vercel (hosting), Cloudflare (receiving forwarded email) and Resend (sending summary emails). Some of them process data outside Malaysia. We do not sell personal data.

Your rights

You can ask to access, correct or delete personal data we hold, or withdraw consent, by contacting us. Company admins can export their tenders at any time. Invoices may have to be kept for the period tax law requires.

Notis ini dalam bahasa Inggeris; terjemahan Bahasa Malaysia akan disediakan atas permintaan.