Privacy Policy

Last updated: 29 September 2026

ChatJual ("we", "us") provides an AI assistant that answers WhatsApp messages on behalf of Malaysian businesses. ChatJual is operated by Muhammad Ilham bin Zahari. This policy explains what personal data we process, why, and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA).

In short: we use messages only to reply on behalf of the business you contacted. We do not sell personal data or use it for advertising.

1. Data we process

Customers who message a business that uses ChatJual:

Your WhatsApp phone number and WhatsApp profile name
The content of messages you send to that business and the replies sent to you
Details you choose to share to make a booking or order (for example your name, dates, number of guests)

Businesses that use ChatJual: account details (name, email, phone number), business information you provide to train your assistant, and billing records.

2. How we use it

To generate and send replies on behalf of the business you messaged
To keep conversation history so replies stay in context, and so the business owner can review and take over conversations
To operate, secure and improve the service, and to provide support

For customer messages, the business you contacted decides how its conversations are used; ChatJual processes them on that business's behalf.

3. Who we share it with

Only the service providers needed to run ChatJual:

Meta Platforms (WhatsApp Business Platform) — to receive and deliver WhatsApp messages
OpenAI — to generate reply text; data sent through its API is not used to train its models
Our hosting provider — servers that store the data

Some providers process data outside Malaysia. We share data with authorities only when required by law. We never sell personal data.

4. How long we keep it

Conversation data is kept while the business uses ChatJual, and deleted within 90 days after the business closes its account, unless the law requires us to keep it longer.

5. Security

Data is transmitted over encrypted connections (HTTPS) and stored on access-controlled servers. Each business can only see its own conversations.

6. Your rights and data deletion

You may ask to access or correct your personal data, or ask us to delete it. To request deletion of your conversations, email us at muhd.ilhamkvs@gmail.com with the WhatsApp number you used and the business you contacted. We will confirm and complete deletion within 30 days. You can also stop receiving replies at any time by not messaging the business, or by blocking the number in WhatsApp.

7. Children

ChatJual is intended for businesses and their adult customers. We do not knowingly collect data from children under 13.

8. Changes

We may update this policy. The date at the top shows the latest version.

9. Contact

Questions about privacy: muhd.ilhamkvs@gmail.com