Spendlight™
by Myriagon Sdn Bhd
AI Spend X-Ray · Log in
How Myriagon Sdn Bhd handles your data.
Last updated: September 2026. Data controller: Myriagon Sdn Bhd (Malaysia) · [email protected].
Spendlight™ is a product of Myriagon Sdn Bhd ("we", "us"). We are the data controller for personal data processed through this service.
(a) Account & contact data — work email, company, your role, number of staff using AI, number of departments. (b) Subscription & billing data — handled by our payment provider. (c) Aggregate AI-usage metrics — spend, model and department-level cost. (d) Seat-audit data — if you upload a member/seat export or connect GitHub Copilot, we store the per-seat summary your report shows (identifier, role, status, last-active date) so the report and its PDF keep working; nothing else from the file. We do not store your raw prompts or your AI provider API keys. To serve identical repeat requests without billing you twice, the exact-repeat cache stores the AI response (the request itself is kept only as a one-way SHA-256 hash), and you can ask us to purge it. Uploaded files are processed in memory and discarded; provider keys are passed through and never stored.
To operate the service, authenticate you, process billing, provide support, improve the product, and respond to enquiries.
We process personal data with your consent (given when you create an account or submit a form) and as necessary to provide the service, in line with the Malaysian Personal Data Protection Act 2010 (PDPA).
We share data only with service providers who help us run the service (hosting, payment processing) under confidentiality obligations. We do not sell your personal data.
We host data in a Southeast-Asia region where practicable. Some processors may operate outside Malaysia; where they do, we take reasonable steps to ensure comparable protection.
We keep account and aggregate data while your account is active and for a reasonable period afterwards (legal, tax, audit), then delete or anonymise it.
We use encryption in transit, hashed passwords, access controls, and minimal-data logging. No system is perfectly secure, but we apply industry-standard safeguards.
You may request access to, or correction of, your personal data, withdraw consent, or request deletion by emailing [email protected]. We respond within a reasonable time.
We use essential cookies only — a login session cookie and a security (CSRF) cookie. No advertising trackers.
We may update this policy; the "last updated" date will change. Material changes will be notified where appropriate.
Myriagon Sdn Bhd · [email protected].
Questions about this? Email [email protected].