Privacy Policy

Vislogik Technologies ("Kuanta," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please discontinue use of our Services.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our Services:

• Account Information: Phone number for authentication via OTP
• Profile Information: Display name, preferences, settings (optional)
• Financial Information: Expense data, budget information, transaction details you input
• Conversation Data: Messages, queries, and interactions with our AI services
• Files and Uploads: Receipts, documents, images, and other files you upload
• Payment Information: Billing details, payment methods (processed securely through third-party payment processors)

1.2 Automatically Collected Information

We automatically collect certain information when you access our Services:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: Device type, operating system, browser type, IP address
• Log Data: Access times, error logs, performance metrics
• Location Data: Approximate location based on IP address (not precise geolocation)
• Cookies and Tracking: Session cookies, authentication tokens, analytics cookies

1.3 Information from Third Parties

We may receive information from third-party services:

• Messaging platforms: Message metadata and delivery status from WhatsApp and Telegram
• Payment processors: Transaction confirmation, payment status
• Analytics providers: Aggregated usage statistics

1.4 Messaging Channel Data

When you interact with us via WhatsApp or Telegram:

• Phone number or Telegram user ID (used for authentication and service delivery)
• Display name from your messaging profile
• Message content and timestamps
• Voice messages (transcribed for processing, not stored in original form)
• Images and PDF files you send (e.g., receipt photos processed for expense tracking)

WhatsApp's and Telegram's own privacy policies apply to data transmitted through their respective platforms.

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Process your requests, deliver AI-powered responses, manage your account
• Process Transactions: Handle payments, billing, and subscription management
• Improve Services: Analyze usage patterns, fix bugs, develop new features
• Personalization: Customize your experience, provide relevant insights
• Communication: Send service updates, notifications, support messages
• Security: Detect fraud, prevent abuse, protect against security threats
• Compliance: Meet legal obligations, enforce our Terms of Service
• Analytics: Understand user behavior, measure performance, conduct research
• Marketing: Send promotional communications (you can opt-out at any time by contacting us)

For marketing communications, we will only send promotional messages if you have opted in or where permitted by law. You can unsubscribe from marketing messages at any time by replying "STOP" to WhatsApp messages or contacting hello@kuanta.app.

3. AI Processing and Third-Party Services

Our Services use artificial intelligence to provide conversational features, data extraction, and document processing (including receipt scanning and voice transcription). We work with third-party AI service providers to deliver these capabilities. When you interact with our AI features:

• Your conversation data may be processed by third-party AI service providers to generate responses
• We implement data minimization practices — only necessary context is sent for processing
• We strip personally identifiable information where possible before AI processing
• We use enterprise-grade AI services with data protection guarantees and zero-retention policies
• Third-party AI providers have their own privacy policies and data handling practices
• AI processing may occur on our servers or third-party infrastructure in various regions

What We Do to Protect Your Privacy:

• Use AI providers with strict data protection policies
• Send only the minimum necessary data for AI processing
• Do not allow AI providers to train on your personal data
• Encrypt data in transit and at rest

If you have concerns about AI processing, you can contact us to discuss data handling options.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist in operating our Services:

• Cloud hosting providers (data storage, infrastructure)
• AI and machine learning service providers
• Payment processors (billing, subscription management)
• Analytics providers (usage monitoring, performance tracking)
• Communication platforms (WhatsApp, Telegram, email services)
• Customer support tools

4.2 Business Transfers

If we undergo a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity.

4.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or protect our rights
• Prevent fraud, security threats, or illegal activities
• Protect the safety of our users or the public

4.4 With Your Consent

We may share information with third parties when you explicitly authorize us to do so, such as when integrating with external business systems.

5. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit is encrypted using TLS/SSL; sensitive data at rest is encrypted
• Access Controls: Strict internal access policies limit who can view your data
• Secure Infrastructure: Data stored on secure cloud servers with regular backups
• Monitoring: Continuous monitoring for security threats and unauthorized access
• Regular Audits: Periodic security assessments and vulnerability testing

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You acknowledge and accept this risk by using our Services.

6. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: We aim to delete data after 12 months of inactivity, with prior notice to give you the opportunity to reactivate
• Closed Accounts: We aim to delete your data within 90 days of account closure, unless legal retention is required
• Legal Requirements: Some data may be retained longer to comply with legal, tax, or regulatory obligations
• Aggregated Data: Anonymized analytics data may be retained indefinitely for service improvement

You can request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to legal and operational requirements.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, contact us at hello@kuanta.app. We will respond within 30 days. Please note that certain requests may be subject to verification of your identity and legal limitations.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how users interact with our Services
• Preference Cookies: Remember your settings and preferences
• Security Cookies: Detect fraudulent activity and protect accounts

You can control cookies through your browser settings, but disabling certain cookies may limit functionality of the Services.

9. International Data Transfers

Our Services are operated from Malaysia. We use cloud infrastructure (Hetzner) and AI services (AWS Bedrock) that may store and process data in Singapore and Malaysia regions.

If you access our Services from outside Malaysia, your information may be transferred to, stored, and processed in:

• Malaysia (primary operations and AI processing)
• Singapore (cloud infrastructure and AI processing)

By using our Services, you consent to the transfer of your information to these regions. We ensure our service providers maintain adequate data protection standards.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or through the Services. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Services after such updates constitutes acceptance of the revised policy.

13. Malaysia Personal Data Protection Act (PDPA)

As a Malaysia-based company, we comply with the Personal Data Protection Act 2010 (PDPA). Your personal data is:

• Collected with your knowledge and consent
• Used only for the purposes disclosed at collection
• Protected with appropriate security measures
• Retained only as long as necessary
• Accessible to you for review and correction

You have the right to request access to, correction of, or withdrawal of your personal data at any time by contacting us.