Privacy Policy

[Company legal name] runs AIGO and is responsible for your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). Contact for privacy questions: [privacy email].

• Account details: your name, email and password (stored only as a secure hash by our sign-in provider), and, if you add them, your business name and phone number.
• What you create: chats and the replies, prompts, uploaded photos and files, images, posters, websites, blog posts, videos and voice recordings you send for transcription.
• Visitor data: if you chat without an account, a random visitor ID, a device cookie, and a one-way hash of your IP address, used only to apply the free limits and stop abuse.
• Usage: credits used, daily tasks completed, and visits to your shared links (counted with one-way hashes, not names).
• Payments: order number, plan, amount, coin and status from NOWPayments. We never see or store your wallet keys.
• Devices: the browser and device type of each signed-in session (shown to you in Settings, Security) and basic security logs.
• Earn and identity check: only if Earn opens and you join it, the identity documents and payout details needed for the check (KYC).

• To run AIGO for you: answer chats, make what you ask for, save your work, and publish what you choose to share.
• To apply plans, credits and free limits, take payments, and keep records the law requires.
• To keep AIGO safe: prevent abuse, fraud and attacks, and review reported content.
• To contact you about your account, and, only if you turn it on in Settings, about product news.
• We do not sell your personal data. We do not use your chats to train AI models without your consent [consent policy to confirm].

Your data is stored with Supabase in Singapore. AIGO's app runs on our own server [hosting provider and region to confirm]. To do the work you ask for, we send the needed content (for example, your prompt or a photo you uploaded) to these providers, who process it on our behalf:

Deep Research sends your search words to web search engines through our own search service. Some providers are outside Malaysia; we send them only what a task needs, under agreements that require them to protect it.

• Sign-in cookies keep you signed in (and keep a visitor's chat on the same device).
• Device cookie (aigo_did, about 13 months) counts the free visitor limits.
• Security cookies from Cloudflare help block bots and attacks.
• We do not use advertising or cross-site tracking cookies.

• Visitor chats from people who never sign up: deleted after 30 days.
• IP hashes used for daily limits: deleted after 7 days.
• Your account and creations: while your account is open.
• After you ask to delete your account: removed after review within [period to confirm], except payment records we must keep by law for [period to confirm].

Under the PDPA you can:

• see and get a copy of your data: Settings, Privacy and data, Download my data;
• correct it: Settings, Profile;
• stop product emails: Settings, Notifications;
• ask us to delete your account: Settings, Privacy and data, Delete my account;
• withdraw consent or complain: write to [privacy email].

If you are not happy with our answer, you can contact Malaysia's Personal Data Protection Department (Jabatan Perlindungan Data Peribadi).

Data is encrypted in transit, and each member can only read their own records. No system is perfectly secure; we will tell you and the authorities about a breach that affects you as the law requires. AIGO accounts are not for anyone under [18].

We will show the new date at the top when this policy changes, and tell members before a change that affects how we use their data. See also the Terms of Service.