1. Data Controller
The data controller responsible for your personal data is:
RAINSPEED LABS SOLUTIONS
Registration No.: 202603148143 (003857582-W)
Business Address: Kampung Parit Rabu, Bukit Gambir, 84800 Tangkak, Johor, Malaysia.
Email: [email protected]
For any questions about this policy or to exercise your data rights, please contact us via the contact form on the Website.
RAINSPEED LABS SOLUTIONS
Registration No.: 202603148143 (003857582-W)
Business Address: Kampung Parit Rabu, Bukit Gambir, 84800 Tangkak, Johor, Malaysia.
Email: [email protected]
For any questions about this policy or to exercise your data rights, please contact us via the contact form on the Website.
2. Information We Collect
2.1 Personal Information: When you register an account via Clerk, we collect your name, email address, and a unique user identifier (clerk_id). We do not receive or store your password.
2.2 Usage Data: We automatically collect information about your device and how you interact with the Platform, including IP address, browser type and version, operating system, referral URLs, pages visited, timestamps, and the duration of your sessions. We also log prompts you submit and the resulting AI responses for service improvement and debugging.
2.3 Payment Information: All payments are securely processed by Stripe. We do not collect or store your full credit card details. Stripe provides us with a payment token and limited metadata (e.g., last four digits of card, card brand).
2.4 Cookies and Similar Technologies: Please see our Cookie Policy for details on how we use cookies.
2.2 Usage Data: We automatically collect information about your device and how you interact with the Platform, including IP address, browser type and version, operating system, referral URLs, pages visited, timestamps, and the duration of your sessions. We also log prompts you submit and the resulting AI responses for service improvement and debugging.
2.3 Payment Information: All payments are securely processed by Stripe. We do not collect or store your full credit card details. Stripe provides us with a payment token and limited metadata (e.g., last four digits of card, card brand).
2.4 Cookies and Similar Technologies: Please see our Cookie Policy for details on how we use cookies.
3. How We Use Your Information
We process your personal data for the following purposes:
- To provide, maintain, and improve the Platform, including personalized features.
- To process transactions and manage your credit balance.
- To communicate with you, including service updates, security alerts, and support messages.
- To monitor and analyse usage trends to enhance the AI model selection and overall user experience.
- To detect, prevent, and address fraud, abuse, and other harmful activities.
- To comply with legal obligations, such as responding to lawful requests from public authorities.
We will not use your personal data for purposes other than those disclosed without obtaining your consent, unless required or permitted by law.
- To provide, maintain, and improve the Platform, including personalized features.
- To process transactions and manage your credit balance.
- To communicate with you, including service updates, security alerts, and support messages.
- To monitor and analyse usage trends to enhance the AI model selection and overall user experience.
- To detect, prevent, and address fraud, abuse, and other harmful activities.
- To comply with legal obligations, such as responding to lawful requests from public authorities.
We will not use your personal data for purposes other than those disclosed without obtaining your consent, unless required or permitted by law.
4. Lawful Basis for Processing
If you are located in the European Economic Area (EEA), our legal bases for processing your personal data are:
- Contractual necessity: To perform our obligations under the Terms (e.g., providing the chat service).
- Consent: Where you have given clear consent for specific purposes (e.g., opting into marketing communications).
- Legitimate interests: To improve and protect our Platform, provided these interests are not overridden by your data protection rights.
- Legal obligation: Where we need to comply with a legal or regulatory requirement.
- Contractual necessity: To perform our obligations under the Terms (e.g., providing the chat service).
- Consent: Where you have given clear consent for specific purposes (e.g., opting into marketing communications).
- Legitimate interests: To improve and protect our Platform, provided these interests are not overridden by your data protection rights.
- Legal obligation: Where we need to comply with a legal or regulatory requirement.
5. Data Sharing and Disclosure
We do not sell, rent, or lease your personal data to third parties. We may share your information with the following service providers who help us operate the Platform, each bound by strict data protection agreements:
- Clerk: User authentication and management.
- Supabase: Database hosting for chat history, logs, and credits.
- Stripe: Payment processing.
