Privacy Policy

1. Who We Are

SlickChat is operated by Bawah Pokok Technology Sdn. Bhd., a company registered in Malaysia. We provide AI-powered chat agent solutions to small and medium-sized businesses.

If you have any questions about this policy, you can contact our data protection contact at privacy@slickchat.app.

2. Information We Collect

We collect information in the following ways:

2.1 Information you provide directly

• Account registration details (name, email address, company name, phone number)
• Billing and payment information (processed securely through our payment provider; we do not store card numbers)
• Knowledge base content you upload (FAQs, documents, product information)
• Support requests and correspondence with our team

2.2 Information collected automatically

• Usage data (pages visited, features used, session duration)
• Device and browser information (IP address, browser type, operating system)
• Cookies and similar tracking technologies (see Section 9)
• Chat interaction logs between end-users and your deployed SlickChat agent

2.3 Information from third parties

• Single sign-on providers (e.g. Google OAuth) if you choose to register that way
• Payment processors for transaction verification

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Service
• Process payments and send transactional emails (receipts, invoices)
• Train and improve the AI responses for your deployed agent
• Provide customer support and respond to your enquiries
• Send product updates, security alerts, and administrative notices
• Send marketing communications where you have opted in (you may opt out at any time)
• Monitor and analyse usage to improve our platform
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on the following:

5. Sharing of Information

We do not sell your personal data. We may share it with:

• Service providers — cloud hosting, payment processors, email delivery, and analytics vendors who process data on our behalf under strict data processing agreements.
• AI model providers — anonymised or pseudonymised chat interactions may be processed by our AI infrastructure partners solely to generate responses.
• Legal and regulatory bodies — when required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion:

• Account data is deleted within 30 days
• Chat logs are deleted within 90 days
• Billing records may be retained for up to 7 years to comply with financial regulations
• Anonymised aggregate analytics may be retained indefinitely

7. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls and role-based permissions
• Regular security audits and vulnerability testing
• Incident response procedures with breach notification within 72 hours where required by law

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Restriction — request that we restrict processing in certain circumstances
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at privacy@slickchat.app. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to operate the Service and understand how it is used. The types of cookies we use:

• Strictly necessary — required for the Service to function (authentication, session management). These cannot be disabled.
• Analytics — help us understand how visitors interact with our website (e.g. page views, feature usage). These are only set with your consent.
• Marketing — used to deliver relevant advertising. These are only set with your consent.

You can manage your cookie preferences at any time via the cookie banner on our website or your browser settings.

10. Children's Privacy

SlickChat is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at privacy@slickchat.app and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on our website at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

The "Last updated" date at the top of this page reflects when the policy was last revised.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: