Privacy Policy
Last updated: 1 July 2026
1. What we collect
Account data (name, email, password hash), the business information and files you upload, content you and Aria create, inbound conversation data from channels you connect, usage and billing records, and basic technical logs.
2. How we use it
To provide and operate the Service, generate and manage your marketing and sales content, process payments, provide support, secure the platform, and improve the product. We process your data on the basis of your agreement to these terms and our legitimate interest in running the Service.
3. AI processing
To generate content and replies, we send relevant inputs to third-party AI providers (e.g. Anthropic, OpenAI) and other processors (e.g. content scraping, social publishing, payment). We do not sell your personal data. These providers process data under their own terms; some may be located outside Malaysia.
4. Sharing
We share data only with the service providers needed to run the Service (hosting, database, AI, payment, email, social publishing), when required by law, or to protect the Service. Each tenant’s data is isolated from other tenants.
5. Cross-border transfer
Some processors operate outside Malaysia. Where PDPA applies, we take reasonable steps so your data is handled with appropriate protection. [Confirm your transfer basis with counsel.]
6. Retention & deletion
We keep your data while your account is active and as needed for legal, billing, and security purposes. You can request access, correction, or deletion of your personal data by contacting us; we will respond within a reasonable time.
7. Security
We use industry-standard measures (encryption in transit, row-level tenant isolation, access controls). No system is perfectly secure; you are responsible for keeping your credentials safe.
8. Your rights (PDPA)
Under Malaysia’s Personal Data Protection Act you have rights to access and correct your personal data and to limit its processing. Contact us to exercise them.
9. Contact
Data protection queries: [add support/DPO email before launch].
This is a plain-language draft provided for convenience and is not legal advice. Have it reviewed by qualified counsel before public launch.