Privacy Policy
Effective 30 September 2026
This policy explains how FUTURE CLOUD TECH ("we", "us") handles personal data in connection with NefinityChat and our website. It is written to meet the Personal Data Protection Act 2010 (Malaysia) and, where they apply, similar laws such as the GDPR.
Two roles
- Our customers' data. When we run NefinityChat for a business ("Customer"), the chats and visitor information in their workspace belong to that Customer. We process it on their behalf and on their instructions (see our Data Processing Addendum). If you chatted with a business that uses NefinityChat, please contact that business about your data; we will help them respond.
- Our own data. For our website, sign-ups, customer accounts and billing, we decide how data is used. The rest of this policy covers both, and says which is which.
What we collect
Customer accounts (we decide): name, email, password (stored only as a salted hash), job title, profile photo, two-step verification settings, sign-in times, team roles, plan and billing status, and messages you send us through our contact form or chat. Card details are collected and stored by Stripe, not by us.
Chat visitors (on behalf of our Customers): chat messages and files; name, email and form answers if the visitor gives them; technical information such as IP address, approximate location (country and city) derived from it, browser and device type, language, time zone and the page being viewed; for Telegram, the Telegram chat ID, name and username; and player details (such as username, VIP level or balance) that a Customer's own website chooses to send.
Website visitors (we decide): basic request logs kept by our hosting provider for security and troubleshooting, and anything you type into our contact form.
How we use it
To provide, secure and support the Service; to process payments and send service messages (such as password resets and billing notices); to translate or suggest replies when a Customer turns those features on; to prevent abuse and fraud; to meet legal obligations; and to improve the Service using aggregated information. We do not sell personal data, and we do not use chat content to advertise to anyone.
Legal bases
Performing our contract with Customers, our legitimate interests (running and securing the Service), consent where the law requires it, and legal obligations. For chat visitor data, the Customer is responsible for having a lawful basis.
Who we share it with
Service providers that process data for us under contract:
| Provider | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, content delivery and the AI models used for translation and reply suggestions |
| Stripe, Inc. | Payments and invoices |
| Resend (Plus Five Five, Inc.) | Sending emails |
| Telegram | Delivering messages, only for Customers who connect a Telegram bot |
We may also disclose data when the law requires it, to protect rights and safety, or as part of a business transfer, in which case this policy continues to apply.
International transfers
Our providers operate worldwide, so data may be processed outside Malaysia. We rely on their contractual and security commitments to protect it.
How long we keep it
- Chats are deleted automatically after a period each Customer sets (180 days by default) of no new messages, together with their files.
- Visitors who never wrote a message are deleted after 30 days.
- Account data is kept while the account is active and deleted within 90 days after closure, except what we must keep for legal, tax or accounting reasons.
- Security records such as failed sign-in counters are kept for about a day; password-reset links expire within an hour.
Security
Encryption in transit (HTTPS), hashed passwords, optional two-step verification, protection against repeated sign-in attempts, separation between Customers' workspaces, and restricted access for our staff. No system is perfectly secure. If a personal data breach happens, we will notify the Personal Data Protection Commissioner of Malaysia as soon as practicable and within the time the Personal Data Protection Act 2010 (as amended in 2024) and the Commissioner's guidelines require (currently within 72 hours of becoming aware of it); notify affected individuals without unnecessary delay where the breach is likely to cause them significant harm; and notify affected Customers without undue delay.
Your rights
Depending on where you are, you can ask to access, correct or delete your personal data, object to or restrict certain uses, withdraw consent, receive a copy, or have your data sent to another organisation in a commonly used format where technically feasible (data portability). Contact us at support@nefinitychat.com. For data inside a Customer's workspace, we will pass your request to that Customer. If you are in Malaysia, you may also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi); elsewhere, to your local data protection authority.
Cookies and storage
Our dashboard uses one essential cookie to keep you signed in. The chat widget stores a small visitor token and a few display settings in your browser's storage so your conversation continues across pages. We do not use advertising or cross-site tracking cookies, so we do not show a cookie banner.
Children
The Service is not directed at children under 18, and we do not knowingly collect their data for our own purposes.
Changes
We will post updates here and tell Customers about material changes.
Contact
FUTURE CLOUD TECH, Menara Mutiara Sentral, 2, Jalan Desa Aman 1, Cheras Business Centre, 56100 Cheras, Federal Territory of Kuala Lumpur, Malaysia · support@nefinitychat.com