Answers have a defined information source
Sembang uses approved business information and links to relevant sources. New source content is reviewed before publication. The answer workflow includes source checking and a fallback when there is insufficient information.
These controls do not guarantee that every answer is correct. Confirm important details with your business, review reported errors and keep the approved content current. The assistant should not be treated as an authority for decisions outside its agreed informational scope.
Staff access is separate from visitor access
Visitors use the public website assistant. Staff use a private workspace with authentication and role checks to review enquiries and manage the agreed content workflow. Decide which members of your team need access and who is responsible for reviewing requests.
Cloudflare hosting and AI processing
The application is hosted on Cloudflare, with business enquiry records stored in Cloudflare D1. The public assistant and private management workspace are separate, and database access is checked against the business and assistant identity. Cloudflare hosting does not establish a Malaysia-only data location.
The answer workflow sends questions and relevant approved source material to OpenAI for processing. Guided enquiry form fields are handled separately and are not included in those model requests. Requests ask OpenAI not to store generated responses; this is not a guarantee of zero provider retention. Avoid putting sensitive information in general chat questions.
How enquiry retention works
In the standard application, acknowledged enquiry details can be saved while a visitor is still completing the form. Saved partial and completed enquiries do not have an automatic expiry: they remain available until an authorised administrator deletes them.
Administrator deletion clears the saved answers and visitor access token. A minimal deletion record remains to prevent an old browser submission from recreating the enquiry. Closing a browser tab does not delete details already saved for staff review.
Separate housekeeping removes eligible unanswered-question review records older than 30 days and audit records older than 180 days. These are application cleanup rules, not the enquiry retention period or a promise about provider backups. Businesses should arrange regular enquiry review and deletion appropriate to their needs.
Collect only the information needed for follow-up
Agree the enquiry fields during setup and explain their purpose to visitors. Avoid requesting passwords, payment credentials or unnecessary sensitive information through general enquiries. Your staff should have a clear process for handling access, correction and deletion requests. Contact our team if you need a different retention workflow.
Marketing-site privacy and product enquiries
The demo form on this marketing website and the enquiries collected by a configured business assistant are different flows. The marketing-site privacy notice explains how demo requests and optional website analytics are handled.
For questions about the product’s suitability for your data or workflow, contact sembang@group.my. Requirements beyond an informational corporate website need a sales discussion.



