1. Information We Collect

In the course of providing the Services, we may collect the following categories of personal data:

• Account and Identity Data: Name, email address, phone number, company name, and billing address.
• Financial Data: Payment card details and transaction history (processed securely via third-party payment gateways; we do not store full credit card numbers on our servers).
• Source Content Data: Audio files, video files, text documents, and any personal information inherently spoken, depicted, or written within the Source Content you upload for processing.
• Technical and Usage Data: IP addresses, browser types, device identifiers, log data, and cookies gathered automatically when you interact with our platform.

2. Purpose of Data Processing

We process your personal data strictly for the following commercial purposes:

• To fulfill our contractual obligations, including executing automated and human-verified transcription or translation Services.
• To process payments and issue invoicing.
• To communicate with you regarding order status, technical issues, or customer support.
• To comply with applicable legal, regulatory, or accounting requirements.
• For internal business operations, including quality assurance, platform optimization, and the continuous improvement of our automated processing capabilities and related technologies. Where practically feasible, data utilized for internal enhancements will be de-identified or aggregated.

3. Disclosure and Sharing of Personal Data

We do not sell your personal data. We may disclose your information, including Source Content, only to the following authorized third parties:

• Human Specialists: Vetted transcriptionists, translators, and quality assurance personnel who are strictly bound by non-disclosure agreements (NDAs) and confidentiality obligations.
• Service Providers: Third-party vendors providing essential cloud hosting (e.g., AWS, Google Cloud), payment processing, and email delivery services, who are legally bound to protect your data.
• Legal Authorities: Government bodies, law enforcement, or regulatory agencies when required by Malaysian law, court order, or subpoena to protect the rights, property, or safety of the Company or others.

4. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal data and Source Content against unauthorized access, alteration, disclosure, or destruction. However, no data transmission over the internet or electronic storage system is completely secure; therefore, we cannot guarantee absolute security and you upload Source Content at your own risk.

5. Data Retention

We retain your Account Data for as long as your account remains active or as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, and resolve disputes. Source Content and resulting Outputs are retained on our active servers for a limited period to allow you to download and review the final deliverables, after which they may be permanently deleted or securely archived in accordance with our internal data lifecycle policies.

6. International Data Transfers

Your personal data and Source Content may be transferred to, and maintained on, servers or databases located outside of Malaysia (such as global cloud infrastructure). By using the Services, you explicitly consent to the cross-border transfer of your data, provided that the Company ensures the receiving jurisdiction offers a standard of protection comparable to the PDPA.

7. Your Rights Under the PDPA

Subject to applicable Malaysian law, you possess the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate, incomplete, or outdated personal data.
• Withdraw your consent to our processing of your personal data (subject to contractual or legal restrictions), noting that withdrawal may prevent us from providing the Services.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at: