1. Introduction

Justype (“Justype”, “we”, “our”, or “us”) is committed to protecting the confidentiality, integrity, privacy, and security of personal and professional information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, process, retain, and safeguard information when users access or use the Justype platform, website, applications, APIs, integrations, and related services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Justype is operated by Aimovate Sdn Bhd, a company incorporated in Malaysia. Where we process personal data in connection with commercial transactions, we do so in accordance with Malaysia’s Personal Data Protection Act 2010 (Act 709) and the data protection principles established under it. For users located outside Malaysia, we will also handle personal data in a manner consistent with applicable local data protection laws.

2. Information We Collect

A. Account and Registration Information

We may collect:

·       Name

·       Email address

·       Company or organisation name

·       Job title

·       Phone number

·       Billing and payment information

·       Login credentials and authentication details

B. Usage and Technical Information

We may collect:

·       IP address

·       Device and browser information

·       Operating system information

·       Log files and session information

·       Usage analytics and interaction data

·       Diagnostic and performance-related information

We collect technical and usage information to maintain platform security, monitor performance, improve functionality, and prevent misuse or unauthorised access.

C. Content, Prompts, and Uploaded Materials

We may process prompts, uploaded documents, generated outputs, chat history, knowledge bases, and other materials submitted through the Services (“Content”) solely for the purpose of providing, maintaining, securing, and improving the Services.

Users remain responsible for ensuring they possess the necessary rights, permissions, and authority to upload or process Content through the platform.

3. How We Use Information

We may use information for the following purposes:

·       Providing and maintaining the Services

·       Generating AI-assisted outputs and workflows

·       Managing user accounts and subscriptions

·       Customer support and technical assistance

·       Security monitoring and fraud prevention

·       Improving platform functionality and performance

·       Compliance with legal and regulatory obligations

·       Communicating updates, notices, and service-related information

We process information only for legitimate business and operational purposes necessary to provide, secure, maintain, and improve the Services.

4. AI Processing and Customer Content

Justype is designed for professional and legal workflows where confidentiality is critical.

No Training on Customer Content

Justype does not use customer prompts, uploaded documents, generated outputs, knowledge base materials, or other customer Content to train, fine-tune, or improve any artificial intelligence model. This commitment extends to our upstream large language model providers, who are contractually prohibited from retaining or using customer Content for model training, fine-tuning, or any other purpose beyond delivering the requested response to Justype.

Ownership of Content

Users retain ownership of their uploaded Content, prompts, documents, and materials.

Users grant Justype a limited, non-exclusive, non-sublicensable right to host, process, transmit, and store such Content solely to the extent necessary to provide, secure, support, and maintain the Services for that user. Justype will not use customer Content for product development, benchmarking, marketing, or aggregated analytics, except where the customer has separately and expressly opted in.

AI Output Disclaimer

AI-generated outputs may not always be accurate, complete, or suitable for reliance without independent review.

Users remain responsible for validating outputs before relying on them for legal, professional, business, or operational purposes.

Use of Justype does not by itself create a solicitor-client relationship or legal privilege.

5. Confidentiality and Security

Justype implements commercially reasonable administrative, technical, and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration, misuse, or destruction.

Security measures may include:

·       Encryption in transit and at rest

·       Access controls and role-based permissions

·       Multi-factor authentication support

·       Security monitoring and audit logging

·       Incident response procedures

·       Secure cloud infrastructure practices

Access to customer data is restricted to authorised personnel and approved service providers with a legitimate operational need and subject to confidentiality obligations.

While we strive to protect information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach affecting customer Content or personal data, we will notify the affected customer without undue delay, and in any event within seventy-two (72) hours of confirming the breach, and will provide reasonable information about the nature of the breach and the steps being taken to address it.

6. Sharing and Disclosure of Information

We do not sell customer personal data or customer Content.

We do not share, sell, rent, or otherwise disclose customer Content or customer personal data to any third party, including any analytics provider, marketing partner, data broker, or other service provider.
The only circumstance in which we may disclose customer Content or personal data is where we are required to do so by a valid order, warrant, summons, or other binding legal process issued by a Malaysian governmental, judicial, or regulatory authority. Where lawfully permitted, we will notify the affected customer before complying so that the customer may seek to challenge or limit the disclosure.

The limited infrastructure providers we rely on to operate the Services (such as our cloud hosting provider and our upstream large language model provider) act only as processors on our instructions. They are bound by written contracts that prohibit them from accessing, using, retaining, or disclosing customer Content for any purpose other than delivering the technical service requested by Justype, and they are subject to confidentiality and security obligations no less protective than those set out in this Policy.

7. Data Retention

We retain personal data only for as long as reasonably necessary to:

·       Fulfil the purposes described in this Privacy Policy

·       Provide and maintain the Services

·       Comply with legal, tax, accounting, or regulatory obligations

·       Resolve disputes and enforce agreements

Customer Content (including prompts, uploaded documents, generated outputs, chat history, and knowledge base materials) is retained for the duration of the customer’s active subscription so that the Services remain available and continuous. After the customer’s subscription or account is closed, the customer may request deletion of their Content and personal data, and we will delete it from our live production systems within sixty (60) days of receiving the request. Routine encrypted backups containing residual copies are overwritten in the ordinary course of our backup cycle, after which no copies remain. Limited records (such as billing records and records we are required to keep under Malaysian tax, accounting, or other applicable laws) may be retained for the minimum period required by law.

8. International Data Transfers

Information may be processed and stored in jurisdictions where Justype, its affiliates, cloud infrastructure providers, or authorised subprocessors operate.

Where personal data is transferred across jurisdictions, we implement reasonable safeguards intended to ensure such transfers comply with applicable data protection laws.

9. Cookies and Analytics

Justype may use cookies and similar technologies for:

·       Authentication and session management

·       Security purposes

·       Platform functionality

·       Performance monitoring and analytics

Users may adjust browser settings to manage cookie preferences, although certain functionality may be affected.

10. Third-Party Services and Integrations

The Services may integrate with or rely upon third-party providers, including cloud hosting providers, AI providers, payment processors, communication tools, and productivity integrations.

Third-party services may operate under their own privacy policies and terms, and users are encouraged to review those policies separately.

11. User Rights

Subject to applicable law, users may have rights to:

·       Request access to personal data

·       Request correction of inaccurate information

·       Request deletion of personal data

·       Withdraw consent where applicable

·       Object to certain processing activities

·       Request data portability

Requests may be submitted using the contact details provided below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes may be communicated through the platform, website, or email.

Continued use of the Services after updates take effect constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions regarding this Privacy Policy or our data handling practices, please contact:

Justype

Email: support@justype.ai

Data Protection Officer / Privacy Enquiries: privacy@justype.ai

14. Final Notes

This Privacy Policy is intended to provide transparency regarding how Justype handles personal and professional information while delivering secure, AI-assisted productivity and legal workflow solutions.

Justype is designed with confidentiality, responsible AI usage, and enterprise trust in mind.