Privacy Policy

Definitions

This section defines key terms used in the policy to help you understand how we describe personal data and processing activities.

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, job title, or other information that can identify an individual directly or indirectly.
Processing refers to any operation performed on personal data, such as collection, storage, retrieval, use, disclosure, modification, deletion and transfer.
User means an individual who uses the AIMaxBelajar platform, including learners, instructors, and visitors to our website.
Service refers to the AIMaxBelajar online learning platform, mobile interfaces, support services, and related features provided under the AIMaxBelajar brand.
Cookies are small text files stored on a device by the browser to remember preferences, enable functionality, and support analytics and advertising where applicable.

Data We Collect

We collect data directly from users, automatically through technology, and from third parties when necessary to deliver and improve the service.

Data Provided by Users

When you register, enroll in a course, contact support or participate in assessments, we collect information you provide to us.

Account information: name, email address, password (securely hashed) and optional profile details such as job title and employer.
Billing and payment details: billing address, payment method details processed via third-party payment providers, and invoicing information necessary for transactions.
Course activity and progress: course enrollments, completion status, assessment results and submitted project files.
Communications: messages you send to support, chat transcripts in mentoring sessions, and preferences for receiving notifications.
Content you create: uploaded files, project deliverables, comments and feedback provided during courses.
Optional demographic and professional information: industry, skills, and experience levels you choose to share to improve personalization.

Automatically Collected Data

When you access the platform, we automatically collect technical and usage data to operate the service and monitor performance.

Device and browser information: device type, operating system, browser version and language settings.
Usage data: pages visited, features used, session duration and course interactions to improve learning pathways.
Connection data: IP address, approximate location derived from IP, and network information for security and localization.
Cookies and similar technologies: identifiers used for session management, preferences and analytics.
Performance and error logs: crash reports, diagnostic data and performance metrics collected to maintain service reliability.
Analytics identifiers: anonymized or pseudonymized identifiers used by analytics providers to measure platform usage.

Data from Third Parties

We may receive data from partners, integrations and public sources to enhance the service or fulfill contractual obligations.

Payment processors: confirmation of payments and basic billing records necessary to complete purchases and subscriptions.
Identity verification and background check providers when required for specific enterprise arrangements.
Analytics and service providers that help us measure platform performance and improve user experience.

Purposes of Processing

We process personal data for a limited set of purposes necessary to operate the platform, provide learning content, and meet legal and contractual obligations.

To deliver and maintain the AIMaxBelajar learning platform, including course access, progress tracking and content delivery.
To process payments, issue invoices and handle billing inquiries through authorized payment partners.
To personalize learning recommendations and tailor course content based on user-provided profile information and activity data.
To provide support, mentoring, and communications about account activity, course updates and administrative notices.
To analyze platform usage and performance to improve product features, content quality and operational reliability.
To detect, prevent and contribute fraud, abuse and other security incidents affecting the service and its users.
To comply with legal obligations, respond to lawful requests and enforce our terms of service.
With explicit consent where required, to send marketing communications and announcements about new courses or offers.

Legal Bases for Processing

Our lawful basis for processing personal data depends on the context. We rely on the following bases where applicable:

Performance of a contract: processing necessary to provide the services you request (e.g., account management, course delivery).
Consent: when you have given clear consent for specific purposes, such as receiving marketing messages.
Legitimate interests: for platform security, fraud prevention, service improvement and analytics, balanced against user rights.
Legal obligation: where processing is necessary to comply with laws, regulatory requirements or lawful requests from authorities.

Your Rights (Applicable if GDPR applies)

If GDPR or similar data protection law applies, you may have additional rights. We describe common rights below and how to exercise them.

Right of access: you can request copies of the personal data we maintain about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: in certain circumstances you can request deletion of your personal data.
Right to restriction of processing: you may request limits on how your data is used in specific cases.
Right to data portability: where applicable, you can request a machine-readable copy of personal data you provided.
Right to object: you can object to processing based on legitimate interests or direct marketing where permitted by law.

Cookies and Tracking

We use cookies and similar technologies to enable core functionality, remember preferences and collect analytics data to improve the service.

Common cookie types include session cookies (temporary), persistent cookies (remember preferences), and analytics cookies (used to measure usage and performance).

