Privacy Policy — Nalam AI

Nalam AI ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use nalam.com.my and related services, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Account information: Name, email address, phone number, and language preference when you sign up.

Usage data: Which tools you use, how often, credit usage, and content you generate or upload (text prompts, images, documents) for the purpose of providing the Service.

Payment information: Billing details are processed by Stripe. We do not store your full card number.

Technical data: IP address, browser type, device information, and analytics data (via tools like PostHog) to understand how the Service is used and improve it.

Google Sign-In: If you sign in with Google, we receive your name, email, and profile picture from Google, per your permission.

We use your data to:

• Provide and operate the Service (generate content, track credits, manage your account)
• Process payments and manage subscriptions
• Send important account or service-related emails (e.g., password resets, billing, product updates)
• Improve Nalam AI through usage analytics
• Respond to your enquiries or feedback

When you use Nalam AI's tools, your prompts, uploaded images, and documents are sent to third-party AI providers (e.g., Groq, Hugging Face, Google AI, Pollinations AI, ElevenLabs) to generate responses. These providers process your content solely to return results to you and are bound by their own data handling terms.

We do not sell your personal data or generated content to third parties.

We share data only with:

• Service providers necessary to operate Nalam AI (Supabase for database/authentication, Stripe for payments, Resend for email, Vercel for hosting, PostHog for analytics)
• Legal requirements, if required by Malaysian law or valid legal process

We do not sell or rent your personal data to advertisers or third parties for marketing purposes.

Your data is stored securely using Supabase (PostgreSQL database) with industry-standard security practices, including encrypted connections and access controls. While we take reasonable steps to protect your data, no system is 100% secure.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing (which may limit your ability to use the Service)

To exercise these rights, contact us at hello@nalam.com.my.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

We use cookies and similar technologies (including PostHog analytics) to understand how the Service is used and to keep you logged in. You can control cookies through your browser settings, though this may affect Service functionality.

Nalam AI is not intended for children under 13. We do not knowingly collect personal data from children under 13 without parental consent.

Some of our service providers (e.g., AI processing partners) may process data outside Malaysia. We take reasonable steps to ensure your data remains protected in accordance with this policy wherever it is processed.

We may update this Privacy Policy from time to time. We'll notify users of significant changes via email or a notice on the Service.

For privacy-related questions or requests, contact us at hello@nalam.com.my.