Privacy Notice

We will only collect, use, disclose, store or otherwise process your Personal Information when one or more of the following legal bases are met:

• •you have explicitly consented to the processing of your Personal Information;
• •processing is necessary to enter into or perform a contract with you (or your organisation) to provide Services;
• •the processing is required for compliance with a legal obligation; and/or
• •The processing is necessary for our legitimate interests (or those of a third party), provided that such processing does not override your fundamental rights and freedom. Legitimate interests may include improving our services, ensuring security, and detecting fraud.

In order for us to provide you with our enterprise products and Services, open and operate an account for you, deal with your inquiries, and/or to fulfil partly or all of the Services you request, we may need to collect, use, disclose and store (i.e. "process") Personal Information about you, including but not limited to:

• •Identity and Contact Information: Name, corporate email address, business phone number, job title, and employer details when you apply for or use our products and Services;
• •Account & Authentication Data: Account login credentials, API keys, and authentication data to establish your identity and grant access to our platforms;
• •Communication Data: Information collected from written communications when you provide feedback, submit support tickets, or request assistance.
• •Technical & Telemetry Data: Electronic data or information such as IP addresses, cookies, activity logs, API request volumes, unique device/system identifiers, and location data when you use our products, APIs, Websites, and software platforms.
• •Platform Input Data: Any personal data you or your organisation choose to submit, upload, or process through our AI platforms.

We may obtain this information from yourself and from a variety of sources, including but not limited to:

• •Through your relationship with us (e.g., when you register an account, utilise our APIs, or deploy our AI solutions);
• •Through your communications with us via email, support portals, phone, or social media;
• •From an analysis of the way you use and manage your account, software features, and APIs;
• •From any information supplied/collected when you visit our websites (including via cookies);
• •Information provided by third-party partners, service providers, or public data sources where required or permitted by law.

When you use our website and web platforms, we and our third-party service providers may automatically collect certain electronic data using cookies and similar tracking technologies (like web beacons, pixels, and device identifiers).

We use these technologies for various purposes, such as:

• •To provide the essential, basic functions of our website and platforms;
• •To authenticate you and remember your user preferences and login information;
• •To analyse how users interact with our Services, monitor site traffic/API usage, measure the effectiveness of our content, and diagnose technical issues;
• •To deliver and measure the effectiveness of advertising or informational campaigns.

You may modify your web browser settings to notify you when a cookie is being used, or to block, restrict, or delete cookies. Please note that if you choose to disable certain cookies, it may affect the availability or functionality of our Services.

Our website, products, and services may contain links to third-party websites or integrations. Information collected by third parties is governed by their privacy practices. We encourage you to familiarize yourself with those third parties' privacy policies. Calibrax accepts no responsibility or liability for third-party sites.

We may use your Personal Information for the one or more of following purposes ("Purposes"):

• •to assess your application(s)/request(s) for our enterprise products and Services;
• •to provision, manage and maintain your account(s) and API access with us;
• •to better manage our business and your corporate relationship with us;
• •to facilitate billing and payments for our Services;
• •to provide you with information on Calibrax's products, services, and offers which may be of interest to you;
• •to improve our products and services, and to test, research, analyse, and train our AI models, algorithms, and new features (Note: Where possible, data used for model training and research is aggregated or anonymized so that it no longer identifies you as an individual, in accordance with your enterprise agreements);
• •to study how you use our platforms for capacity planning and performance optimization;
• •to respond to your technical support inquiries and generally resolve disputes;
• •to update, consolidate, and improve the accuracy of our records;
• •to produce data, reports, and statistics which have been anonymised or aggregated;
• •to conduct anti-money laundering or compliance checks (if applicable);
• •for crime detection, investigation, security threat prevention, and prosecution;
• •to monitor compliance with our terms of service, API usage policies, and applicable laws;
• •to enforce and/or defend our legal rights.

Certain standard communications (such as system maintenance alerts, API deprecation notices, billing statements, or essential security updates) are necessary to ensure proper function and security. Opting out of these communications is not possible without impacting essential account functionality.

We will obtain your explicit consent before using your Personal Information for any new purposes not listed in this Policy, unless this use is otherwise required or permitted by law.

To provide, manage and operate our products and Services and/or for any of the purposes as outlined in this Privacy Notice, you consent and authorise us to disclose your Personal Information and/or your account to the following parties, as necessary:

• •Calibrax's directors, officers, and internal teams;
• •Companies acting on our behalf as agents, contractors, cloud hosting providers (e.g., AWS, Azure, Google Cloud), software vendors, and professional advisers;
• •Companies or organisations that assist us with processing transactions or providing value-added AI integrations;
• •Any person notified by you as authorised to give instructions or use the Services on your organisation's behalf;
• •Law enforcement, government, courts, dispute resolution bodies, and regulatory bodies where strictly required.

When we transfer your Personal Information outside of Malaysia as part of these disclosures, we will take reasonable steps to ensure that the recipient provides a standard of protection for your Personal Information that is comparable to the protection under the PDPA 2010.

We treat your Personal Information as private and confidential and will not disclose your information to anyone outside Calibrax except:

• •Where you have given your explicit consent;
• •Where we are required or permitted to do so by law or court order;
• •Where we may transfer rights and obligations under an agreement (e.g., in the event of a merger or acquisition).

We may use your Personal Information to send you promotional communications regarding Calibrax's AI products and services. You may opt out of marketing communications by clicking the "unsubscribe" link in the relevant email or informing us at [email protected]. Opting out of marketing will not affect our ability to send you important service-related notifications.

Your Personal Information is our asset, and Calibrax places great importance on its security. We implement robust, industry-standard technical and organisational security measures (including encryption and strict access controls) to ensure the protection, integrity, and security of your data during storage, processing, and transfer.

Our employees are trained to handle data securely. Any employee failing to comply with our privacy protocols may be subject to disciplinary action. Our third-party service providers are also required to handle Personal Information securely in accordance with applicable data protection laws.

We will retain your Personal Information for the duration of your relationship with us, for as long as your account is active, or as needed to provide you with our Services. Once your Personal Information is no longer necessary for the business purposes or legal compliance, we will take steps to securely erase, destroy, or anonymise it.

Accessing Your Personal Information

You have the right to access and correct your Personal Information in Calibrax's possession. You may make a written request to us via email. We will make a reasonable effort to respond to requests within twenty-one (21) days.

Please note that we may withhold access in certain situations, such as when we are unable to confirm your identity, where the information requested is of a confidential commercial nature, or if it compromises the security of our proprietary AI models and systems.

Exercising Your Choice Over Disclosure, Retention and Use Of Your Personal Information

If you wish to request that we no longer use your personal data or limit the usage of your personal data, you may contact us. Please note that if you decline to provide mandatory Personal Information or ask us to restrict its use, we may not be able to process your enterprise application, maintain your API access, or provide you with our software and Services.

Enquiries & Complaints

Should you have any queries, concerns, or complaints regarding this Privacy Notice, or how your Personal Information is managed, please reach out to us at [email protected]

Data Breach Notification

In the event of a data breach that exposes your Personal Information, we will take immediate steps to mitigate the damage, conduct a full investigation, and notify relevant authorities in compliance with applicable laws. If the breach results in a significant risk to your data, we will also notify you without undue delay.

Our Privacy Notice may be revised from time to time. The revised Privacy Notice will be posted on our website https://www.calibrax.ai/ and/or communicated to you via email or platform notifications. If you continue to use our services/products, you shall be deemed to have agreed to accept such changes unless you inform us otherwise.