This Privacy Policy explains how PMTepi collects, uses, stores, discloses, and protects personal data when you use our website, dashboard, WhatsApp connection, API, and support channels.

Operator: PMTepi operator details pending. Registration/reference: Pending legal entity registration details. Registered address: Pending registered business address. The data controller/operator contact for privacy questions is support@pmtepi.my.

PMTepi memproses data akaun, nombor telefon, contact, mesej WhatsApp, knowledge, campaign, log AI, data teknikal dan maklumat bil untuk menyediakan serta melindungi perkhidmatan.

Data boleh diproses oleh Supabase, CHIP, hosting dan penyedia AI yang dipilih seperti Gemini atau DeepSeek, termasuk di luar Malaysia. Anda boleh meminta akses, pembetulan, penghapusan, tarik balik consent, berhenti pemasaran langsung atau salinan data melalui support@pmtepi.my atau halaman Data & privacy dalam dashboard.

Tempoh operasi lalai: mesej/log/AI 180 hari, webhook 30 hari, audit dan support 365 hari. Tempoh ini boleh berubah jika diperlukan oleh kontrak, keselamatan atau undang-undang.

Depending on how you use PMTepi, we may collect:

• Account data: name, email address, authentication identifiers, workspace role, and consent/acceptance metadata.
• Workspace data: business details, team members, invitations, settings, plan, usage, support requests, API keys, and webhook configuration.
• WhatsApp data: connected device/session identifiers, phone numbers, contacts, conversation metadata, message content, delivery status, and logs needed to provide the inbox and automation.
• Knowledge and campaign data: FAQs, URLs, prompts, templates, labels, follow-up rules, campaign recipients, and AI reply logs.
• Billing data: plan, payment status, provider purchase identifiers, invoices, and limited customer metadata. Payment credentials are handled by the payment provider.
• Technical data: IP address, browser/device information, timestamps, diagnostics, security logs, and cookie or similar session data.

We use personal data to:

• create and secure accounts and workspaces;
• connect devices, deliver messages, operate the inbox, and provide automation;
• generate AI replies when you enable an AI provider;
• process subscriptions, payments, quota, invoices, and support;
• monitor reliability, prevent fraud, investigate abuse, and protect the service;
• communicate service notices, security alerts, and account information; and
• comply with applicable law and enforce our Terms.

We do not use your WhatsApp conversations to sell advertising. We do not sell your personal data.

You choose which WhatsApp account, contacts, messages, and campaigns to connect or upload. You are responsible for telling affected people how their data will be used and for obtaining any consent or other lawful basis required to contact them.

We process connected WhatsApp data to provide the features you request. WhatsApp and Meta have their own terms and privacy policies; PMTepi is not affiliated with or endorsed by them.

We may disclose data to service providers that help us operate PMTepi, including:

• Supabase for authentication and account services;
• CHIP or another payment processor for checkout, billing, and receipts;
• the AI provider selected in your workspace, such as Gemini or DeepSeek, when generating a reply;
• hosting, database, monitoring, email, support, and security providers; and
• authorities, advisers, or successor entities where required by law, to protect rights, or as part of a corporate transaction.

Providers may process data outside Malaysia. We require appropriate confidentiality and security commitments where reasonably available, but no internet transmission or storage system is risk-free.

We use access controls, authentication, encrypted connections, operational monitoring, and other reasonable safeguards appropriate to the service. You must also protect credentials, devices, API keys, and invitations.

Our configured operational defaults are 180 days for messages, message logs and AI generations, 30 days for webhook deliveries, and 365 days for audit events and support tickets. Consent evidence and billing records may be retained longer where needed to demonstrate consent, resolve disputes, comply with tax or legal obligations, or enforce agreements. You may request deletion, but legal, fraud-prevention, backup, and operational requirements may require limited retention.

Subject to applicable law and reasonable verification, you may ask us to confirm whether we process your data, provide access, correct inaccurate data, delete data, withdraw consent, or stop certain processing such as direct marketing.

To make a privacy request, email support@pmtepi.my with the subject “Privacy Request”. We may need to verify your identity and may explain why a request cannot be completed.

PMTepi uses essential session and authentication storage, plus limited technical diagnostics, to keep the website secure and functional. You can control cookies and browser storage in your browser, but disabling essential storage may prevent login or dashboard features from working.

PMTepi is for business users and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can review and remove it where appropriate.

We may update this Privacy Policy when our processing, providers, or legal obligations change. The new version will be posted here with an updated date. Material changes may also be notified in-app or by email.

Privacy questions and data-protection requests should be sent to support@pmtepi.my.