Privacy Notice (PDPA)

1. Who we are

AbikAI operates an AI website-building platform at abikai.com. This notice explains how we handle personal data under the Malaysian Personal Data Protection Act 2010 (PDPA).

Contact us at hello@abikai.com for any question about personal data.

2. Data we collect

We only collect what we need to run the service:

• Account. Your name, email address, WhatsApp number, and a hashed password — we never store your password itself.
• Business details. Your business name, the services you offer, your area, the tone you chose, your brand colours, and any logo or image files you upload in the wizard.
• Billing and payments. Invoice records, amounts, payment status and billing details (company name, address). Card details are handled entirely by our payment gateways and <strong class="font-semibold text-cream">no</strong> card number is stored on our servers.
• Your site analytics. Visit counts, unique visitors, WhatsApp clicks and form submissions on the website we built for you.
• Your customers' leads. The name, email, phone number and message sent through a form on your site. That data belongs to you; we keep it on your behalf.
• Technical data. Error logs, your IP address and device type, used for security and troubleshooting.

3. Why we collect it

To build and publish your website, process payments, send service-related notifications (including verification codes and renewal reminders), provide support, and meet our accounting obligations in law.

4. Who we share it with

We never sell your data. We share it with the processors the service needs:

• Hosting providers — to host the website and database.
• Payment gateways — to process invoices and payments.
• AI providers — to generate content and images from the business details you give us.
• Email and WhatsApp providers — to send verification codes, reminders and notifications.

5. Cookies

We use session cookies to keep you signed in and security tokens (CSRF) to protect our forms. We do not use third-party advertising cookies in the dashboard.

6. How long we keep it

• After the subscription ends, your site is kept for 14 days and then archived.
• The archive is kept for a further 30 days before it is deleted.
• Invoice records are kept for as long as Malaysian tax and accounting law requires.

7. Your rights

Under the PDPA you may access your personal data, ask us to correct it if it is inaccurate, restrict how it is used, withdraw your consent, and lodge a complaint with the Personal Data Protection Commissioner. To make a request, contact us using the details in section 1.

8. Security

Passwords are stored hashed, connections are protected by automatic SSL, and database access is restricted. Even so, no system is 100% secure — please use a strong password and never share your verification codes with anyone.