Data & Privacy

PDPA 2024 rights, consent history, and data export. We respond within 21 days.

App language

Owner-facing UI chrome

The NCSM AI dashboard runs in English by default. Generated customer-facing content (WhatsApp messages, captions, Xiaohongshu posts) still adapts to your brand's language mix.

Your rights (PDPA 2024)

Access · download everything we hold about NCSM in JSON + CSV.
Correct · request changes to profile / consent / contact data.
Erase · soft-delete with 30-day grace, then irreversible. Anonymised analytics retained.
Withdraw consent · at any time; honored on next send cycle.

Files a ticket with our Data Protection Officer. You'll receive the export by email within 21 days (PDPA 2024 maximum response time).

Permanent action — 30-day grace period after the DPO verifies your identity, then irreversible.

Cross-border data transfer (PDPA 2024 s.129)

🇲🇾 Primary app data: NCSM data hosted in Malaysia.
🇺🇸 AI inference: Anthropic (US) — prompt + response transit. Prompt caching enabled; no training opt-out needed (Anthropic does not train on API data).
🇲🇾 Object storage: hosted in Malaysia.
🇲🇾 WhatsApp Cloud: Meta MY infrastructure, MYR billing.

Each recipient has adequate protection or operates under standard contractual clauses with NCSM AI.

Consent history

Direct marketing — email
since 14 May 2026
opted-in
Direct marketing — WhatsApp Status
since 14 May 2026
opted-in
Product analytics + crash reports
since 14 May 2026
opted-in
Cross-border AI processing (Anthropic US)
since 14 May 2026
opted-in

Breach + DPO contact

We notify the Personal Data Protection Commissioner within 72 hours of becoming aware of a breach affecting your data (PDPA 2024 s.12B).

Data Protection Officer: [email protected]

Reach the Commissioner directly at pdp.gov.my.

🔐Data & Privacy

🔐Data & Privacy

Data & Privacy

Data & Privacy