Privacy Policy

1. Who we are

Codeinfinity4AI provides AI automation, integration and web development services to businesses in Malaysia. This notice explains how we handle personal data we collect through this website and while providing our services.

2. What we collect

• Enquiry details: business name, contact person, WhatsApp number, email, industry, website, team size, current tools and the problem and outcome you describe.
• Technical data: limited logs such as IP address, browser type and request time, used for security and rate limiting.
• Demo Lab usage: which demo was used and which button was pressed, linked only to a random identifier stored in your browser. What you type into the demos stays in your browser and is not sent to us.
• Project data: information you or your business provide while we deliver a project, handled under the agreed project terms.

Please do not send passwords, identity card numbers, financial account details or your customers’ personal data through the enquiry form.

3. Why we use it

• To respond to your enquiry and arrange a consultation.
• To prepare proposals and deliver agreed services.
• To keep this website secure and prevent abuse.
• To meet legal and accounting obligations.

We do not sell personal data, and we contact you only by the methods you choose or that relate to your enquiry.

4. Service providers and AI

We use service providers such as hosting, database, email and messaging platforms (for example Meta’s WhatsApp Business Platform) to operate. Where a project uses AI models, we prefer self-hosted models or providers whose terms do not permit training on your data, and we configure workflows to send only the data a task needs. Some providers may process data outside Malaysia; where this applies we will tell you and take reasonable steps to protect it.

5. Retention

Enquiries that do not proceed are kept for up to 24 months and then deleted or anonymised. Project and billing records are kept as long as required by law or the project agreement.

6. Security

We use access controls, encrypted connections, server-side secret storage and audit logs. No system is completely secure, and we will notify affected people and authorities of significant incidents as the law requires.

7. Your rights

You may request access to or correction of your personal data, withdraw consent, or ask us to limit processing, subject to legal exceptions. Contact us using the details on our Contact page and we will respond within the time required by the PDPA.

8. Changes

We may update this policy. The date at the top shows the latest version.