Responsible
Talniri Ltd (Israel), operator of PPLI.com.
What for
To answer your enquiries, run the research assistant and adviser accounts, send the briefing you asked for and measure how the site is used.
Your control
You can withdraw consent, switch off analytics and ad measurement at any time, and ask to see or correct your data; in the EEA, the UK and Switzerland analytics also runs by default, while ad measurement stays off until visitors agree.
01Who is responsible
PPLI.com is owned and operated by Talniri Ltd, a company incorporated in Israel. Talniri Ltd is the organisation responsible for the personal data described here. When we collect personal data from people in Singapore, we follow the Personal Data Protection Act 2012 (PDPA), as amended in 2020, and its regulations.
PPLI.com is an educational research website on private placement life insurance, published in 11 editions. We do not sell insurance and we do not give personal financial, tax or legal advice.
Talniri Ltd itself is governed by Israel's Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and is supervised by the Israel Privacy Protection Authority.
As the PDPA requires (section 11), we have designated a Data Protection Officer. You can reach the DPO at info@ppli.com. We do not publish a postal address.
02What we collect
Enquiry and consultation forms
Your name, email address and country of tax residence. If you choose to add them: telephone number, investable-asset range, topic and a free-text message. We use these to answer your enquiry and to follow it up.
AI research assistant ("Concierge")
The messages you type and the answers you receive, the planning answers you select, a session identifier and timestamps. If you ask us to follow up, also your name, email address and any note you add. Section 09 explains how the assistant works.
Professional (adviser) accounts and the 14-day trial workspace
Name, email address, firm, role, country, experience and the access you request. The content you save in the workspace: client references, planning facts, analyses, tasks, messages and course progress. Login and audit records, including IP address.
Email briefing
If you subscribe: your email address, your name if you give it, and your subscription status. Every email carries an unsubscribe link.
Technical data
Our server logs record IP address, browser and device data, the pages requested and the referring page. We derive an identifier from the IP address to limit repeated requests, and we read approximate country and city hints from network headers to show the right edition.
Your cookie choice
When you make a cookie choice, we store it with a random identifier, the language edition, your time zone, the banner version, the page path and the time. The record holds no name, no email address and no full IP address.
03Purposes and consent
The PDPA allows us to collect, use and disclose personal data only with your consent or where the Act permits it without consent (section 13), and only for purposes a reasonable person would consider appropriate (section 18). We tell you those purposes on or before collection (section 20), which is what this section does. When you submit a form or a message for a stated purpose, you are deemed to consent to its use for that purpose (section 15).
| Purpose | Data | Basis under the PDPA | Retention |
|---|---|---|---|
| Answering enquiries and following up | Form data, correspondence | Consent, including deemed consent when you submit the form (ss 13, 15) | Up to 3 years after last contact |
| Running the AI research assistant | Messages, answers, session data, follow-up details | Deemed consent when you use the assistant (s 15) | Up to 12 months |
| Adviser accounts and trial workspace | Account data, saved content, login and audit records | Consent and deemed consent for the account you open (ss 13, 15) | While active; deleted within 12 months of closure or trial expiry |
| Email briefing | Email, name, subscription status | Consent given when you subscribe (s 13) | Until you unsubscribe |
| Operating and securing the site | Server logs, rate-limit identifier | Legitimate interests exception to consent | Up to 90 days |
| Recording your cookie choice | Consent record | Needed to honour your choice and show it was given | 3 years |
| Audience measurement | Google Analytics cookies and events | Consent on notice, which you can withdraw in Cookie settings (ss 15, 16) | At most 14 months at Google |
| Advertising measurement | Google Ads cookies and conversion events | Consent on notice, which you can withdraw in Cookie settings (ss 15, 16) | Cookies 90 days |
We will ask for fresh consent before using your data for a purpose not listed here.
04Cookies
We use a small number of cookies and browser storage entries. Some are needed for the site to work. Others measure which pages are read and whether our advertising leads to visits and enquiries.
The EEA, the UK and Switzerland are the only places where a notice is shown on the first visit. It says that analytics is on and can be switched off, and asks whether the visitor agrees to advertising measurement. In every other country, as in Singapore, measurement runs by default and can be switched off at any time in Cookie settings. If you save a refusal, we respect it on every later visit.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
ppli_consent_v2 | PPLI.com (localStorage) | Stores your cookie choice | 180 days, then we ask again | Essential |
ppli_consent_rid | PPLI.com (localStorage) | Random ID linking your choice to its record | Until you clear it | Essential |
wordpress_logged_in_*, wordpress_sec_* | PPLI.com (cookies) | Keep adviser accounts signed in and secure | Session, or 14 days with "remember me" | Essential |
| Assistant session keys | PPLI.com (localStorage) | Let the AI assistant resume your conversation | Until you clear them | Essential |
ppli.wi.* | PPLI.com (localStorage) | Remembers the figures you typed into the calculators, on your device only | Until you clear them | Essential |
_ga, _ga_9RFL3MCGJS | Google Analytics (cookies) | Distinguish visits and measure which pages are read | 2 years | Analytics |
_gcl_au, _gcl_aw | Google Ads (cookies) | Measure whether our adverts lead to visits and enquiries | 90 days | Advertising |
When advertising measurement is allowed, Google may also set cookies on its own domains. We do not use personalised advertising or remarketing to individuals. A Global Privacy Control signal from your browser is honoured as an opt-out of advertising measurement.
