Your Privacy

How we collect, use, and protect your data with care.

1. Which Services This Policy Covers

1.1 ARA's own services

For these services, ARA decides how your data is used (ARA is the data controller):

ARA WhatsApp Assistant (reminders, notes, tasks and memory)
ARA Receipt Assistant on Telegram, including demonstration bots
AI Avatar and content services, including MunculPro
This website, our contact forms and newsletter

1.2 Assistants we run for our business clients

Some assistants we build carry another company's name — for example, a receipt assistant operated for your accountant or company secretary. That company is the data controller, and ARA processes your data on its behalf and only on its instructions (ARA is the data processor). That company's own privacy notice applies first; this policy explains how ARA handles the data as its processor.

2. Information We Collect

2.1 Identity and contact

Name, phone number, email (if provided)
Telegram user ID and username
Business or company name
Preferred language and time zone

2.2 Messages and content

Messages you send and the assistant's replies
Reminders, tasks, notes and saved memory items

2.3 Receipts and documents (Receipt Assistant)

Images and files you send
Details read from them: merchant name, date, amount, tax (SST), payment method, document number and supplier tax ID
Your corrections and confirmations
Account details added by the business client operating the assistant, such as client code, TIN, SSM number and financial year end

2.4 AI Avatar and content services

Photos, video and voice recordings you provide to create your avatar or content
Scripts, briefs and approvals

2.5 Technical and usage data

Timestamps, message IDs and delivery status
Account metadata provided by WhatsApp or Telegram
System logs

We do not ask for IC numbers, full bank or card numbers, or health information. Receipts may show some of this (for example the last digits of a card) — please do not send documents that do not need processing. Anything sent is kept private and handled under this policy.

3. How We Use Your Data

To provide the service you asked for: replying to you, reading and recording receipts, sending reminders and follow-ups, and producing your content
To let the business client you deal with (such as your accounting firm) review, confirm and export your records, where you use an assistant operated for them
To keep continuity (memory) between conversations
To monitor reliability, fix errors and prevent misuse
To improve our services

Your data is never sold, rented, or used for advertising.

4. Who Processes Your Data and Where

WhatsApp (Meta) and Twilio — message delivery for the WhatsApp assistant
Telegram — message delivery for Telegram assistants
Supabase (Singapore) — database and file storage, including receipt images in a private storage bucket
OpenAI or an equivalent AI provider (United States) — generates replies and reads receipt images
ARA automation server (n8n, hosted by Hostinger) — message routing, reminders, data extraction and dashboards
Voice and video generation providers (e.g. ElevenLabs, Google) — AI Avatar and content creation only

Transfers outside Malaysia. Some of these providers store or process data outside Malaysia. We transfer data only where needed to provide the service you requested, and we use providers that apply security protections comparable to the Personal Data Protection Act 2010. Under OpenAI's API terms, data we send is not used to train its models by default.

5. How Long We Keep Your Data

Receipts, receipt images and extracted details: for as long as the business client operating the assistant instructs — normally up to 7 years, in line with Malaysian tax record-keeping — or until you or that client asks for deletion, where the law allows
Conversations, memory, reminders and tasks: while your account is active; deleted within 30 days of a deletion request
AI Avatar source material (photos, voice, video): for the duration of your engagement, then deleted within 30 days unless you ask us to keep it
System and usage logs: up to 180 days
Backups: kept for a limited period, then overwritten

6. Your Rights (PDPA Malaysia)

Under the Personal Data Protection Act 2010 (as amended), you can:

Access your personal data and get a copy
Correct data that is inaccurate
Withdraw consent and ask us to stop processing (we may then be unable to provide the service)
Ask for your data to be sent to you or another organisation in a usable format (data portability)
Ask us to delete your data, unless we must keep it by law or for a business client's legal record-keeping

To make a request, email admin@araaisolution.com with the subject "Data Request". We respond within 21 days. If you use an assistant operated for another company, you may also send the request to them and we will help them respond.

7. Security

Data is encrypted in transit (HTTPS/TLS)
Access to databases is restricted by role
Receipt images are stored in a private bucket and shown only through short-lived secure links
Dashboards are limited to named people approved by the business client
API keys and credentials are kept on our servers, never in the browser
Regular backups

No system is completely secure. If a data breach is likely to cause significant harm, we notify the Personal Data Protection Commissioner within 72 hours and affected individuals without unnecessary delay, as the PDPA requires. For assistants run for business clients, we notify that client immediately so it can meet its own obligations.

8. AI Avatars and Sensitive Data

Creating an AI avatar uses your face and voice. We do this only with your explicit written consent. Your likeness is used only for content you approve, and you may withdraw consent at any time.

9. AI Limitations

Replies and extracted receipt figures are generated by AI and may be incomplete or inaccurate. The Receipt Assistant asks you to confirm every figure. Please verify anything important before relying on it.

10. Who Our Services Are For

Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect data from anyone under 18.

11. Changes to This Policy

We will update this policy as our services change. The date at the top shows the latest version. Major changes will be announced on this page and, where possible, in the assistant chat.

12. Contact

ARA Ai Solution, Lot 2926-5A, Batu 10 Jalan Gombak, 53100 Gombak, Kuala Lumpur

Email: admin@araaisolution.com · WhatsApp: +60 11-2591 1400

Privacy Policy

Last updated: 21 September 2026

ARA Ai Solution (“ARA”, “we”, “us”, “our”) builds and operates AI assistants and automations for businesses in Malaysia — including the ARA WhatsApp Assistant, Telegram receipt assistants, AI Avatar and content services. This Privacy Policy explains what personal data we process, why, where it goes, and your rights under the Personal Data Protection Act 2010 (as amended).

ARA Ai Solution business registration: 202503284915 (003786396-X).
Contact: admin@araaisolution.com, +60 11-2591 1400.

Get in Touch

Reach out for questions about your data or our AI assistant services.

Email

admin@araaisolution.com

Contact

Reach out to us for AI solutions tailored to you.

Email

whatsapp ARA

admin@araaisolution.com

+60 11-259 11400