Privacy Notice

This Privacy Notice explains how [SELLER LEGAL NAME] (“we”, “us”, “our"), based in Malaysia, collects, uses, stores and shares personal data when you use the Web Salesperson platform (“Service”).

1. Data Controller

[SELLER LEGAL NAME] is the data controller for personal data processed through the Service. If you have questions about this notice or how we handle your data, please contact us through our Contact page.

2. Categories of personal data we collect

• Account data: name, email address, password hash, and profile information.
• Contact & lead data: phone number, company name, business type, and nature of business collected via chat or forms.
• Usage data: pages visited, chat interactions, feature usage, and device identifiers.
• Technical data: IP address, browser type, operating system, referral source, and cookies.
• Support data: messages, tickets, and communication history.

3. Purposes and legal basis

We process personal data for the following purposes:

• Providing the Service — account creation, website hosting, AI assistant functionality, and customer support (contract performance).
• Improving the Service — analytics, product development, and bug fixing (legitimate interests).
• Security & fraud prevention — protecting accounts and detecting abuse (legitimate interests and legal obligation).
• Marketing — sending updates and promotional communications, only with your consent where required (consent).
• Legal compliance — tax, accounting, and regulatory obligations (legal obligation).

4. Data sharing

We share personal data with the following categories of recipients:

• Service providers: hosting, analytics, customer support, and email delivery providers.
• Merchant of Record: Paddle processes payments, subscriptions, tax compliance, invoicing, and related customer service for sales made through the Service.
• Professional advisers: legal, accounting, and audit professionals where necessary.
• Authorities: regulators, courts, or law enforcement when required by law.

5. International transfers

Some of our service providers operate outside Malaysia. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data.

6. Data retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymise it.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

We aim to respond to requests within one month. To exercise your rights, please contact us through our Contact page.

8. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, and regular security reviews.

9. Cookies

We use cookies and similar technologies to operate the Service, remember preferences, analyse usage, and support security. Essential cookies are required for the Service to function. Analytics and marketing cookies are used only with your consent where required.

10. Children's privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will post the revised version on this page with an updated date.

12. Contact us

If you have any questions about this Privacy Notice or our data practices, please contact us through our Contact page.