1. Who we are and the scope of this policy
AI Hive Sdn Bhd (1658030X), trading as Digital Bee (“Digital Bee”, “we”, “us” or “our”), is responsible for the personal data described in this policy. This policy applies to our website, enquiries, newsletters, marketing and professional services, and any Digital Bee software application that links to it.
Our handling of personal data is guided by Malaysia’s Personal Data Protection Act 2010 (“PDPA”), as amended. If a separate customer agreement or an in-product notice gives more specific information for a feature, that information should be read together with this policy.
2. Data we collect
Information you provide
- Contact and identity details, such as your name, work email, telephone number, company, role, and account credentials.
- Enquiry, demo, newsletter, application, and support information, including any message, website URL, résumé link, or other material you submit.
- Commercial and service information, such as your selected services, instructions, subscription or order details, and communications with us.
- Content and configuration that you choose to upload, create, or manage through our services.
Information collected automatically
When you use our website or application, we may collect device and usage data such as your IP address, browser and device type, operating system, referring page, pages viewed, interactions, timestamps, approximate location derived from IP address, cookie identifiers, and diagnostic or security events. We currently use analytics tools, including PostHog, to understand website use and improve our services.
You can limit cookies through your browser settings. Blocking some cookies may affect site or application functionality.
3. Data from connected advertising platforms
This section applies only if and when you choose to connect a supported Meta, Google, or TikTok account to a Digital Bee application. We do not access a platform account merely because you visit our website.
After you grant permissions through the platform’s authorization process, we may access and store the minimum data needed for the features you request, including:
- Platform account and user identifiers, authorized advertising accounts, pages, profiles, and granted permissions.
- Campaigns, ad groups, advertisements, creatives, audiences or targeting settings, budgets, schedules, delivery status, and account configuration.
- Aggregated campaign, conversion, engagement, and performance metrics made available by the platform.
- Authentication tokens and technical metadata required to maintain the connection securely.
With your explicit authorization and instructions, our application may also create or change campaigns, creatives, budgets, schedules, and related settings. We will not take those actions without an authorized user initiating, approving, or configuring the relevant feature.
This initial policy does not cover importing platform lead-form submissions or customer-level lead data. We will update our disclosures and obtain any required consent before introducing such access.
Google API data
Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide or improve user-facing features that are visible and relevant to the user who authorized access. We do not use it for targeted advertising, sell it, transfer it to data brokers, or allow human access except with specific permission or where necessary for security, support, legal compliance, or aggregated internal operations allowed by Google’s policy.
Meta and TikTok data is likewise handled only for the connected features you authorize and subject to their applicable developer terms. Digital Bee is independent of and is not endorsed by Meta, Google, or TikTok.
4. How we use personal data
- Provide, configure, secure, support, and improve our website, services, and application.
- Respond to enquiries, arrange demonstrations, assess applications, and communicate about our relationship.
- Authenticate users and carry out authorized reporting or campaign-management instructions.
- Measure performance, troubleshoot errors, prevent fraud or misuse, and maintain audit records.
- Administer subscriptions, contracts, and transactions and enforce our terms.
- Send newsletters or marketing communications where permitted; you may unsubscribe at any time.
- Comply with law, respond to lawful requests, and establish, exercise, or defend legal claims.
We do not sell personal data. We do not use connected-platform data for purposes unrelated to the user-facing features disclosed when you authorize the connection.
5. Why we process personal data
Depending on the context and applicable law, we process data with your consent; to take steps at your request or perform a contract; to comply with legal obligations; or for legitimate business purposes such as operating, securing, and improving our services, provided those purposes do not override your rights. Where data is required, we will indicate this when practical. If you do not provide it, we may be unable to supply the requested feature or service.
7. Retention, disconnection, and deletion
We retain personal data only for as long as needed for the purposes described above, including to provide an active service, meet contractual or legal obligations, resolve disputes, maintain security records, and enforce agreements. Retention periods depend on the data type, sensitivity, legal requirements, and operational need. We delete or anonymize data when it is no longer required.
You can revoke platform permissions through the relevant Meta, Google, or TikTok account and, where available, disconnect the integration in Digital Bee. Disconnection stops future API access but may not automatically delete data already lawfully stored or records we must retain. To request account or connected-platform data deletion, use our contact form and identify the account and platform concerned. We will verify the request and delete or de-identify eligible data within a reasonable period, subject to legal and security exceptions.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access controls, authentication, secure transmission, monitoring, and restricted access to platform credentials. No internet service is completely secure, and we cannot guarantee absolute security. Please protect your credentials and notify us promptly if you suspect unauthorized access.
9. Cross-border processing
Our service providers and connected platforms may process data outside Malaysia. Where personal data is transferred cross-border, we take reasonable steps to ensure the transfer is permitted under applicable law and that the recipient provides an appropriate level of protection through contractual, technical, organizational, or other safeguards.
10. Your rights and choices
Subject to the PDPA and other applicable laws, you may ask to access or correct your personal data, withdraw consent, limit certain processing, object to direct marketing, or request deletion where applicable. You may also unsubscribe using a link in a marketing email and manage platform permissions directly with the connected provider.
Submit a request through our contact form. Include enough information for us to identify you and the relevant data. We may verify your identity, and a lawful exception may limit what we can provide or delete. You may also raise a concern with Malaysia’s Personal Data Protection Commissioner.
11. Children
Our services are not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
12. Changes to this policy
We may update this policy as our services, integrations, or legal obligations change. We will post the revised version here and change the “Last updated” date. If a material change affects how we use data already collected, we will provide additional notice or request consent where required before applying the new use.