KKCSI Privacy Policy
1. Strict Multi-Tenant Data Isolation (Zero Cross-Client Sharing)
KKCSI operates on an isolated multi-tenant SaaS architecture. When your business deploys AI Workers:
- Strict Organization Boundaries: Your business documents, vector embeddings, customer inquiries, and training memories are partitioned by a unique, cryptographic
organization_idwith PostgreSQL Row-Level Security. - Zero Cross-Contamination: Competitors or other KKCSI clients can never access, query, search, or inherit your business knowledge.
- Self-Contained Autonomous Learning: When your AI Worker self-improves or learns new workflows via Hermes continuous calibration, that knowledge remains exclusively inside your organization's private workspace.
2. 100% Local Singapore AI Processing (Zero Cloud Leakage)
Unlike conventional cloud AI tools that transmit sensitive customer chat history across foreign international servers, KKCSI delivers Sovereign On-Premise AI Compute:
| Security Attribute | Conventional Cloud AI (ChatGPT / Third-Party APIs) | KKCSI Private AI Platform |
|---|---|---|
| Physical Data Location | Foreign overseas cloud datacenters (US / EU) | 🇸🇬 Tier-3 Singapore Datacenter (SG01 Bare Metal) |
| AI Inference Model | Shared public cloud endpoints | 🔒 Local Offline Qwen-3 / Gemma Neural Weights |
| Third-Party Model Training | Risk of public data ingestion | ✅ Zero Third-Party Training (Contractually Prohibited) |
| Regional Regulatory Compliance | Requires cross-border data transfer waivers | ✅ 100% Native Malaysia PDPA & Singapore PDPA Compliance |
3. Automated PII Redaction & Safety Guardrails
To prevent accidental storage of sensitive personal identifying information (PII), our real-time safety guardrails automatically mask sensitive credentials before vector indexing:
- Payment & Financial Information: Credit card, debit card, and bank account numbers are automatically masked as
[REDACTED_CARD]. - National Identity Numbers: NRIC (Malaysia), FIN / NRIC (Singapore), and Passport numbers are automatically converted into
[REDACTED_ID]. - Access Credentials: Passwords, OTP codes, and private API keys are filtered and blocked from conversational memory.
4. Information We Collect & Lawful Processing Basis
In providing AI workforce and managed hosting services under contract, KKCSI processes the following:
- Account & Corporate Identity: Authorized administrator name, corporate email address, business phone number, and billing currency preference (MYR, SGD, USD).
- Knowledge Base Inputs: Product catalogs, operational SOPs, FAQ documents, and approved website URLs submitted by you for worker calibration.
- Multi-Channel Inbound Messages: Messages received via official Meta WhatsApp Business Cloud API, Website Live Chat widgets, and connected social pages for the sole purpose of real-time customer service automation.
5. Customer Ownership, Data Export & Right to Erasure
You retain full, unencumbered ownership of all intellectual property, knowledge bases, and customer conversational logs:
- 1-Click Data Portability: Administrators can export all CRM leads, knowledge vectors, and chat transcripts in standard JSON/CSV format at any time from the Client Portal.
- Right to Complete Erasure (Purge): Upon account termination or written request, you may execute an immediate purge of your database partition, vector indexes, and file storage via our Data Deletion Tool.
6. Data Protection Officer (DPO) Contact Details
For formal privacy inquiries, data subject access requests, or regulatory correspondence under Malaysia PDPA or Singapore PDPA: