This Privacy Policy (“Policy”) explains how LEXUP, a platform wholly owned and operated by YV Management Sdn Bhd (“Company”, “we”, “us”, or “our”), collects, uses, discloses, and safeguards your personal data when you use our transcription, translation, and related services (the “Services”). This Policy is issued in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By accessing the Services, creating an account, or submitting any audio, video, or text files (the “Source Content”), you expressly consent to the processing of your personal data as described herein.
1. Information We Collect
In the course of providing the Services, we may collect the following categories of personal data:
Account and Identity Data: Name, email address, phone number, company name, and billing address.
Financial Data: Payment card details and transaction history (processed securely via third-party payment gateways; we do not store full credit card numbers on our servers).
Source Content Data: Audio files, video files, text documents, and any personal information inherently spoken, depicted, or written within the Source Content you upload for processing.
Technical and Usage Data: IP addresses, browser types, device identifiers, log data, and cookies gathered automatically when you interact with our platform.
2. Purpose of Data Processing
We process your personal data strictly for the following commercial purposes:
To fulfill our contractual obligations, including executing automated and human-verified transcription or translation Services.
To process payments and issue invoicing.
To communicate with you regarding order status, technical issues, or customer support.
To comply with applicable legal, regulatory, or accounting requirements.
For internal business operations, including quality assurance, platform optimization, and the continuous improvement of our automated processing capabilities and related technologies. Where practically feasible, data utilized for internal enhancements will be de-identified or aggregated.
3. Disclosure and Sharing of Personal Data
We do not sell your personal data. We may disclose your information, including Source Content, only to the following authorized third parties:
Human Specialists: Vetted transcriptionists, translators, and quality assurance personnel who are strictly bound by non-disclosure agreements (NDAs) and confidentiality obligations.
Service Providers: Third-party vendors providing essential cloud hosting (e.g., AWS, Google Cloud), payment processing, and email delivery services, who are legally bound to protect your data.
Anti-Bot Protection: We use Cloudflare Turnstile, an invisible background check, to protect our upload, conversion, and payment features from automated abuse. It runs without puzzles or tracking cookies and processes limited browser and network signals solely to distinguish genuine visitors from bots; your files and documents are never shared with Cloudflare. Details of the limited data Cloudflare processes on our behalf are set out in the Cloudflare Turnstile Privacy Policy.
Legal Authorities: Government bodies, law enforcement, or regulatory agencies when required by Malaysian law, court order, or subpoena to protect the rights, property, or safety of the Company or others.
4. Data Security
We implement commercially reasonable administrative, technical, and physical security measures to protect your personal data and Source Content against unauthorized access, alteration, disclosure, or destruction. However, no data transmission over the internet or electronic storage system is completely secure; therefore, we cannot guarantee absolute security and you upload Source Content at your own risk.
5. Data Retention
We retain your Account Data for as long as your account remains active or as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, and resolve disputes. Source Content and resulting Outputs are retained on our active servers for a limited period to allow you to download and review the final deliverables, after which they may be permanently deleted or securely archived in accordance with our internal data lifecycle policies.
6. International Data Transfers
Your personal data and Source Content may be transferred to, and maintained on, servers or databases located outside of Malaysia (such as global cloud infrastructure). By using the Services, you explicitly consent to the cross-border transfer of your data, provided that the Company ensures the receiving jurisdiction offers a standard of protection comparable to the PDPA.
7. Your Rights Under the PDPA
Subject to applicable Malaysian law, you possess the right to:
Request access to the personal data we hold about you.
Request correction of inaccurate, incomplete, or outdated personal data.
Withdraw your consent to our processing of your personal data (subject to contractual or legal restrictions), noting that withdrawal may prevent us from providing the Services.
8. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:
YV Management Sdn Bhd (LEXUP)
Room 32, WORQ TTDI, Lot3A-01A, Level 3A, Glo Damansara Shopping Mall, 699, Jln Damansara, Taman Tun Dr Ismail, 60000 Kuala Lumpur