- OpenRouter, Replicate, WaveSpeed: AI model inference (prompts are forwarded to these providers).
- Tavily, Scrape.do: Web search functionality.
- Vercel: Hosting and infrastructure.
We may also disclose your data if required to do so by law, or to protect the rights, property, or safety of AtlasFlux, our users, or the public.
- Clerk: User authentication and management.
- Supabase: Database hosting for chat history, logs, and credits.
- Stripe: Payment processing.
- OpenRouter, Replicate, WaveSpeed: AI model inference (prompts are forwarded to these providers).
- Tavily, Scrape.do: Web search functionality.
- Vercel: Hosting and infrastructure.
We may also disclose your data if required to do so by law, or to protect the rights, property, or safety of AtlasFlux, our users, or the public.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers maintain servers. We ensure that appropriate safeguards are in place to protect your data, such as relying on adequacy decisions (e.g., EU‑U.S. Data Privacy Framework) or implementing Standard Contractual Clauses approved by the European Commission.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Chat history and generated content are stored until you delete your account, after which they are permanently erased within thirty (30) days. Credit and transaction logs are retained for a minimum of seven (7) years for accounting and legal purposes. When personal data is no longer needed, we securely delete or anonymise it.
8. Your Data Protection Rights
Depending on your jurisdiction, you may have the following rights:
- Right of access: Obtain confirmation as to whether and what personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data (subject to exceptions).
- Right to restrict processing: Request limitation of how we use your data.
- Right to data portability: Receive a copy of your data in a structured, machine‑readable format.
- Right to object: Object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us via the contact form. We will respond within thirty (30) calendar days. If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority.
- Right of access: Obtain confirmation as to whether and what personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data (subject to exceptions).
- Right to restrict processing: Request limitation of how we use your data.
- Right to data portability: Receive a copy of your data in a structured, machine‑readable format.
- Right to object: Object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us via the contact form. We will respond within thirty (30) calendar days. If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority.
9. Children's Privacy
The Platform is not intended for individuals under the age of thirteen (13) (or the applicable digital consent age in your country). We do not knowingly collect or solicit personal information from children. If we become aware that a child has provided us with personal data, we will take prompt steps to delete such information and terminate the account. If you believe a child has submitted personal data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. If the changes are material, we may provide you with additional notice (e.g., a banner on the website or email notification). Your continued use of the Platform after such modifications constitutes acceptance of the updated policy. We encourage you to review this page periodically.
11. Cookie Consent Records
11.1 Purpose. To comply with data protection regulations (including GDPR and Malaysia PDPA) and maintain a verifiable audit trail of your consent choices, we securely store a record of your cookie preferences when you accept, reject, or customize them.
11.2 Data Collected. When you make a consent choice, we log: Consent ID, Your Choices, Version, Timestamp, IP Address, User Agent, and User ID (if signed in).
11.3 Purpose of Processing. This data is used solely for demonstrating compliance with legal obligations regarding consent, investigating any disputes or claims related to consent, and improving our consent management system.
11.4 Data Retention. Consent records are retained for a period of two (2) years from the date of collection, after which they are securely deleted or anonymised.
11.5 Data Sharing. These records are stored in our secure database (hosted on Supabase) and are not shared with any third parties for marketing or profiling purposes. Access is restricted to authorised personnel only.
11.6 Your Rights. You have the right to request access to, correction of, or deletion of your consent records by contacting us via the contact form.
11.2 Data Collected. When you make a consent choice, we log: Consent ID, Your Choices, Version, Timestamp, IP Address, User Agent, and User ID (if signed in).
11.3 Purpose of Processing. This data is used solely for demonstrating compliance with legal obligations regarding consent, investigating any disputes or claims related to consent, and improving our consent management system.
11.4 Data Retention. Consent records are retained for a period of two (2) years from the date of collection, after which they are securely deleted or anonymised.
11.5 Data Sharing. These records are stored in our secure database (hosted on Supabase) and are not shared with any third parties for marketing or profiling purposes. Access is restricted to authorised personnel only.
11.6 Your Rights. You have the right to request access to, correction of, or deletion of your consent records by contacting us via the contact form.