Privacy Policy

Introduction

Nebulai is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and follow industry standards for data protection.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using our services, including name, email address, phone number, company name, and job title. This information is collected when you contact us, request consultations, or engage our services.

Technical Information

We automatically collect certain information when you visit our website, including IP address, browser type, device information, pages visited, time spent on pages, and referral sources. This data helps us improve our website and understand user behavior.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie usage, please refer to our Cookie Policy.

How We Use Your Information

We use the collected information for the following purposes:

• • Providing and delivering our AI integration services
• • Responding to your inquiries and providing customer support
• • Improving our website and services based on user feedback
• • Sending service-related communications and updates
• • Analyzing website usage to enhance user experience
• • Complying with legal obligations and protecting our rights
• • Marketing communications (only with your consent)

Legal Basis for Processing

We process your personal data based on:

• • Your explicit consent when you provide information or use our services
• • Contract performance when providing requested services
• • Legitimate business interests in improving our services
• • Legal obligations under Malaysian law

Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• • Service providers who assist in website hosting, analytics, and email communications
• • Professional advisors when necessary for legal or business purposes
• • Law enforcement or regulatory authorities when required by law
• • Business partners only with your explicit consent

All third-party service providers are contractually required to maintain the confidentiality and security of your information.

Data Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• • Encryption of data in transit using SSL/TLS protocols
• • Secure server infrastructure with access controls
• • Regular security assessments and updates
• • Employee training on data protection practices
• • Incident response procedures for potential breaches

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Inquiry data is typically retained for 24 months, client project data for 7 years to comply with Malaysian business regulations, and website analytics data for 26 months. When information is no longer needed, we securely delete or anonymize it.

Your Rights

Under the PDPA, you have the following rights:

• • Access: Request copies of your personal information
• • Correction: Request correction of inaccurate information
• • Withdrawal of Consent: Withdraw consent for processing
• • Data Portability: Request your data in a structured format
• • Erasure: Request deletion of your information (subject to legal requirements)
• • Complaint: Lodge a complaint with the Personal Data Protection Commissioner

To exercise these rights, contact us at [email protected]. We will respond to requests within 21 days as required by Malaysian law.

Marketing Communications

We may send you marketing communications about our services if you have provided consent or if we have a legitimate interest. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Opting out of marketing communications will not affect service-related communications.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from someone under 18, we will take steps to delete that information promptly.

International Data Transfers

Your information is primarily processed and stored in Malaysia. If we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your information in accordance with this policy and Malaysian law.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised. We encourage you to review this policy regularly. Significant changes will be communicated through our website or via email to registered users.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: