ISDA MEDIA PRODUCTION · PDPA 2010

How we handle your data

Short version: we keep what you gave us so we can write your audit and reply to you about it. We do not sell it, and you can have it deleted by sending one email.

What we collect, and why

Your screenshots

They are read to pull the numbers out and are not published, shared, or used to train anything. Text is extracted using Google Cloud Vision, and the report is written by a language model — both process the image to produce your report and nothing else.

How long we keep it

• Your report link — 90 days. After that it stops working.
• Screenshots are deleted automatically on a schedule, well before the report expires.
• Your contact details and the audit record stay until you ask us to delete them.

The two consents, which are separate on purpose

The box you must tick covers contacting you about your diagnosis and storing your details for that. That is all it covers.

The second box is optional and unticked. It covers occasional email about growing on Instagram. If you left it unticked you will never be added to that list, and if you ticked it you can leave any time — every one of those emails has an unsubscribe link. Not ticking it changes nothing about your audit.

Who else sees it

Nobody buys it from us. It passes through the services that make the product work: Cloudflare (hosting and database), Google Cloud Vision (reading the screenshots), the model provider that writes the report, our email provider for delivery, FormSubmit, which forwards your quiz answers to us as an email so a person sees them, and Notion, where we keep our own record so we can follow up properly.

Getting it deleted, or seeing what we hold

Message us on WhatsApp with the address you used, or your audit reference (it looks like AUD-XXXXXXXX and is at the top of your report). We will delete it, or tell you exactly what we hold, and we will do it within a week. You do not have to give a reason.