Privacy Policy

Effective date: 15 September 2026

NILAI (“we”, “us”, “our”) operates nilai.asia, an AI-powered property market intelligence platform. This policy explains what data we collect, how we use it, and your rights under Malaysia’s Personal Data Protection Act 2010 (PDPA).

1. What We Collect

Account data, your email address and name, provided when you sign up or sign in with Google.
Conversation history, the questions you ask and the responses you receive, stored to your account so you can access them across devices.
Saved responses, responses you explicitly bookmark using the Save function.
Usage analytics, anonymised query logs (question text, response time, data sources used) to help us improve the service. These logs are not linked to your account.
Feedback, thumbs up/down ratings you submit on responses.

2. What We Do Not Collect

We do not collect payment information.
We do not use advertising cookies or third-party tracking pixels.
We do not sell, rent, or share your personal data with third parties for marketing.

3. How We Use Your Data

To provide and operate the NILAI service.
To sync your conversation history and saved responses across devices.
To improve response quality and fix errors (using anonymised query logs).
To authenticate your account securely.

4. Data Storage and Security

Your data is stored on servers hosted by Amazon Web Services (AWS) in the us-east-1 (Virginia) region. Passwords are hashed using PBKDF2-SHA256 and are never stored in plain text. All data in transit is encrypted via HTTPS/TLS.

5. Third-Party Services

Amazon Web Services, cloud hosting and infrastructure.
Amazon Bedrock (Claude), AI model provider. Queries are sent to AWS Bedrock to generate responses. AWS’s data processing terms apply.
Google, if you choose “Sign in with Google”, Google shares your name and email with us under their OAuth terms.
NAPIC / JPPH, BNM, DOSM, public Malaysian government data sources. No personal data is shared with these agencies.

6. Data Retention

We retain your account data and conversation history for as long as your account is active. Each account stores up to 40 conversations. If you delete your account, your data is permanently removed within 30 days.

7. Your Rights

Under Malaysia’s PDPA 2010, you have the right to access, correct, or request deletion of your personal data. To exercise these rights, email us at ash@atreus.ventures. We will respond within 14 days.

8. Cookies and Local Storage

NILAI uses browser localStorage (not cookies) to store your session token and preferences. We do not use advertising or analytics cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by updating the effective date above. Continued use of NILAI after changes constitutes acceptance.

10. Contact

For privacy-related questions: ash@atreus.ventures