Privacy Policy
Last updated: 25 October 2026
OURAI TECHNOLOGY (SSM 202603164162 (003863032-V)), T1-38-7 Skypark Condominium, Jalan Teknokrat 1, 63000 Cyberjaya, Selangor, Malaysia, operates the OurAI service. This policy explains what we hold, why, who processes it, and how to make us delete it. It is written to be read, not to be survived.
Who is responsible for what
Each property agent who uses OurAI decides which customers and conversations they bring into their workspace. For that information the agent is the data user under Malaysia’s Personal Data Protection Act 2010, and OurAI processes it on the agent’s behalf. For agents’ own account details, OurAI is the data user.
What we hold
- Agent accounts. Name, email address, phone number, agency, and REN or REA licence number — entered by the agent, and shown publicly on their own shopfront because that is what the shopfront is for.
- Property and contact records. Listings, enquiries and viewing requests, including the name and phone number of the owner or customer they concern. Most of this is entered by an agent about people they are already working with.
- Forms you submit. What you type into a viewing request, an enquiry, or a review link on an agent’s shopfront.
- WhatsApp conversations — only if an agent connects their WhatsApp Business number. When an agent connects their number, WhatsApp (Meta) shares with OurAI:
- the agent’s WhatsApp contacts (names and phone numbers);
- up to 180 days of the agent’s past one-to-one chats — never group chats — and photos or files sent in the last 14 days;
- every new message sent to that number, and every message the agent sends from their phone, from then on.
Why we hold it
To publish the agent’s shopfront, to keep their records and conversations in one place, to match their listings against their enquiries, to help them reply, and to answer you when you contact us. Nothing here is sold, rented, or shared with another agent. One agent’s records and conversations are never visible to another agent. If the agent has switched on Ace’s automatic reply and you message them about one of their listings, we read that message to send you one automatic reply about that listing (for example, whether it is still available), from the agent’s own number and marked as automatic.
Who processes it for us
- Meta Platforms (WhatsApp Business Platform) — carries WhatsApp messages between the agent’s number and customers, when an agent has connected their number.
- Supabase — the database and sign-in.
- Vercel — hosting.
- Anthropic — the AI that drafts and extracts. When an agent uses OurAI’s AI features, the text needed for that task — which can include message text — is sent to be processed, and is not used to train their models.
- Resend — email we send you.
- Upstash — rate limiting. Holds short-lived counters keyed by IP address or account, kept for up to 24 hours, used only to stop abuse.
Each of these has its own privacy terms, which apply to data we route through them. Some of them store data outside Malaysia.
How long we keep it
We keep an agent’s records and conversations while their account is active. If an agent disconnects their WhatsApp number, we stop receiving new messages at once and delete the imported WhatsApp conversations and contacts within 30 days. If an agent asks us to close their account, by writing to hello@ourai.my, we delete their data within 30 days. An opt-out (“STOP”) record is kept for as long as it is needed to make sure nobody messages that number again.
How an agent disconnects WhatsApp
In OurAI, or in the WhatsApp Business app: Settings → Account → Business Platform → Disconnect.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it — whether or not you have ever had an account with us. If your messages reached us through an agent, we will tell that agent and act on your request.
Request deletion of your data →
You can also email hello@ourai.my. To stop WhatsApp messages immediately, reply STOP to the agent.
Changes
If we change what we hold or who processes it, we update this page and the date at the top before the change takes effect.