We store your account, your assessment answers, the career details you give us, and the reports and feedback we produce for you. An AI model provider processes the details needed to write your report and feedback. Stripe handles payments and we never see your full card number. We do not sell personal data. We delete your client data within 30 days after your account closes or expires.
This policy explains how Skill Pilot Advisory Sdn. Bhd. ("we", "us") handles personal data when you use quanti5.io and the Quanti5 service (the "Service"). We are the data controller (the data user, under Malaysian law) for the processing described here.
We follow the Personal Data Protection Act 2010 (Malaysia) as amended. Where other privacy laws apply to you, we respect them too.
Account data: your email address and sign-in records. You give us this when you create an account or sign in.
Assessment data: the role you choose, your answers, scores and results. You give us this when you take the baseline. If you do not save it, it stays in your browser session.
Career profile data: your current or target role, experience, goals, skills and any text you choose to add. You give us this when you ask for a report.
Report and practice data: your report, plan, exercise submissions, feedback, reassessments and progress. We create this when you use those features.
Purchase data: the product bought, payment status, transaction and subscription references and invoices. Stripe collects your card and billing details at checkout. We do not receive or store your full card number.
Technical data: IP address, browser, device and request details that our hosting and security systems record automatically.
Messages: what you send to support@quanti5.io.
Analytics data: pages viewed and how you use the site. This is collected only if you accept analytics cookies. See section 10.
Please do not submit sensitive personal information such as health, religion, ethnicity, political views or government ID numbers. Quanti5 does not need them. Do not give us information about other people unless you have the right to share it. Do not put passwords or other secrets in any text field.
To provide the Service: calculate and show your results, save them when you ask us to, write your report, give exercise feedback, run reassessments and refresh your plan. Basis: performance of our contract with you.
To manage your account, sign you in, take payment, handle cancellations and refunds, and answer your messages. Basis: performance of our contract with you, and our legitimate interests in running the Service.
To keep the Service secure, prevent abuse and fraud, control costs and fix faults. Basis: our legitimate interests.
To measure visits and improve pages. Basis: your consent.
To keep tax and accounting records and meet legal duties. Basis: legal obligation.
We do not use your data for decisions that have legal or similarly significant effects on you. We do not give your individual results to your employer.
When you ask for a report or exercise feedback, we send the details needed to write it to an AI model provider. This can include your assessment results, your career profile and the text you submit for an exercise. The provider is Anthropic. We send only what the task needs.
Under Anthropic's commercial API terms, content sent through the API is not used to train its models by default, and it is deleted within a limited period, which Anthropic states is 30 days unless the law or safety review requires longer. Those terms are Anthropic's and can change.
AI outputs can be incomplete or wrong. Check them before you rely on them. If you do not want your details processed by an AI provider, do not request a report or exercise feedback. The free baseline does not use an AI provider.
We do not train a shared model on your raw submissions.
We share personal data only with service providers who process it for us under contract, with professional advisers, auditors and authorities where the law requires it or to protect our rights, and with a buyer or successor if our business is sold or reorganised. We do not sell personal data.
Current providers: Netlify (hosting), Supabase (database and sign-in), Stripe (payments), Anthropic (AI processing), our email provider for support@quanti5.io, and Google Tag Manager and Google Analytics, only if you accept analytics cookies.
Your account and customer data are stored in Supabase's Singapore region. Our other providers and their subprocessors process data outside Malaysia, including in the United States, the European Union and Singapore. Where the law requires it, we rely on contractual safeguards and on each provider's own transfer mechanisms, so that your data receives protection comparable to the law where you live.
Your assessment answers, career profile, reports, exercise submissions and feedback: while your account is active, and deleted within 30 days after your account is closed or expires, except where we must keep particular information under the law or to deal with a dispute.
Ending a practice subscription, or the end of the 90-day report access period, does not by itself close or expire your account.
Payment, invoice and tax records: 7 years, as Malaysian business and tax record rules require. Access is restricted.
Emails to support@quanti5.io: up to 2 years after the conversation ends.
Hosting and security logs: for the period set by our hosting provider.
AI provider copies: as set by the provider's terms, described in section 4.
Analytics data: no longer than 14 months.
Backups are removed on a separate schedule, and deleted accounts are removed again if a backup is ever restored. Stripe keeps its own records of payments as the law requires of it, and we cannot delete those.
Depending on where you live, you may have the right to access, correct, delete or port your data, to withdraw consent, to object to or limit processing, and to complain to a regulator. You can export your account data from your account. For anything else, email support@quanti5.io. We may need to verify your identity first. We aim to reply within 21 days, or sooner where the law requires.
Withdrawing consent does not affect processing done before you withdrew it.
We serve the Service over HTTPS, restrict each customer's records to that customer with database access rules, verify payments before granting access, and give providers only the data they need. No method of transmission or storage is completely secure. If a personal data breach occurs, we will assess it and notify the regulator and affected people where the law requires.
The Service uses browser storage that it needs to work, for example to keep your baseline answers during a session, to keep you signed in, and to remember your cookie choice.
Google Tag Manager and Google Analytics measure visits and how pages are used. They load only after you choose Accept on the cookie notice. If you choose Decline, they do not load. We keep assessment answers, reports and account details out of analytics. You can change your choice by clearing this site's browser storage.
The Service is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, email support@quanti5.io.
We will post any change here with a new version and effective date. If a change is material, we will email account holders before it takes effect and ask for consent again where the law requires.
Data protection contact: Skill Pilot Advisory Sdn. Bhd., Level 7, Mercu 3, No. 3, Jalan Bangsar, KL Eco City, 59200 Kuala Lumpur, Malaysia. Email: support@quanti5.io
If you are not satisfied with our reply, you may complain to the Personal Data Protection Commissioner of Malaysia (www.pdp.gov.my), or to the data protection authority where you live.