We use Google Consent Mode. If you switch measurement off, Google tags still send cookieless signals without identifiers, which Google uses for aggregate modelling. They set no cookie and carry no ID that recognises you on a later visit.
To change your choice, use the "Cookie settings" link in the footer of every page or this button:
05Who receives data
We disclose personal data only to these recipients, and only as far as each needs it:
- Our web hosting provider, which stores the site, the server logs and the databases.
- Google, for Google Analytics measurement, Google Ads conversion measurement, Google Fonts and YouTube videos embedded on some pages.
- Anthropic PBC (USA), which processes assistant conversations to generate replies.
- Our email service provider or providers, for replies and the email briefing.
- Professional advisers such as lawyers and accountants, where needed.
- Authorities, where the law requires it.
We do not sell personal data. We do not use your data to train AI models, and under its commercial terms Anthropic does not train its models on our API data.
Do Not Call
We do not make marketing calls or send marketing text messages. We contact you by telephone only if you gave us your number and asked us to call about your enquiry.
06Transfers outside Singapore
Data is processed in Israel, where Talniri Ltd operates, and by providers in the United States and other countries. Section 26 of the PDPA allows such transfers only where the recipient is bound to protect the data to a standard comparable to the PDPA. We rely on the recipients' contractual commitments and their own legal obligations, such as Israel's Protection of Privacy Law, whose adequacy is recognised by the European Commission and the UK, and the EU-US Data Privacy Framework for certified US providers.
07How long we keep data
We stop keeping personal data once it no longer serves the purpose for which it was collected and we have no legal or business reason to keep it (section 25). In practice:
- Enquiries and related correspondence: up to 3 years after the last contact, unless a client relationship follows that requires longer, or the law requires longer.
- AI assistant conversations: up to 12 months.
- Adviser accounts and workspace content: while the account is active, then deleted within 12 months of closure or of trial expiry without conversion. Trial users can ask for earlier deletion.
- Email briefing: until you unsubscribe. We keep the unsubscribe record so that we honour it.
- Server logs: up to 90 days. Consent records: 3 years.
- Google Analytics: Google keeps measurement data for the retention period set in our account, at most 14 months.
- Backups roll over and are overwritten on a rolling basis.
08Your rights
Email the DPO at info@ppli.com. We respond to access and correction requests as soon as reasonably possible and within 30 days. If we need longer, we will tell you within 30 days when we expect to respond. We may ask you to confirm your identity. Correction is free. If an access request would involve a fee, we will give you a written estimate before we charge anything.
If you are not satisfied with our response, you may complain to the Personal Data Protection Commission at pdpc.gov.sg. Writing to our DPO first usually resolves a concern faster.
09AI assistant and automated replies
The Concierge assistant answers research questions about private placement life insurance. Its replies are generated automatically through the API of Anthropic PBC in the United States, and the conversation is stored on our server. Transcripts can be sent to the PPLI.com team so that a person can follow up.
The answers are automated research support. They are not financial, tax or legal advice and they do not take account of your circumstances. No decision with legal or similarly significant effect is made about anyone by automated means.
Avoid typing information you would not want stored, such as NRIC numbers, account numbers or details of other people. Conversations are kept for up to 12 months, and you can ask us to delete yours sooner.
10Security and breaches
We protect personal data with reasonable security arrangements (section 24): access controls, two-factor authentication on administrative accounts, encrypted connections (HTTPS), request rate limits and daily backups. No system is perfectly secure.
If we suspect a data breach, we assess it promptly. Where a breach is notifiable under Part 6A of the PDPA, because it is likely to cause significant harm or affects 500 or more people, we notify the PDPC no later than 3 calendar days after establishing that it is notifiable, and tell affected individuals where the Act requires.
11Children
PPLI.com is not directed to anyone under 18, and we do not knowingly collect their personal data. If you believe a young person has sent us data, write to us and we will delete it.
12Changes to this policy
We update this policy when our practices or the law change. The effective date and version number at the top show the current text. If a change affects how we use data you have already given us, we will tell you before it takes effect, and where consent is needed we will ask for it again.
13Contact and DPO
Talniri Ltd · PPLI.com · Data Protection Officer
Email: info@ppli.com
Tell us whether you want access, correction or to withdraw consent, and give the email address you used with us. We respond within 30 days, or tell you within that time when we will.