This policy explains what Quicdata Solution Sdn Bhd ("we") collects when you use Tanyai, how it is used, and who it is shared with, in line with Malaysia's Personal Data Protection Act 2010.
What we collect
- Owners: account details (name, email), the documents and settings of your assistants, and usage records.
- Visitors: the messages you send and the replies you receive, files you attach, and technical details such as your IP address and the website you chatted from.
- Tool sign-ins: when an assistant asks you to sign in to a connected service, we store the access token that service issues, so the assistant can act for you.
How it is used
To answer your questions, to let owners review conversations and improve their assistants, to keep the service secure, and to measure usage and cost. We do not sell personal data.
Third-party AI providers
Tanyai sends messages, and the parts of the owner's documents needed to answer them, to the AI providers below. Each assistant's owner chooses which models it uses, so not every assistant uses every provider. This is a summary of what each provider publicly says about data sent through its API, as we understood it when this page was last updated. Providers change their terms; check their own policies for the current wording.
| Provider | Used for | Used to train their models? |
|---|---|---|
| Anthropic (Claude) | Answers, understanding requests | No, not by default for API use. |
| OpenAI | Answers | No, unless the account opts in. |
| Google (Vertex AI and paid Gemini API) | Answers, reading scanned documents | No, for paid services. Google's free Gemini tier may use data to improve its products, and people may review it. |
| DeepSeek | Answers | May be. Its API terms do not rule this out, and data may be processed in China. |
| Voyage AI (MongoDB) | Search: turning text into search vectors and ranking results | May be, unless the account opts out. It sees document text and search questions, not whole conversations. |
Because some providers may keep or train on what they receive, do not share personal or sensitive information in a chat: passwords, card or bank numbers, identity card or passport numbers, health details, or anything confidential. Owners should keep such details out of their knowledge base.
Tools the owner connects
An owner can connect their own tools (MCP servers) to an assistant. When a question needs one, the details needed are sent to that tool, which is run by the owner or a service they chose, under its own terms.
Storage and retention
Data is stored on servers we control. Conversations are kept so owners can review them, until the owner deletes them or closes their account. Attached files are deleted after a limited period.
Your rights
You can ask to see, correct or delete personal data we hold about you. Visitors: the business that runs the assistant decides what to keep, so you can also contact them directly. Requests and questions: [contact email].