Privacy Policy - Echo Logic Digital

Privacy Policy
Last updated: [29th September 2026]

1. Who We Are
Echo Logic Digital ("we", "us", "our") provides business process automation and digital reputation management services to small and medium-sized businesses in Malaysia and internationally. This Privacy Policy explains how we collect, use, and protect information when you use our website or engage our services.

2. Information We Collect
* Business contact information: name, business name, phone number, email address, and WhatsApp number, provided when you contact us or engage our services.
* Third-party platform data: with your explicit authorization, we may access data from your Google Business Profile (such as customer reviews and business listing information) and your WhatsApp Business Account, solely for the purpose of delivering the services you've engaged us for.
* Website usage data: basic analytics (such as pages visited) may be collected to help us understand how visitors use our site.
We do not collect sensitive personal data, and we do not sell or rent any personal data to third parties.
* Your customers' data: when you use our WhatsApp assistant service, we process messages that your customers send to your WhatsApp Business number, including their name, phone number, message content, and booking details. We process this data on your behalf, only to reply to your customers and manage your bookings.

3. How We Use Your Information
We use the information above to:
* Deliver and maintain the automation services you've engaged us for (e.g., monitoring and responding to Google reviews, sending WhatsApp notifications);
* Communicate with you about your account or service;
* Improve our services and website.

4. Third-Party Services
Our services integrate with official APIs provided by Google (Business Profile API) and Meta (WhatsApp Cloud API). Your use of these integrations is also subject to Google's and Meta's respective privacy policies and terms of service. We only access the minimum data necessary to deliver the agreed service, and access can be revoked by you at any time through your Google or Meta account settings.To generate replies, message content is sent to our AI service provider (Anthropic). Booking and alert notifications are sent to you through Telegram. These providers only receive the data needed for this purpose.Our servers are hosted by DigitalOcean, and some business settings and booking records are stored in Google Sheets.

5. Data Storage and Security
Data is stored using industry-standard security practices. Access to client data is restricted to what is necessary to deliver our services. While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure.Requests from authorities: If we receive a request for personal data from a public authority, we will check that the request is lawful before responding, and we will only disclose the minimum data required by law.

6. Data Retention
We keep conversation and booking records for up to 12 months, then delete them automatically. If you stop using our service, we will send you a copy of your data on request and delete it within 30 days.

7. Your Rights
Under Malaysia's Personal Data Protection Act 2010 (PDPA), and applicable data protection laws in other jurisdictions we serve, you have the right to:
* Access the personal data we hold about you;
* Request correction of inaccurate data;
* Withdraw consent or request deletion of your data, subject to legal or contractual obligations.
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:[email protected]
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.