Privacy Policy

Last updated 3 October 2026

This policy explains how Huzaib Wadoo, trading as Aura, in Subang Jaya, Selangor ("Aura", "I", "me"), handles personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). It covers this website and the Aura service.

1. Data I collect

When you contact me by WhatsApp, email or phone: your name, business name, phone number, email and what you tell me about your business.
When you're a customer: billing details and the business information you give me to set up your website and receptionist.
On this website: the demo chat runs entirely in your browser. What you type into it is not sent to me or stored anywhere.
Through the receptionist on a client's website: the messages, names, phone numbers and booking details their customers choose to share. I process this on behalf of that business (see section 4).

2. How I use it

to reply to your enquiry and give you a quote;
to set up, run and support your service;
to send invoices and service messages;
to meet legal and accounting obligations.

I don't sell personal data, and I don't use it for advertising.

3. Who I share it with

Only with the service providers needed to run Aura, such as website hosting, the AI language model provider that generates the receptionist's replies, Google (Calendar, Gmail) and WhatsApp. They may store data outside Malaysia. Where that happens, I use providers with appropriate safeguards. I'll also share data if the law requires it.

4. Your customers' data (for businesses using Aura)

For conversations and bookings made through your receptionist, your business is the data user and I process the data on your behalf. I use it only to provide the service, keep it secure, and delete it within 30 days of cancellation unless you ask me to keep it or export it. Please make sure your own website or premises tells customers how you use their data.

5. How long I keep it

Enquiry data is kept for up to 12 months if you don't become a customer. Customer and billing records are kept for as long as the service runs and then for 7 years, as Malaysian tax law requires.

6. Security

Data is stored with reputable hosting providers, sent over encrypted connections (HTTPS), and access is limited to me. No system is completely secure. If a breach affects your data, I'll tell you promptly.

7. Your rights

Under the PDPA you can ask to see the personal data I hold about you, correct it, or limit how it's used, including withdrawing consent to marketing. Message me using the details below and I'll reply within 21 days.

8. Cookies and local storage

This website doesn't use advertising or tracking cookies.

Necessary: your cookie choice is saved in your browser's local storage so the banner doesn't keep reappearing. This is always on, because the site needs it to remember your choice.
Optional analytics: only if you click "Accept", privacy-friendly analytics may be used to count which pages are visited. No advertising profiles are built. If you click "Reject", nothing optional is loaded.
Fonts: fonts are loaded from Google Fonts, which receives your IP address to deliver them.

You can change your choice at any time using "Cookie settings" at the bottom of every page, or by clearing your browser's site data.

9. Changes

If this policy changes, the new version is posted here with a new date. Customers are told about significant changes in advance.

Contact

Huzaib Wadoo (Aura), Subang Jaya, Selangor, Malaysia
WhatsApp: +60 16-814 9934
Email: huzaibqayoom@gmail.com