Privacy Policy

Definitions

Data Controller

ACEVA is the Data Controller of your personal data. We are responsible for handling your data and ensuring its privacy in line with applicable laws, including the Personal Data Protection Act 2010 (PDPA) in Malaysia, the General Data Protection Regulation (GDPR) in the EU, and relevant US data protection regulations such as the California Consumer Privacy Act (CCPA).

Information Collection and Use

We collect various information to improve our Service.

Types of Data Collected

Personal Data:

• Email address
• First and last name
• Cookies and Usage Data

Usage Data: Includes browser information, IP address, and other technical data.

Use of Data

ACEVA uses collected Personal Data for various purposes, including providing the Service, customer support, and improving it.

Analytics

We employ an in-house analytics system designed to monitor and improve our Service while prioritizing user data privacy.

Third-Party Platform Integrations

ACEVA integrates with several third-party platforms to enhance functionality. These integrations are API-based, and we ensure that they do not share personal data beyond what is required for their operation. The platforms integrated with ACEVA include:

• Google: For authentication (via Google sign-in) and analytics, we use Google's APIs. Data shared with Google is subjected to Google's privacy policy and terms.
• Meta (WhatsApp, Facebook Messenger): For communication integrations, we use Meta's APIs, which are governed by Meta's privacy policy.
• Calendly and Google Calendar: For scheduling functionality, we integrate with Calendly and Google Calendar, where user data is processed in accordance with the respective platforms' privacy policies.

Ethical Approach to Integration

ACEVA adopts an ethical, and transparent approach to integrating with third-party services, including Google, Meta (WhatsApp/Facebook Messenger), Calendly, and any other platforms we may incorporate in the future. Our integrations follow these key principles:

• Minimal Data Sharing: We ensure that only the necessary data required for functionality is shared with third-party platforms.
• User Consent: Before sharing data with any third-party platform, we request clear user consent. In cases where consent is not explicitly provided, we do not share data.
• Data Transparency: We are committed to ensuring that users are fully aware of what data is being shared with third parties, why it is shared, and how it will be used.
• No Data Retention Beyond Purpose: We retain only the data necessary for providing the Service and will not store data beyond its functional use for the integrations.
• Right to Opt-Out: Users can opt-out of using integrated third-party services at any time, in which case ACEVA will stop sharing their data with those services.
• Third-Party Compliance: We ensure that all third-party platforms we integrate with comply with industry-standard data protection regulations and that they have implemented appropriate security measures to safeguard user data.

Retention of Data

We retain your Personal Data as necessary to meet legal obligations and for the purposes described in this Policy. Retention periods may vary depending on the jurisdiction and the specific use of the data.

Transfer of Data

Your data may be transferred to, and maintained on, servers located outside your country of residence. By using our Service, you consent to the transfer of your data to countries that may not have the same data protection laws as your jurisdiction. We ensure that data transferred to other jurisdictions will be protected as described in this Policy and in accordance with applicable legal standards.

Disclosure of Data

We may share Personal Data in specific circumstances as described in this Policy. This includes:

• Legal obligations and requests from government authorities.
• With service providers and third-party processors in line with the terms of this Policy.
• If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred as part of the transaction, with notice provided to you.

Security of Data

The security of your data is important to us. We use appropriate administrative, technical, and physical safeguards to protect your Personal Data from unauthorized access, disclosure, or misuse. However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Data Protection Rights

As a global service, ACEVA is committed to ensuring that users' privacy rights are respected according to the laws of various jurisdictions.

Rights Under the General Data Protection Regulation (GDPR)

For users located in the European Union (EU) or European Economic Area (EEA), ACEVA adheres to the principles outlined in the General Data Protection Regulation (GDPR). Under the GDPR, users have the following rights:

• Right to Access: You can request access to your Personal Data.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your data in certain circumstances.
• Right to Restrict Processing: You can request restrictions on the processing of your Personal Data.
• Right to Data Portability: You can request that we transfer your data to another service provider.
• Right to Object: You can object to the processing of your Personal Data under certain conditions.
• Right to Withdraw Consent: If you have given consent for the processing of your data, you can withdraw that consent at any time.

Rights Under the Personal Data Protection Act (PDPA)

For users located in Malaysia, ACEVA ensures compliance with the Personal Data Protection Act 2010 (PDPA). Under the PDPA, users have the following rights:

• Right to Access: You can request access to your Personal Data held by us.
• Right to Correct: You can request corrections to any inaccurate, incomplete, or outdated data.
• Right to Withdraw Consent: You can withdraw your consent for processing your Personal Data at any time, subject to certain limitations and legal obligations.
• Right to Object: You have the right to object to the processing of your Personal Data under certain circumstances.
• Right to Erasure: In specific cases, you can request the deletion of your Personal Data, subject to legal or contractual obligations.
• Right to Data Portability: You may request the transfer of your Personal Data to another data controller in a structured, commonly used, and machine-readable format.

Rights Under the California Consumer Privacy Act (CCPA)

For users located in California, USA, ACEVA ensures compliance with the California Consumer Privacy Act (CCPA). Under the CCPA, California residents have the following rights:

• Right to Know: You can request information about the categories of Personal Data we collect and the purposes for which we use it.
• Right to Delete: You can request the deletion of your Personal Data, subject to certain exceptions.
• Right to Opt-Out: You can opt out of the sale of your Personal Data.
• Right to Non-Discrimination: You will not be discriminated against for exercising any of your CCPA rights.

Other International Data Protection Laws

In addition to the GDPR, PDPA, and CCPA, ACEVA will comply with other applicable data protection laws depending on the user's jurisdiction and any other relevant global regulations.

Service Providers

We may share data with third-party companies who assist in providing the Service. These third-party providers are obligated to maintain the confidentiality of your data and use it only to perform services on our behalf.

Payments

Third-party payment processors handle payments securely. We do not store or process payment data directly.

Links to Other Sites

Our Service may contain links to other websites that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites.

Children's Privacy

Our Service is not intended for children under 16, and we do not knowingly collect Personal Data from children under 16. If we learn that we have collected Personal Data from a child under 16, we will take steps to delete such data.

Limited Use Requirements

ACEVA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Privacy Policy

We may update this Policy from time to time. Any changes will be posted on this page, and you are encouraged to review it periodically. Continued use of the Service after any changes to the Policy will constitute your acknowledgment of the changes.