Privacy Policy

Last updated: 24 August 2025

Introduction

Qralynx Technologies Sdn. Bhd. (“we”, “our”, or “us”) places the highest priority on your privacy and data security. This Privacy Policy outlines how we collect, use, process, store, and protect your personal information, in full compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable regulations. We strive to maintain transparency, control, and trust in all our AI-driven offerings—LynxAI Agent Chatbot, LynxAI Assistant, and AesthetiX (AI Skin and Hair Analysis).

1. Commitment to Privacy & Confidentiality

We do not rent, sell, or share your personal data with unauthorised third parties, except as expressly outlined in this policy or as required by law. Any data shared remains strictly confidential and handled only by trusted parties under contractual or legal obligations.

2. How We Protect Your Data

We safeguard your data using industry-leading techniques:

  • State-of-the-art encryption, secure storage, and access control mechanisms

  • Cloud infrastructure protected by rigorous security protocols

  • Access limited to authorised personnel, all trained in data privacy best practices

  • Regular security reviews and vulnerability assessments to proactively strengthen defences

3. Types of Personal Data We Collect

Depending on your interactions with our services, we may collect:

  • Identity Data – Name, date of birth, company, job title

  • Contact Data – Email, phone number, mailing address

  • Authentication Data – Login credentials, third-party sign-in details (e.g. Google)

  • Usage Data – Chat transcripts, logs, usage patterns, interaction timestamps

  • System Data – Device type, browser, IP address, geolocation data, technical logs

  • Consent-Based Contextual Data – Skin or hair images (for AesthetiX), business context input, support tickets

If you submit information on behalf of others (e.g., clients, colleagues), you confirm you have obtained explicit consent.

4. Sources of Data

We collect data through:

  • Forms on our website or apps

  • Interactions with our AI chatbots or tools

  • Enterprise or partner platforms (with consent)

  • Cookies and web tracking technologies

  • Uploaded files (e.g., skin assessment images)

  • External sources like LinkedIn (strictly with your authorization)

5. Purposes of Processing Personal Data

Your data is processed for purposes including:

  • Delivering AI services (LynxAI, AesthetiX)

  • Managing accounts and identity verification

  • Providing responsive support

  • Enhancing user experience and performance analytics

  • Generating anonymised reports for enterprise clients

  • Informing you of updates, events, and offers (only with your explicit opt-in)

  • Fulfilling legal or regulatory obligations

  • Research, development, and innovation—only with your explicit consent

  • Training custom AI models for your organisation, with a strict policy that your data will not be used for any general/public AI model training

6. Disclosure of Personal Data

We may disclose your data only to:

  • Service providers essential to operations (e.g., hosting, analytics)

  • Legal/regulatory authorities, when legally compelled

  • Affiliates or group entities (within Malaysia or abroad), under confidentiality terms

  • Professional advisors (legal, financial, technical)

  • Parties in cases of urgent safety or fraud concerns, subject to legal requirements

7. Cross-Border Transfers

In some circumstances, data may be stored or processed outside Malaysia. We ensure such transfers are lawful and secure, using safeguards such as contractual data protection clauses and ensuring adequacy of data protection standards.

8. Your Rights

Under PDPA, you may:

  • Access your personal data

  • Request corrections or updates

  • Withdraw consent for select processing

  • Request erasure, where permissible

  • Object to direct marketing processing

To exercise any of these rights, please contact us at tech@qralynx.com. We may request identity verification for security purposes.

9. Data Retention

We retain your data only for as long as necessary to fulfil the stated purposes or as required by law. Once no longer needed, we securely delete or anonymise your data.

10. Changes to This Policy

We may periodically update this Privacy Policy to reflect legal, operational, or technological developments. Updates will appear here with the revision date. Continued use of our services indicates acceptance of any changes.

11. Contact Us

If you have questions or concerns regarding this Privacy Policy or your data rights, please reach out to:

Email: tech@qralynx.com
Address: Qralynx Technologies Sdn. Bhd., Level 23-1, Premier Suite One Mont Kiara, No.1, Jalan Kiara, Month Kiara, 50480 Kuala Lumpur. Wilayah Persekutuan.