Privacy Policy

Information We Collect

We may collect and process the following information:

• Account information, including name, email address, company name, subscription details, and billing information.
• Text transcripts generated from voice and chat interactions.
• Lead, booking, order, customer support, and other information voluntarily provided during conversations.
• Browser-based identifiers used to recognize returning users and maintain service continuity.
• Affiliate or referral identifiers used to attribute registrations and conversions to referral partners.
• Technical information necessary for operating and securing the platform.

Voice Processing

myDigiStaff provides AI-powered voice and conversational services. When a user interacts with a voice agent:

• Audio is temporarily received and processed for speech recognition and response generation.
• Audio may be transmitted to authorized AI service providers, including Google Gemini, solely to process the user's request.
• Audio recordings are not stored, archived, or retained by myDigiStaff. After processing is complete, audio is discarded.
• Spoken content may be converted into text transcripts to provide conversation history, service continuity, analytics, and customer support functionality.

Only text transcripts may be retained as part of the service.

AI Processing

To generate responses, myDigiStaff may process:

• User conversation transcripts.
• Tenant-provided knowledge base content.
• Tenant vector database data and related contextual information.

This information may be transmitted to authorized AI service providers, including Google Gemini, solely for the purpose of generating responses and operating the service. We do not knowingly permit customer data to be used to train public AI models.

Browser Storage and Identifiers

We may use browser Local Storage or similar technologies to store:

• A unique user identifier for recognizing returning users.
• Session-related information required for service functionality.
• Affiliate or referral identifiers used for attribution purposes.

These identifiers do not contain conversation content and are used solely for platform functionality, service continuity, and referral tracking. Users may remove these identifiers through their browser settings.

How We Use Information

We use information to:

• Provide AI voice and conversational services.
• Generate responses using tenant knowledge bases and vector data.
• Display conversation history and transcripts.
• Process subscriptions and payments.
• Recognize returning users.
• Attribute referrals and affiliate registrations.
• Monitor performance, security, and reliability.
• Comply with legal and regulatory obligations.

Data Controller and Data Processor Roles

For personal data collected through customer-operated AI agents:

• The customer or tenant acts as the Data Controller.
• myDigiStaff acts as the Data Processor and processes information only on behalf of the tenant.

Individuals seeking access, correction, deletion, or other rights regarding conversation data should contact the relevant tenant directly. Where required, myDigiStaff will reasonably assist tenants in fulfilling such requests.

Sharing of Information

We may share information with trusted service providers that assist in operating the platform, including:

• AI service providers.
• Cloud hosting and infrastructure providers.
• Payment processors.
• Security and monitoring providers.

These providers are authorized to process information only as necessary to perform services on our behalf. We do not sell personal data.

International Data Transfers

Because our service providers may operate in multiple countries, information may be processed or stored outside Malaysia and outside the user's country of residence. Where appropriate, we implement reasonable safeguards designed to protect personal data during such transfers.

Data Retention

We retain information only for as long as necessary to provide the service, maintain customer accounts, fulfill contractual obligations, comply with legal requirements, and resolve disputes.

• Audio recordings are not retained after processing.
• Text transcripts may be retained according to tenant settings and operational requirements.
• Browser identifiers and referral tokens may remain active until expiration, deletion by the user, or account termination.

Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. While we strive to protect information, no method of transmission or storage can be guaranteed to be completely secure.

Your Rights

Subject to applicable law, individuals may have the right to:

• Request access to personal data.
• Request correction of inaccurate information.
• Request deletion of personal data.
• Object to or restrict certain processing activities.
• Request information regarding how personal data is processed.

Requests regarding conversation data should generally be directed to the relevant tenant acting as Data Controller.

Children's Privacy

Our services are not intended for children under the age required by applicable law. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page together with the revised effective date.