Cookies fall into functional (required for the service), performance/analytics (to improve the platform) and optional marketing categories. Optional cookies are only used with consent where required.

You can manage cookie preferences through your browser settings or the cookie preference center on the site. Disabling some cookies may affect functionality.

View our Cookie Policy

Data Sharing and Disclosure

We share personal data only as needed to provide the service, comply with law, or with your consent. Below are typical categories of recipients.

Service providers and subprocessors: hosting providers, analytics vendors and platform tools that operate under contract and confidentiality obligations.
Payment and billing partners that process transactions and handle invoicing on our behalf.
Support and mentoring partners who assist with course delivery, feedback and mentoring sessions.
Legal and regulatory authorities when required by law, legal process or to protect the rights and safety of AIMaxBelajar and its users.
Business advisors and auditors engaged to support corporate operations under confidentiality obligations.
Affiliates and corporate partners, in cases where sharing supports a contracted enterprise learning arrangement and you have been informed.

International Data Transfers

AIMaxBelajar may transfer personal data to service providers and partners located outside Malaysia for hosting, analytics and support. Transfers are conducted in accordance with applicable law and with appropriate safeguards to protect data.

Where transfers occur, we implement safeguards such as standard contractual clauses, data processing agreements and technical measures to maintain an adequate level of protection.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described and to meet legal, tax and accounting obligations.

Account data is retained for the duration your account is active and for a limited period after account closure to allow recovery, dispute resolution and compliance; typically up to 5 years unless a longer retention period is required by law.

Messages and support communications are retained for up to 2 years to allow follow-up and quality review, unless a different retention period is required for legal reasons.

Service logs, diagnostic records and analytics data are retained for operational and security purposes for up to 12 months, with aggregated or anonymized data kept longer for trend analysis.

When personal data is no longer needed, we delete or anonymize it in a secure manner. If deletion is requested, we will take reasonable steps to remove the data from active systems and communicate any applicable limits due to backups or legal obligations.

Data security and protection

AIMaxBelajar treats personal data and learning records as critical business assets. We implement technical and organizational measures to reduce the risk of unauthorized access, accidental loss, or misuse. Our security approach is designed to protect account credentials, payment details and course activity while enabling reliable access for learners and administrators.

Encryption in transit (TLS) and encryption at rest for sensitive data
Role-based access controls, multi-factor authentication for administrative accounts and regular staff training
Periodic security assessments, vulnerability scanning and monitored logging to detect anomalous activity

User Rights and Choices

As a user of AIMaxBelajar you have rights regarding your personal data. You may review, correct or request restriction of processing of data we hold about you. We provide simple paths to exercise these rights and commit to responding in a timely manner.

Right to access personal information we hold about you
Right to request correction of inaccurate or incomplete data
Right to request deletion of personal data where processing is no longer necessary
Right to data portability for information you provided in a structured, commonly used format
Right to withdraw consent to direct marketing at any time
Right to restrict or object to certain types of processing where applicable
Right to lodge a complaint with a supervisory authority in Malaysia if you believe your data is mishandled
Right to opt out of profiling for marketing or non-essential personalization

How to submit a privacy request

To make a request regarding your data, contact our privacy team with a clear description of the information or action you request. Provide proof of identity to help us locate your records. We will acknowledge receipt and let you know any required next steps.

[email protected]

We aim to acknowledge requests within 7 business days and provide a substantive response within 30 calendar days, subject to any legal extensions permitted under applicable law.

Marketing communications and preferences

We may send newsletters, product updates and promotional offers related to courses and services at AIMaxBelajar. Marketing messages are based on preferences you set in your account and the communications consent you provide during registration.

You can unsubscribe from promotional emails at any time using the link included in each message or by updating your communication preferences in your account settings.

Children and age-appropriate use

AIMaxBelajar is designed for modern professionals and adult learners. If you believe a child under the age of 18 has provided us with personal data without parental consent, contact us so we can take appropriate steps to remove the information.

Third-party links and services

Our platform may contain links to third-party websites, plug-ins and integrations. Those services have their own privacy practices and AIMaxBelajar is not responsible for the content or privacy policies of external providers. Review third-party terms before sharing personal information with them.

Changes to this privacy policy

We may update this privacy policy to reflect changes in law, business practices, or product offerings. Material changes will be posted on our site with an updated effective date and, where appropriate, notified directly to active account holders.