Legal

Data Deletion Request

Last updated: 5 May 2026. Your right under the Malaysian Personal Data Protection Act 2010 (Section 38) to request erasure of your personal data.

Request deletion in one email

Email hello@quantifyai.me from the address tied to your account, or one matching the phone / NRIC on file. Include:

Your full name as it appears on your account
Email or phone number used to sign up
(Agents/agencies) your agent code or agency name
Whether you want full deletion or only specific data categories

We'll acknowledge within 2 business days and complete deletion within 30 days.

1. What you can request deleted

Upon a valid request, the following will be permanently removed:

Account profile: your name, email, phone, NRIC, address, employment, income, marital status, dependents.
Calculation history: every loan comparison you ran, the inputs you provided, AI-generated recommendations.
WhatsApp conversation history: template send logs, opt-outs, conversation IDs.
Marketing preferences: cross-sell opt-ins for telco, insurance, renovation partners.
Uploaded documents (IC, payslips, bank statements, EPF) older than 12 months past acceptance — these are already auto-deleted on schedule. We'll purge any held under that ceiling on request.

2. What we must retain (legal hold)

Some data must be kept even after a deletion request, by Malaysian law:

Disbursed loan records: if a mortgage was actually disbursed via Quantify AI, the case record (without personal identifiers where possible) is retained for 7 years per Bank Negara Malaysia AML/CFT requirements.
Commission audit trail: commission rows for paid cases — required for tax filing and Inland Revenue Board audits. Retained 7 years.
Active disputes / regulatory matters: if your account is currently subject to a complaint, enforcement action, or court order, the underlying records are held until resolution.

Retained records are pseudonymised where feasible: your NRIC is hashed, contact details removed, only the structural data (loan amount, bank, dates) preserved for the audit trail.

3. Timeline

Within 2 business days: we acknowledge your request and confirm the scope.

Within 7 days: we verify your identity (you may be asked to confirm via the email or phone on file) and check for any active legal-hold flags.

Within 30 days: we execute deletion across application data, document storage, backups, and any third-party processors (Resend, Meta WhatsApp, Supabase). You receive written confirmation.

4. WhatsApp-specific deletion

If your concern is with WhatsApp messaging only:

To stop messages immediately: reply STOP to any WhatsApp message from our verified Business Account. You're added to the platform-wide opt-out list within seconds. No further messages will be sent.
To delete the message history: include "delete WhatsApp logs" in your email request. We remove all template send records, conversation IDs, and opt-out trail tied to your number.

5. Third-party processors

When you delete data with us, we also issue deletion to:

Supabase (database + document storage) — purged within 24 hours of our deletion command; backup copies expire within 30 days.
Meta WhatsApp Business API — message logs older than 90 days are already discarded by Meta; we issue an explicit deletion notice for any held data.
Resend (transactional email) — logs of emails sent to you are purged within 30 days.
Banks & panel lawyers — once your application has been forwarded, the receiving bank or law firm holds your data under their own retention policies. We can issue a deletion request on your behalf, but the receiving party's response is governed by their own terms.

6. Self-service options

Logged-in users: visit Settings → Account → "Request data deletion". This generates a pre-filled email ticket to hello@quantifyai.me.
WhatsApp opt-out: reply STOP to any message — instant.
Email-only opt-out: click "Unsubscribe" at the bottom of any marketing email.

7. If we refuse a request

We can decline a deletion request only when retention is required by Malaysian law (e.g. AML records, tax records, active legal proceedings). In that case we send written reasons within 21 days, identifying which data is held under which legal basis. You may appeal to the Personal Data Protection Commissioner of Malaysia.

8. Contact

Data Protection Officer

hello@quantifyai.me

General privacy enquiries

hello@quantifyai.me

For escalations, the Personal Data Protection Commissioner of Malaysia accepts complaints at pdp.gov.my.