Legal
Privacy notice.
This notice explains what personal data Built by Pali collects through this website, why, who receives it and how long it is kept, under Malaysia’s Personal Data Protection Act 2010.
- Notice version:
- pdpa-2026-10-07-index
- Last updated:
Who collects your data?
Built by Pali is operated by Mushnor Heritage Resources (SSM 201803323851 / 002884313-T).
Wan Muhamad Fadzli, trading as Built by Pali, Penang, Malaysia. Contact for privacy matters is the email address at the end of this notice.
What do we collect?
- When you send an estimate or enquiry: your name, email, and optionally your company and message, plus the calculator answers and the estimate.
- When you download a free resource, such as the e-invoice checklist: your name, email, the company size band you pick, and when the PDF was first downloaded.
- Your consent record: the version of this notice and the time you agreed.
- A one-way, salted hash of your IP address for spam and rate limiting. Your raw IP address is never stored.
- Anonymous usage events, such as page views and starting the calculator. These hold no name, email or IP address.
- When you use Ask AI: the questions you type and the answers, linked only to a random chat id, never to your name unless you send a note to Pali from the chat.
Why do we use it?
To reply to your enquiry, prepare a quote and arrange a call, and to keep the site free of spam. After an estimate, idea or contact request, Pali sends the estimate (as a PDF) or a confirmation, then at most three short follow-ups over ten days. They stop when you reply, book a call or press the one-click unsubscribe link in every email. A free resource download is one-off: you get the PDF and no follow-up emails. There is no newsletter, no marketing list and no email tracking. Pali also reads Ask AI questions, with names, emails, phone and ID numbers removed, to find what the site does not answer yet.
Calculator answers and estimate figures may also be counted into published statistics, such as the software cost index. Only counts, medians and percentages are published, never your name, email, company, message or a single estimate, and only where at least 30 estimates stand behind a figure. Test and spam entries are left out.
Who receives it?
These providers process data outside Malaysia, including in the United States, under their own data protection terms.
- Cloudflare, which hosts the site and database, runs the spam check (Turnstile) and counts cookieless page views (Web Analytics).
- Resend, which delivers the alert email to Pali and your estimate and follow-up emails.
- OpenAI, which generates Ask AI answers from your question. API data is not used for training by default.
- Pali, who reads and answers your enquiry.
How long is it kept?
- Enquiries, estimates and free resource requests: 24 months, then deleted.
- IP hashes on enquiries: 90 days.
- Ask AI messages: 30 days, then deleted. Chat ids and IP hashes on chat usage: 35 days.
- Anonymous usage events: 13 months.
Is supplying data required?
It is voluntary. Without a name, email and your consent the estimate cannot be sent, but the calculator works without any details.
How do I access, correct or delete my data?
Email the address below from the address you used. Your request is answered within 21 days. Deleted data ages out of backups within eight weeks.
Cookies
This site sets no cookies for estimates or enquiries, and page analytics are cookieless. Ask AI sets one functional cookie, chat_id, when you start a chat: a random signed id used for the daily question limit, kept up to 30 days.