Privacy Policy

Last updated: 12 August 2026

1. Who we are

iSalesAI provides an AI chatbot platform that businesses embed on their websites. This policy explains what data we collect, why we collect it, and the choices you have. You can reach us at hello@isalesai.com.my.

2. Data we collect

  • Account data — your name, email address and authentication details.
  • Chatbot configuration — company details, knowledge sources, uploaded documents, FAQs, images and branding you add.
  • Conversation data — messages exchanged between your chatbot and your website visitors, plus ratings and handover records.
  • Lead data — contact details your visitors submit through lead forms.
  • Billing data — subscription and invoice records. Card details are handled by Stripe and never stored on our servers.
  • Technical data — log data such as IP address, browser type and timestamps used for security and troubleshooting.

3. How we use data

We use data to operate and secure the Service, generate chatbot replies, deliver leads and webhook events you configure, process payments, provide support, and improve reliability. We do not sell your data, and we do not use your conversation content for advertising.

4. Service providers

We share data with providers strictly to run the Service: cloud hosting and database providers, AI model providers that generate chatbot responses, Stripe for payments, and any automation endpoint (such as Make or n8n) that you configure yourself. Providers are only allowed to process data on our instructions.

5. Your visitors' data

When you deploy a chatbot, you are the controller of your visitors' conversation and lead data and we act as your processor. You are responsible for telling your visitors that a chatbot is in use and for having a lawful basis to collect their details.

6. Retention

We keep account and chatbot data for as long as your account is active. Conversations and leads remain until you delete them or delete your account. After account deletion we remove or anonymise data within 30 days, except where we must keep records for legal or accounting reasons.

7. Security

Data is transmitted over encrypted connections and stored with access controls that limit each account to its own records. Uploaded files are stored in private storage and served through controlled endpoints. No system is perfectly secure, so please use a strong, unique password.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you may object to certain processing. Email hello@isalesai.com.my and we will respond within a reasonable period. Malaysian users also have rights under the Personal Data Protection Act 2010.

9. Cookies

We use essential cookies and local storage to keep you signed in and to maintain chatbot sessions. These are required for the Service to function.

10. Changes

We may update this policy. Material changes will be announced by email or in-app notice before they take effect.