Version 2026-10-01 · Last updated 1 Oct 2026
Privacy Policy
Placeholder. The final text is supplied by the EPMPro non-technical team and reviewed by legal. Written under Malaysia's Personal Data Protection Act 2010 (PDPA).
1. What we collect
| Data | Why |
|---|---|
| Your work email, name, and Microsoft account identifiers | To sign you in and apply your permissions |
| Your conversations with the assistant | So you can see your own history; deleted after your company's retention period |
| Usage metrics (tokens, response times), without content | To run and improve the service |
| Full conversation samples, only if your company agreed | To evaluate answer quality; every access is logged |
We do not store your company's SharePoint content. The assistant reads it when you ask a question, with your own permissions, and does not keep the raw results.
2. Who can see what
- You can see your own conversation history.
- Your Company Admin can see how many tokens each person used, never the content of conversations.
- EPMPro staff cannot open your company's SharePoint.
3. How long we keep it
Conversation history is kept for your company's retention period (365 days by default). Usage metrics are kept without content. Your account data is deleted 12 months after your last sign-in, or on request.
4. Your rights
You can access and delete your conversation history, and ask us to correct or delete your personal data, as provided by the PDPA.
5. Where data is stored
Data is stored in Microsoft Azure data centres (region to be confirmed).
6. Contact
Privacy questions: privacy@epmpro.ai (placeholder).