YunaChat ("we", "us", "our") is the operating name of YUNARIS TECHNOLOGIES, the business that runs yunachat.com and app.yunachat.com. YunaChat helps businesses answer their customers on messaging channels. This policy explains what personal data we collect, why, how we protect it, and the choices you have. It is written to meet the requirements of the Malaysian Personal Data Protection Act 2010 (PDPA). Questions go to [email protected].
Who this policy covers, and our two roles
- Businesses (our clients). The companies and individuals who create a YunaChat account. For account data, we are the data controller.
- Their customers (end users). The people who message a business that uses YunaChat. We process their conversation data on behalf of that business, which remains the controller of its own customer relationships. If you messaged a business, you can contact that business directly or contact us, and we will act on your request.
- Website visitors. People browsing yunachat.com.
What we collect
- Account and business information provided by the business: contact details, business details, and the content the business uploads to be used by the service.
- Conversation data: the messages exchanged between a business and its customers over the channels the business connects, together with the platform identifiers needed to deliver them (for example a phone number or a platform messaging ID and display name).
- Connection credentials for the channels and integrations a business chooses to connect, stored encrypted.
- Billing records for the subscription. We do not store full card numbers.
- Site analytics on the marketing site: we use Google Analytics in a cookieless configuration — it sets no cookies and uses no advertising identifiers (Consent Mode defaults to denied and Google Signals is off), and Google processes the resulting aggregated usage data on our behalf as a processor. We do not use it for advertising or ads personalization.
Data we receive from Meta platforms
Where a business connects Facebook or Instagram, we receive messages, related identifiers, and profile basics from Meta Platforms solely to provide the service to that business: receiving its customers' messages and delivering replies. We use this data for no other purpose, we do not sell it, we do not use it for advertising, and we delete it as described on our data deletion page, including through Meta's automated deletion request process.
Data we receive from Google
Where a business connects its Google Calendar, the business grants us access through Google so the assistant can offer real viewing times and book confirmed appointments on the business's behalf. We receive only the calendar availability (free and busy) and event scheduling access the business grants, plus the email address of the connected Google account so the business can see which account is linked. We use this access solely to read availability and write the bookings the business asks us to make. We do not read the contents of existing calendar events, we do not sell this data, we do not use it for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. When the assistant offers available times to a customer, the computed availability we determine (never the underlying calendar event details) is prepared and presented entirely by YunaChat's own systems; it is never sent to, or processed by, any third-party AI provider. The business can disconnect at any time from its dashboard, which revokes our access immediately, and can request deletion as described on our data deletion page.
YunaChat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use data
- To provide and operate the service for the business, including automated (AI-assisted) processing of message content to generate responses on the business's behalf.
- To secure the platform: monitoring, abuse and fraud prevention, and usage accounting.
- To support account holders and send service notifications.
- To improve the service, using aggregated or de-identified information where practical.
We do not sell personal data, and we do not use conversation data for third-party advertising.
Who we share data with
We use a small set of service providers (processors) to run YunaChat. They process data only to provide their service to us, under agreements that protect it. By category:
- Cloud infrastructure providers (database, hosting, storage, networking, and content delivery).
- AI infrastructure providers that process message content on our instructions to generate replies.
- The messaging platforms used to deliver conversations.
- Integration providers a business chooses to connect (for example a calendar).
- A transactional email delivery provider.
The current named list of our subprocessors is available on request at [email protected]. We may also disclose data where the law requires it, or to protect the rights, safety, or property of YunaChat, our clients, or others.
Where data is stored
Our infrastructure providers may store and process data outside Malaysia. We protect data in transit and at rest as described below regardless of region.
How long we keep data
- Account, business, and conversation data: for as long as we provide the service to the business.
- Media received in conversations: automatically deleted on a short rolling schedule.
- Billing and audit records: kept as required for accounting and legal compliance.
- Deletion requests are honored within 30 days; deleted data also leaves our backups as the backup cycle rotates.
How we protect data
- Encryption in transit on all public surfaces, and encryption at rest for stored credentials.
- Access controls separating each business's data, with administrative access limited to operating the service.
- Routine encrypted backups with tested recovery.
Your rights
Under the PDPA you may request access to your personal data, ask us to correct it, withdraw consent (subject to legal and contractual limits), and ask us to delete it. The data deletion page explains every path, including the automated one for Facebook and Instagram users. To exercise any right, email [email protected]. Customers of a business may also contact that business directly, and we will support it in honoring the request.
Children
YunaChat is a business tool and is not directed at children. We do not knowingly collect personal data from children. If you believe a child's data has been collected, contact us and we will delete it.
Changes to this policy
We may update this policy as the product evolves. We will post the new version here with an updated date, and for material changes we will notify account holders.
Contact
YunaChat, operated by YUNARIS TECHNOLOGIES. Email: [email protected].