Privacy Policy
This Privacy Policy explains how Kairableu Sdn Bhd (“we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data when you use Kairableu (the “Service”), including our website, web application, and related features.
We are committed to protecting personal data in line with the Malaysian Personal Data Protection Act 2010 (“PDPA”) and applicable laws. By using the Service, you acknowledge that you have read this Privacy Policy.
1. Who we are
Kairableu Sdn Bhd operates Kairableu, a multi-tenant platform for marketing and customer messaging (including WhatsApp and email), contact management, automation, and related tools.
2. Personal data we collect
Depending on how you use the Service, we may collect:
- Account and profile data: name, email address, phone number, company name, login credentials, role, and preferences.
- Billing and credit data: billing contact details, purchase history, and credit usage (processed by us or payment partners as applicable).
- Contact and messaging data: information you upload or import about your end customers or recipients (for example names, phone numbers, email addresses, tags, segments, and message delivery status).
- Usage and technical data: IP address, device and browser type, approximate location derived from IP, timestamps, pages viewed, diagnostic logs, and security-related events.
- Communications: messages you send to our support team and feedback you provide.
We do not knowingly collect personal data from children for marketing purposes. The Service is intended for businesses and authorised users.
3. How we use personal data
We use personal data to:
- Provide, operate, maintain, and improve the Service;
- Create and manage accounts, authenticate users, and enforce access controls (including multi-tenant isolation between customer accounts);
- Process messaging you initiate (for example routing WhatsApp or email through our infrastructure and integrated providers);
- Manage credits, subscriptions, and billing where applicable;
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
- Comply with legal obligations and respond to lawful requests;
- Send service-related notices (for example security alerts, policy updates, and transactional messages); and
- Analyse aggregated or de-identified usage to improve product experience, where permitted.
4. Legal basis and consent
Where the PDPA requires consent for processing, we obtain consent at collection or as otherwise permitted by law. You may withdraw consent for optional communications or certain processing where withdrawal does not prevent us from providing core functions you have contracted for. Withdrawal may limit specific features.
We may also rely on other legitimate grounds under the PDPA, such as performing a contract with you, compliance with law, or protecting vital interests, where applicable.
5. Disclosure and processors
We may share personal data with:
- Infrastructure and hosting providers that store or process data on our behalf;
- Messaging and communications providers (for example WhatsApp messaging via Twilio and email delivery via Mailgun or similar), solely to deliver messages you configure;
- Payment processors, if you purchase credits or paid plans;
- Professional advisers (lawyers, auditors) where required; and
- Authorities when required by law or to protect rights, safety, and security.
We require subprocessors to protect personal data appropriately and use it only for the purposes we specify.
6. International transfers
Your data may be processed in Malaysia and in other countries where our service providers operate. Where personal data is transferred outside Malaysia, we take steps that are consistent with the PDPA and our contractual commitments, including appropriate safeguards where required.
7. Retention
We retain personal data only as long as necessary for the purposes described, unless a longer period is required or permitted by law (for example tax, accounting, or dispute resolution). Account data is generally retained for the life of the account plus a reasonable period afterwards. You may request deletion subject to legal exceptions.
8. Security
We implement administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the Internet is completely secure; we encourage you to use strong passwords and protect your credentials.
9. Your rights
Subject to the PDPA and applicable exceptions, you may have the right to request access to, correction of, or further information about your personal data we hold, and in some cases to limit or object to certain processing. To exercise these rights, contact us at privacy@kairableu.com. We may need to verify your identity before responding.
10. Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy.
11. Third-party links
The Service may link to third-party sites. We are not responsible for their privacy practices. Please read their policies before providing personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated through the Service or by email where appropriate.
13. Contact
For privacy enquiries: privacy@kairableu.com, Kairableu Sdn Bhd.
Terms of Service
These Terms of Service (“Terms”) govern your access to and use of Kairableu provided by Kairableu Sdn Bhd (“we”, “us”). By creating an account, accessing, or using the Service, you agree to these Terms. If you do not agree, do not use the Service.
If you use the Service on behalf of an organisation, you represent that you have authority to bind that organisation, and “you” includes that organisation.
1. The Service
Kairableu provides tools for managing contacts, sending WhatsApp and email campaigns (subject to integration and provider approval), automation features, credits, and related analytics. Features may vary by plan. We may modify, suspend, or discontinue features with reasonable notice where practicable, except for security or legal reasons.
2. Accounts and eligibility
You must provide accurate registration information and keep it current. You are responsible for safeguarding passwords and for all activity under your account. Notify us promptly of unauthorised use. You must be at least 18 years old (or the age of majority in your jurisdiction) to enter into these Terms.
3. Acceptable use
You agree not to:
- Use the Service for unlawful, fraudulent, harassing, defamatory, discriminatory, or harmful purposes;
- Send spam, unsolicited bulk messages, or content that violates third-party platform rules (including WhatsApp and email provider policies);
- Upload malware, attempt to breach security, probe, or stress systems without authorisation;
- Misrepresent your identity, forge headers, or manipulate delivery or analytics in a deceptive way;
- Scrape, data-mine, or reverse engineer the Service except as permitted by law;
- Use the Service to process special categories of sensitive personal data unless you have a lawful basis and our prior written agreement where required;
- Resell or sublicense the Service without our written consent.
We may suspend or terminate access for violations.
4. Your content and data
You retain ownership of data you submit (“Customer Data”). You grant us a worldwide licence to host, process, transmit, and display Customer Data solely to provide and improve the Service, comply with law, and as described in our Privacy Policy.
