Privacy Policy

Last Updated: 1 December 2025

AgentBattery (“we”, “us”, “our”) operates a suite of software tools designed for Malaysian property agents, including CRM, WhatsApp blasting automation, project landing page builder, and agent profile page builder. We are committed to protecting your personal data and complying with all applicable privacy and data protection laws, including:

• Malaysia Personal Data Protection Act 2010 (“Malaysia PDPA”)
• European Union General Data Protection Regulation (“GDPR”)
• California Consumer Privacy Act / California Privacy Rights Act (“CCPA/CPRA”)
• Singapore Personal Data Protection Act (“Singapore PDPA”)
• Japan Act on the Protection of Personal Information (“APPI”)
• China Personal Information Protection Law (“PIPL”)

By using AgentBattery’s services, you agree to the terms in this Privacy Policy.

1. Data We Collect

We collect the following categories of personal data:

1.1 Account & Authentication Data

• Name
• Email address
• Phone number (including WhatsApp number)
• Password (securely hashed)
• Profile photo, job title, agency details

1.2 CRM & Business Data

• Leads and contacts you upload (e.g., name, phone number, email, preferences)
• Notes, tags, and activity logs
• Property listings and project information

1.3 WhatsApp Blasting Data

• WhatsApp session identifiers
• Message templates
• Message sending history
• Imported contact lists (Google Sheets, CSV, manual input)

1.4 Technical & Usage Data

• IP address
• Browser and device information
• Log files for debugging
• Cookies and similar tracking technologies
• Navigation behavior inside our apps

1.5 Payment Data (If applicable)

Handled by third-party processors (e.g., Stripe); we do not store full card numbers.

2. How We Use Your Data

We use your personal data for the following purposes:

2.1 Service Operation

• Authenticate users
• Provide access to CRM, WhatsApp blasting, landing page builders
• Generate leads through your landing pages
• Sync contacts and send WhatsApp messages per your instructions

2.2 Communication

• Send notifications, support messages, service updates, security alerts

2.3 Improvement of Services

• Usage analytics
• Product development
• Error detection and debugging

2.4 Legal Compliance

• Prevent abuse or fraud
• Respond to law enforcement requests
• Fulfil statutory obligations under PDPA, GDPR, APPI, etc.

3. Legal Basis for Processing (GDPR / APPI)

Where GDPR or similar laws apply, we process your data based on:

• Consent – e.g., for marketing communications
• Contractual necessity – to provide our CRM and blasting services
• Legitimate interest – service analytics, product improvement
• Legal obligation – complying with regulatory requirements

4. Your Responsibilities Regarding Contact Data

For CRM and WhatsApp blasting, you may upload contact data belonging to your leads or customers. You must ensure that:

• You collected such data lawfully
• You have permission to contact them (opt-in)
• You comply with WhatsApp policies and applicable regulations

We process such data only on your behalf as your data processor.

5. How We Share Your Data

We do not sell your personal data.

We may share data with:

5.1 Service Providers

• Cloud hosting (Vercel, Supabase, AWS, etc.)
• WhatsApp automation backend (self-hosted or partner infrastructure)
• Analytics providers
• Payment processors

5.2 Legal & Compliance

• When required by law
• For fraud prevention

5.3 Within Your Own Organization

If you belong to a team account or agency structure.

6. International Data Transfers

Your information may be stored or processed in countries outside your jurisdiction, such as:

• Singapore
• United States
• European Union
• Japan

We implement appropriate safeguards:

• Standard Contractual Clauses (GDPR)
• Cross-border transfer contracts (China PIPL)
• APPI-compliant transfer guidelines
• PDPA-compliant security measures

7. Data Retention

We retain data only as long as necessary:

• Account data: until your account is deleted
• CRM & blasting data: retained while you use the service
• Logs: typically 30–180 days
• Legal compliance records: as required by local law

You may request deletion at any time.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Malaysia PDPA

• Access
• Correction
• Withdrawal of consent

GDPR (EU/EEA)

• Access
• Rectification
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Object to processing

CCPA/CPRA (California)

• Right to know
• Right to delete
• Right to correct
• Right to opt-out of data sale (we do not sell data)

Singapore PDPA

• Access and correction rights

Japan APPI

• Right to request disclosure, correction, suspension of use

China PIPL

• Access
• Correction
• Deletion
• Explanation of processing
• Restriction of automated decision-making

To exercise these rights, contact us at: agentbattery.my@gmail.com

9. Cookies and Tracking Technologies

We use cookies for:

• Authentication
• Session management
• Analytics
• Security

You can disable cookies in your browser, but some features may not work.

10. Data Security

We use industry-standard measures to protect your data, including:

• HTTPS encryption
• Access control and role-based permissions
• Secure session management
• Database encryption provided by cloud vendors
• Periodic security reviews

No system is 100% secure, but we implement best practices for SaaS security.

11. Children’s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect children's data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you through email or app notifications.

13. Contact Us

If you have questions or requests about your personal data, contact:

AgentBattery Privacy Officer Email: agentbattery.my@gmail.com