What data we may process
AILEO may process contact details you submit, website content you choose to ingest, chat history, technical logs, consent choices, and account-level metadata needed to operate the service.
- Contact form data such as full name, email, phone number, company, and requirements.
- Conversation and knowledge-base content used to answer questions with retrieval-augmented generation.
- Operational metadata such as audit logs, request timestamps, rate-limit events, and consent records.
Why we process it
We process data to provide the AI assistant service, protect the platform, comply with legal obligations, and improve support quality. For LLM processing, the system is designed to check consent before optional AI processing begins.
- Service delivery and support operations.
- Security, fraud prevention, and abuse control.
- Compliance with privacy, retention, and incident-response obligations.
Legal basis and consent
The platform relies on policy acceptance and consent-based controls for personal-data processing. In particular, optional AI and cookie-driven experiences stay off until the user allows them.
- Privacy policy acceptance is stored as a user consent signal.
- LLM consent is checked before sending optional data for AI processing.
- Users can object, withdraw consent, or request deletion in line with PDPA rights.
Your rights under PDPA
AILEO is designed to support core data subject rights requested by PDPA workflows.
- Right to access your data.
- Right to erasure.
- Right to rectification.
- Right to object.
- Right to portability.
- Right to withdraw consent.
Retention summary
| Item | Summary |
|---|---|
| User accounts | While the account remains active |
| Chat history | 90 days |
| Documents | While the document remains in active use |
| Payment records | 7 years |
| Audit logs | 1 year |
If you need a full procurement or internal-compliance summary, see the dedicated Security & Data Policy page. For cookie controls on this landing page, see the Cookie Policy.