You represent that you have all rights necessary to provide Customer Data and that your use does not infringe third-party rights.
5. Credits and fees
Certain features consume credits or require payment as described at signup or in-product. Fees are exclusive of applicable taxes unless stated otherwise. Credits may expire or be subject to fair-use rules as published. Failure to pay may result in suspension. Except where required by law, fees are non-refundable once services are delivered or credits used.
6. Third-party services
The Service relies on third parties (for example Twilio for WhatsApp, email delivery providers, and cloud hosting). Their terms and availability may affect the Service. We are not liable for third-party failures beyond our reasonable control.
7. Intellectual property
We and our licensors own all rights in Kairableu, including software, branding, and documentation. Except for the limited right to use the Service under these Terms, no rights are granted. You must not remove proprietary notices.
8. Confidentiality
Each party may receive non-public information from the other. The receiving party will use reasonable care to protect it and use it only for the purpose it was disclosed, subject to standard exceptions (public domain, lawful disclosure, independent development).
9. Disclaimers
The Service is provided “as is” and “as available” without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant uninterrupted or error-free operation or specific delivery or conversion results.
10. Limitation of liability
To the maximum extent permitted by Malaysian law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or goodwill, arising from these Terms or the Service.
Our total aggregate liability for all claims relating to the Service or these Terms in any twelve-month period is limited to the fees you paid us for the Service in that period (or, if none, to fifty Malaysian ringgit (MYR 50)). Nothing in these Terms limits liability that cannot be limited by law (including death or personal injury caused by negligence, or fraud).
11. Indemnity
You will defend and indemnify us against claims, damages, and costs (including reasonable legal fees) arising from Customer Data, your use of the Service in breach of these Terms, or your violation of law or third-party rights.
12. Term and termination
You may stop using the Service at any time. We may suspend or terminate access for breach, risk, non-payment, or legal requirement. On termination, your right to access ceases; we may delete data after a retention period consistent with our Privacy Policy and law. Provisions that by nature should survive (liability, indemnity, governing law) will survive.
13. Governing law and disputes
These Terms are governed by the laws of Malaysia. Courts of Malaysia have exclusive jurisdiction, subject to mandatory consumer protections if you qualify as a consumer under law.
14. General
These Terms constitute the entire agreement regarding the Service and supersede prior discussions. If a provision is unenforceable, the remainder stays in effect. Failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign in connection with a merger or sale.
15. Contact
Questions about these Terms: privacy@kairableu.com.
PDPA notice
This notice summarises how Kairableu Sdn Bhd handles personal data under the Malaysian Personal Data Protection Act 2010 (“PDPA”) in connection with Kairableu. It supplements our Privacy Policy and focuses on PDPA-aligned transparency.
1. Data user
For personal data we process about our customers and users, Kairableu Sdn Bhd acts as a data user under the PDPA. Where you upload personal data about your own customers or contacts to the Service, you are typically the data user for that data, and we process it on your instructions as a service provider—please ensure your own notices and consents to those individuals are in place.
2. Purposes of processing
We process personal data for purposes that include:
- Providing and supporting the Service (accounts, messaging, credits, and security);
- Communicating with you about the Service (including technical and policy notices);
- Compliance with legal and regulatory requirements; and
- Improving and securing our systems, using analytics where appropriate.
We do not use personal data for unrelated purposes without notice and, where required, consent.
3. Classes of personal data
Depending on your interactions, this may include identifiers (name, email, phone), account credentials, billing-related information, technical identifiers (IP address, device data), and content you or your organisation submits (such as contact lists and message metadata).
4. Consent and choice
Where the PDPA requires consent, we obtain it in a clear manner. You may withdraw consent or opt out of optional communications where applicable, subject to contractual and legal limits. Withdrawal of consent necessary for core service delivery may mean we cannot continue to provide certain features.
5. Disclosure to third parties
We may disclose personal data to employees and contractors who need it to operate the Service, to professional advisers, and to service providers (hosting, messaging gateways, email delivery, security) bound by appropriate obligations. We may also disclose when required by law or to protect rights and safety.
6. Cross-border processing
Personal data may be stored or processed outside Malaysia. We take steps that are consistent with the PDPA and our agreements to ensure an adequate standard of protection, including contractual safeguards where appropriate.
7. Security
We implement reasonable administrative and technical measures to protect personal data against loss, misuse, and unauthorised access. We review and update these measures as the threat landscape evolves.
8. Retention
We retain personal data only as long as needed for the purposes above or as the law requires. Retention periods may depend on the type of data and whether you maintain an active account.
9. Your rights under the PDPA
Subject to the PDPA and any exceptions, you may have the right to:
- Request access to personal data we hold about you;
- Request correction of personal data that is inaccurate, incomplete, or outdated;
- Withdraw consent for processing based on consent, where applicable; and
- Enquire about our handling of your personal data.
To make a request, contact privacy@kairableu.com. We may ask for information to verify your identity. We will respond within a reasonable period as required by law.
10. Complaints
If you believe we have mishandled your personal data, please contact us first so we can try to resolve the matter. You may also have the right to lodge a complaint with the relevant authority in Malaysia, including the Personal Data Protection Commissioner, in accordance with applicable procedures from time to time.
11. Language
This notice is provided in English. If we provide a Bahasa Malaysia version, both versions aim to be consistent; where they differ, we will clarify which prevails for legal purposes.
12. Contact
PDPA-related enquiries: privacy@kairableu.com
Kairableu Sdn Bhd