Privacy Notice

WayangAI Sdn Bhd ("WayangAI", "we", "us") operates an AI co-pilot platform for Malaysian small and medium enterprises. This Notice explains how we collect, use, store, and share personal data, in accordance with the Personal Data Protection Act 2010 (as amended by Act A1727, 2024).

Account data (name, business name, email, phone), business profile data (industry, brand voice, target customers, products you upload), generated marketing content, WhatsApp conversation records (only when you connect a WABA), and analytics events. We do not collect sensitive personal data (race, religion, health) unless you provide it.

Contract performance (operating your subscription), consent (direct marketing and cross-border AI inference), and legitimate interests (fraud prevention, product analytics).

We process data in:

• Singapore — AWS ap-southeast-1 (primary app data, via Neon Postgres).
• United States — Anthropic API (AI inference). Anthropic does not train on API data.
• Singapore — Cloudflare R2 (object storage).
• Malaysia — Meta WhatsApp Cloud API (message transit; MYR billing).

Transactional records: 7 years (Companies Act + LHDN). Marketing engagement: 24 months rolling. Conversation logs: 18 months unless required for an ongoing dispute. Consent ledger: the lifetime of the contact + 12 months.

Access, correct, withdraw consent, port, and erase. Submit requests at /app/settings/privacy or email [email protected]. We respond within 21 days.

We notify the Personal Data Protection Commissioner within 72 hours of becoming aware of a breach affecting personal data. Affected data subjects are notified without undue delay.

DPO: [email protected]. Complaints to pdp.gov.my.