Privacy Policy

Introduction

This Privacy Policy describes how AtlasFlux AI ('the Platform', 'we', 'us', or 'our') collects, uses, discloses, and protects your personal data. We are committed to safeguarding your privacy and handling your data in a transparent and lawful manner in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

2. Information We Collect

3. How We Use Your Information

We process your personal data for the following purposes:

• To provide, maintain, and improve the Platform, including personalized features.
• To process transactions and manage your credit/MYR wallet balance.
• To communicate with you, including service updates, security alerts, and support messages.
• To monitor and analyse usage trends to enhance the AI model selection and overall user experience.
• To detect, prevent, and address fraud, abuse, and other harmful activities.
• To comply with legal obligations, such as responding to lawful requests from public authorities.

4. Data Sharing and Disclosure

We do not sell, rent, or lease your personal data to third parties. We may share your information with the following service providers who help us operate the Platform:

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Chat history and generated content are stored until you delete your account, after which they are permanently erased within thirty (30) days. Credit and transaction logs are retained for a minimum of seven (7) years for accounting and legal purposes.

6. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights:

• Right of access: Obtain confirmation as to whether and what personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (subject to exceptions).
• Right to restrict processing: Request limitation of how we use your data.
• Right to data portability: Receive a copy of your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us via the contact form. We will respond within thirty (30) calendar days.

7. Children's Privacy

The Platform is not intended for individuals under the age of thirteen (13) (or the applicable digital consent age in your country). We do not knowingly collect or solicit personal information from children. If we become aware that a child has provided us with personal data, we will take prompt steps to delete such information and terminate the account.