A quiet account of what is held, how it is protected, and what it is never used for.
This page is composed for principals who prefer to read the posture in full rather than infer it. It applies across the practice — jasminelilyho.com, Protego™, Legatus™, and any future instrument that bears Jasmine's signet.
Sealed Corpus
Your file is held within a corpus reserved to your name and Jasmine's desk. It is never pooled, never anonymised into a shared dataset, never repurposed as material for another principal's reading.
Row-Level Security
Each record in the database knows whose file it belongs to and refuses to surface to anyone else. The discipline is enforced at the database itself, not at a layer above that could be circumvented.
No Model Training
Your policies, your readings, your memos, and your conversations are never used to train, fine-tune, or evaluate any artificial-intelligence model — third-party or otherwise. The craft rests on the sealed corpus and the editorial voice, not on a data harvest.
Watermarked Provenance
Every memo released from Jasmine's desk is composed on the practice's server, marked with the jasmine-lily signet on every page, and registered to its principal. The reading is yours; its provenance is unmistakable.
Only what the file requires.
The practice holds three kinds of record, and only three. First, what you compose during a Strategic Assessment — your responses to a diagnostic, the band the reading arrives at, the memo authored in Jasmine's advisory voice. Second, the documents you elect to lodge in a Protego™ or Legatus™ file — policies, schedules of assets, beneficiary registers — together with the counsel notes Jasmine appends. Third, the messages you exchange with Amanda, where you give them, so the conversation may resume with continuity rather than recommence each visit.
Nothing else is collected. There is no behavioural profile, no advertising identifier, no third-party analytics that resells traffic patterns, no engagement-scoring layer.
Sealed by row-level security; reachable to you and to Jasmine's desk only.
Every record lives in a database that enforces row-level security — a discipline that, in plain language, means each row of your file knows whose file it is and refuses to surface to anyone else. Your reading is yours. Jasmine and her desk may consult it; no other principal can. No engineer browses it; no marketing database mirrors it.
Files are kept on infrastructure with at-rest encryption and transport-layer encryption end-to-end. Access by Jasmine's desk is logged in a private audit ledger. On request, your file may be exported in full to you and removed from the practice's custody.
No training, no fine-tuning, no model-improvement — ever.
Your policies, your readings, your memos, and your conversations with Amanda are never used to train, fine-tune, evaluate, or otherwise improve any artificial-intelligence model — not a third party's model, not one of Jasmine's own. Where language-model inference is used at all (the composition of a memo in Jasmine's register, Amanda's conversational replies), the call is per-principal, contractually bound to a no-training clause, and never aggregated with another principal's file to form a corpus or an embedding index.
The practice's craft rests on the sealed corpus and the editorial voice — not on a data harvest. This posture is committed to writing, locked across every instrument, and carried forward to each future addition under the same signet.
What you can take away, and what stays sealed in the room.
Diagnostic questions. The wording of each question is core craft. It does not appear in any printable surface, any browser print preview, or any export. If you attempt File → Print on a question page, you will see a sealed-envelope notice instead. This is intentional and non-negotiable.
Composed memos. The reading is yours to keep. On the result page of any diagnostic, a single quiet link renders a watermarked PDF — composed on Jasmine's server, marked with the jasmine-lily signet on every page, registered to you. That is the only sanctioned export of a memo.
Conversations with Amanda. Amanda speaks on Jasmine's behalf in private. Transcripts are not posted, not published, not surfaced as testimonial copy, and not used to tune Amanda's replies for the next visitor.
Your right to be forgotten. Send a written request to hello@jasminelilyho.com. Your file will be removed from active custody within seven business days; backup expiry follows the standard ninety-day window.
PDPA 2010, the Bar's confidentiality discipline, and the practice's own counsel posture.
The practice operates under the Personal Data Protection Act 2010 (Malaysia) and treats medical, financial, and beneficiary data as sensitive personal data within the meaning of the Act. For matters that touch the will-and-trust drafting room (Legatus™), the additional confidentiality discipline of retained counsel applies. Where Takaful and Wasiyyah/Hibah instruments are composed, the appropriate register is observed with the appropriate counsel; the jurisprudence is invisible to the principal-facing surface, by design.
If a particular of your file requires a more detailed answer than this page provides, Amanda is in the corner of every page, and the private audience is always open.
