Privacy
Last updated: 29 Aug 2026 · Not a DPIA. Formal DPIA sign-off is pending a design partner.
On-device extract. Receipt images are not uploaded to Waspada for cloud inference. NRIC, phone, and email are stripped on-device and re-checked at the gateway. Absolute “zero PII egress” is not claimed — scammer aliases may leave under partner policy.
What we process
- Public sandbox: processing stays in the browser. No bank notification. Public WhatsApp ingest is closed (ADV-005).
- Partner path: scrubbed threat indicators (account, BIC, optional alias/URL) under partner JWT — advisory tips only.
- We do not: freeze accounts, store receipt images as a product archive, or sell a vendor-held “we warned you” evidentiary store.
Retention
Design target for partner alert retention is 90 days (PDPA-aligned). Automated purge is not fully wired on every surface — treat retention as a pilot condition until confirmed with your engagement.