Privacy Policy

Definitions

This section defines the key terms used in this privacy policy to help you understand how data is described and handled.

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, phone number, business identifier, or technical identifiers linked to an individual using our services.

Processing refers to any operation performed on personal data, including collection, storage, organization, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction, carried out by AIHubBina or on its behalf.

User refers to any individual who visits AIHubBina.pro, uses our software integrations, interacts with our automation services, or provides data to AIHubBina as a client, partner, or prospective customer.

Service refers to the AI software integration and automation solutions, including consulting, configuration, APIs, hosted components, and maintenance services offered by AIHubBina to enterprise and business users.

Cookies are small text files stored on a user device by a website or application to record preferences or activity. We use cookies and similar technologies to enable site functionality, measure usage, and support performance and security.

Purposes of Processing

AIHubBina processes personal data to provide, maintain and improve our AI integration and automation services, to communicate with users, and to ensure secure and compliant operations.

• Service delivery: to configure, deploy and operate integrations and automation workflows according to customer instructions and contractual terms.
• Account administration: to create and manage accounts, user roles, billing, and to communicate important service-related information.
• Support and maintenance: to diagnose issues, provide technical support, implement updates and maintain system availability.
• Security and fraud prevention: to detect, contribute and respond to security incidents, breaches and abusive behavior affecting our services.
• Product improvement: to analyze aggregated usage data and feedback to improve features, stability and compatibility of our solutions.
• Compliance and legal obligations: to comply with applicable laws, resolve disputes, and cooperate with regulators where required.
• Marketing and communications: where consent is given, to send informational updates, newsletters or event invitations related to our services.
• Research and development: to responsibly evaluate technical performance and potential enhancements, using de-identified or aggregated data where feasible.

Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) or similar frameworks apply, we rely on specific legal bases for processing personal data, depending on the purpose and context.

• Contractual necessity: processing necessary to perform a contract with a client, such as delivering integration services and support.
• Legitimate interests: processing for purposes such as security, fraud prevention, service improvement and internal administration where these interests are not overridden by individual rights.
• Consent: where required by law, processing is based on a user’s consent for specific activities, such as marketing communications or optional analytics.
• Legal compliance: processing necessary to comply with legal obligations, regulatory requests or to establish, exercise or defend legal claims.

GDPR and Data Subject Rights

This section summarizes rights available to individuals under the GDPR where it applies. AIHubBina supports requests to exercise these rights and provides mechanisms to respond within applicable legal timeframes.

• Right of access: you may request a copy of personal data we hold about you and information about how it is processed.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: in certain circumstances you may request deletion of personal data we hold about you.
• Right to restrict processing: you may request limitation of processing in specific situations while a dispute is resolved.
• Right to data portability: where processing is based on consent or contract and it is technically feasible, you may request a portable copy of your data.
• Right to object: you may object to processing activities based on legitimate interests or direct marketing; we will assess and respond in line with applicable law.

Cookies and Tracking

AIHubBina uses cookies and similar technologies on AIHubBina.pro to enable essential functionality, measure usage and improve service performance. Cookies do not typically store sensitive personal data.

We utilize session cookies for functionality, persistent cookies for preferences, and third-party cookies for analytics and performance measurement. Cookies are managed in accordance with user consent where required.

Cookie categories include strictly necessary (operational), performance and analytics (usage measurement), and functional (preferences). Third-party cookies may be set by analytics or hosting providers.

You can manage cookie preferences via your browser settings and, where offered, the cookie consent tool on our site. Disabling certain cookies may affect usability of some features.

For more details about the cookies we use, see the Cookie Policy on AIHubBina.pro.

Data Sharing and Disclosure

AIHubBina shares personal data with service providers, partners and legal authorities only as necessary for operations, contractual obligations, or legal compliance. We limit access to authorized parties and use contractual safeguards.

• Service providers: cloud hosting, analytics, payment processing, onboarding tools and security vendors who process data on our behalf under agreements that restrict use.
• Professional advisors: auditors, legal counsel, accountants and consultants who assist with business operations and compliance matters under confidentiality obligations.
• Integration recipients: systems and third-party platforms that customers authorize to connect to AIHubBina integrations and automation workflows.
• Business transfers: in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of the transaction subject to appropriate protections.
• Legal authorities: where disclosure is required by law, regulation, or court order, or to protect the rights, property or safety of AIHubBina, its users, or others.
• Aggregated and anonymized data: we may share de-identified usage statistics and technical metrics that do not identify individuals for research and product development purposes.

International Data Transfers

AIHubBina may transfer personal data to jurisdictions outside your country for processing by our service providers or partner systems. Transfers are conducted in accordance with applicable laws and with appropriate safeguards.

We implement contractual safeguards such as standard contractual clauses, data processing agreements, and where applicable rely on approved transfer mechanisms. We also assess third-party processors for adequate protections.

Data Retention

AIHubBina retains personal data only as long as necessary to fulfill the purposes for which it was collected, to satisfy legal or regulatory obligations, and to resolve disputes or enforce agreements.

Account information and administrative records are typically retained for the duration of the customer relationship and for a reasonable period afterwards to meet billing, audit and contractual requirements.

Support tickets, communications and project records are retained as needed to provide ongoing support, document service delivery and for compliance with record-keeping obligations.

Technical logs and telemetry used for troubleshooting and security monitoring are retained according to operational needs and internal retention schedules, then deleted or aggregated where feasible.

When retention periods expire or upon valid data deletion requests, we will remove or anonymize personal data in our systems except where legal holds or overriding obligations require continued retention.

Security Measures

AIHubBina maintains administrative, technical and physical measures designed to protect personal data against unauthorized access, misuse, alteration and disclosure. Security practices are reviewed periodically and adapted to evolving threats.

• Access controls: role-based access, multi-factor authentication for administrative accounts, and least-privilege principles to limit data access.
• Encryption and secure communication: encryption in transit (TLS) and encryption at rest for sensitive data elements where appropriate.
• Monitoring and incident response: continuous monitoring, logging of security events, and an incident response process to contribute and remediate security issues promptly.

Your Rights

Depending on your jurisdiction, you have specific rights related to your personal data. AIHubBina provides channels to exercise these rights and will respond in accordance with applicable legal requirements.

• Access: request confirmation of processing and a copy of personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion of personal data where legal grounds allow.
• Restriction and objection: request limitation or object to certain processing activities, including processing based on legitimate interests.
• Portability: request export of personal data provided in a structured, commonly used machine-readable format when applicable.
• Withdrawal of consent: where processing is based on consent, you may withdraw consent at any time without affecting processing already carried out lawfully.
• Request restriction of processing when accuracy of personal data is contested or processing is unlawful but retention is disputed.
• Right to withdraw consent for processing activities that are based on consent, without affecting lawfulness of past processing.

How to exercise your privacy rights

To exercise any of the rights described, contact AIHubBina by email or post with a clear description of the request and sufficient information to identify you. We may request additional verification information before fulfilling sensitive requests. Requests are handled in accordance with applicable Malaysian data protection laws and internal procedures.

[email protected]

We aim to respond to verifiable requests within a reasonable timeframe consistent with applicable law, typically within 30 days of receipt. Complex requests may require additional time, in which case we will notify you of the expected timeline.