9.1 Ownership
You retain all ownership rights to Customer Data. You grant us a limited licence to use, store, and process Customer Data solely to provide the Service.
9.2 Your responsibilities
- The accuracy, legality, and quality of Customer Data
- Obtaining necessary consents and permissions for data collection and processing
- Compliance with data protection laws (GDPR, PDPA, etc.)
- Backing up Customer Data (we are not a backup service)
9.3 Data processing
We process Customer Data in accordance with our Privacy Policy. By using the Service, you consent to such processing.
9.4 Data Processing Agreement (DPA)
If you process personal data of individuals in the European Union, Malaysia, or other jurisdictions with data protection laws, a Data Processing Agreement may be required. For Business and Enterprise customers, a DPA is available upon request. For Basic tier customers, standard DPA terms are incorporated by reference to our Privacy Policy.
9.5 Data location
Customer Data may be stored and processed in Malaysia or other jurisdictions where we or our service providers operate. You consent to such transfer and storage.
9.6 Data retention
We retain Customer Data for the duration of your Subscription. Upon termination, you may export for 30 days; after that, we may delete Customer Data unless legally required to retain it. Deletion is irreversible.
9.7 Data security
We implement reasonable administrative, physical, and technical safeguards to protect Customer Data. However, no system is completely secure. You acknowledge the inherent risks of internet transmission and storage.
9.8 Data breaches
In the event of a data breach, we will notify you in accordance with applicable laws.