Privacy Policy

Scope of This Policy

This Policy applies to personal data collected through our website, the MaaS console, API integrations and any direct communications with our sales and support teams. It does not apply to the content of customer data that you submit for processing through the API; the treatment of that data is governed by our Terms of Service and, where applicable, the Data Processing Agreement.

In relation to customer data processed on your behalf, PARROTSIGHT acts as a data processor. In relation to the personal data described in this Policy — such as your account details and correspondence — PARROTSIGHT acts as a data controller under Malaysian law.

Personal Data We Collect

We collect information that you provide directly to us, including your name, organisation, job title, email address, telephone number and the contents of any enquiries you send through our contact form or support channels.

We also collect limited technical data automatically when you use the Services, including IP address, browser type, device identifiers and usage telemetry such as API request metadata and console activity. We do not sell personal data, and we do not use the content of your inference payloads to build or train models.

Where you create an account, we retain the credentials and settings associated with that account, including API key metadata, plan tier and billing contact details. Payment card details are processed by our payment processor and are never stored on our systems.

How We Use Personal Data

We use personal data to provide, operate and improve the Services, to authenticate your access, to process billing, and to respond to enquiries and support requests. Account and contact data is also used to send service notifications, security advisories and, where you have consented, product updates.

Technical and usage data is used to monitor the security, availability and performance of our infrastructure, to prevent abuse and to produce aggregated statistics. Where we rely on legitimate interests as our legal basis, we ensure that those interests are balanced against your rights and freedoms.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. Account data is retained for the life of the account and for a limited period after closure to allow for reactivation and to meet audit requirements.

Inference request logs and associated metadata are retained for a default period of thirty days, and may be configured to shorter periods or to zero-retention mode on Enterprise plans. Content that you delete is removed from active systems within the retention window, subject to backup rotation and legal hold requirements.

Third-Party Processors

We engage a limited set of third-party processors to support the Services, including cloud infrastructure providers, payment processors, customer support tooling and analytics services. Each processor is bound by a written contract that imposes confidentiality and security obligations no less protective than those in this Policy.

Processors are permitted to use personal data only to perform the specific services we have engaged them to provide, and are not authorised to use that data for their own purposes. A list of material sub-processors is available on request from our Data Protection Officer.

Cross-Border Transfers

PARROTSIGHT processes the majority of personal data within Malaysia and Singapore. Where we transfer personal data outside Malaysia, we do so only to jurisdictions that provide an adequate level of protection or pursuant to appropriate safeguards, including contractual clauses and, where required, your consent.

For customer data processed on your behalf, regional pinning allows you to restrict processing to Malaysia or Singapore as specified in the applicable service order. We will not move pinned data to another region without notifying you in advance.

Your Rights

Subject to the PDPA and applicable law, you have the right to request access to, and correction of, the personal data we hold about you. You may also withdraw consent for direct marketing at any time, and request that we cease processing where our processing is based on consent.

You may request deletion of your personal data, limit its processing, or object to processing in certain circumstances. To exercise any of these rights, contact our Data Protection Officer using the details below. We will respond to verified requests within the timeframe required by law.

Security Measures

We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption in transit and at rest, network segmentation, role-based access controls, multi-factor authentication for administrative access and continuous security monitoring.

Access to personal data is limited to authorised personnel with a legitimate business need, and all personnel are subject to confidentiality obligations and periodic security training. In the event of a breach affecting personal data, we will notify affected individuals and the relevant authorities as required by law.

Contacting Our Data Protection Officer

Questions, requests or complaints concerning this Policy or our handling of personal data may be directed to our Data Protection Officer at Contact@parrotsight.com, or by post to PARROTSIGHT TECHNOLOGY SDN. BHD., C-21-06, KL Trillion, 338 Jalan Tun Razak, Kampung Datuk Keramat, 50400 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia.

We will acknowledge your enquiry and work to resolve it promptly. If you are not satisfied with our response, you may have a right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the supervisory authority in your jurisdiction.