Last updated: 7 July 2026 · This notice is provided in English and Bahasa Malaysia as required by the Personal Data Protection Act 2010. Notis Bahasa Malaysia di bahagian bawah.
Pitchify ("we", "us") processes personal data about two groups of people: (a) customers — businesses and their staff who sign up for and use the Service; and (b) call recipients— people our AI voice agent contacts on a customer's behalf. This notice explains what we collect, why, who we share it with, and your rights under the Personal Data Protection Act 2010 ("PDPA").
From customers: name, email, phone number, business name and details you provide in the application form and onboarding wizard (industry, offer, target areas, scripts), login credentials (passwords are stored only as secure hashes by our authentication provider), billing details (handled by Stripe — we never see or store full card numbers), and usage data such as dashboard activity and call quotas.
About call recipients: business name and phone number (sourced from publicly available business listings or lists uploaded by the customer), the audio of the call, its transcript, an automated summary, and an automated interest-level assessment.
Automatically: basic technical data needed to run and secure the website, such as IP addresses used for rate limiting and abuse prevention, and essential session cookies for login. We do not run third-party advertising trackers.
We do not sell personal data, and we do not use call recordings to build marketing profiles of call recipients.
Calls placed through the Service are conducted by an artificial intelligence voice agent and are recorded and transcribed so the customer can review the conversation. The agent will acknowledge being an automated system if directly asked. If a call recipient asks not to be contacted again, we suppress future calls to that number.
We share personal data only with the service providers needed to operate Pitchify, and only what each needs: telephony carriers (call routing), AI voice and language-model providers (conducting and summarising calls), our database and authentication provider, our payment processor (Stripe), and our hosting providers. Customers see the call data generated for their own campaigns. We may disclose data where required by law, a regulator or a carrier, or to protect our legal rights.
Some of our providers process data outside Malaysia (for example in the United States and the European Union). Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA, including choosing reputable providers with contractual data-protection commitments.
We keep customer account data for as long as the account is active and as needed afterwards for legal, billing and dispute purposes. Call recordings, transcripts and summaries are kept while the customer's account is active so the customer can use them, and are deleted or anonymised within a reasonable period after account closure, except where retention is required by law. Suppression (do-not-call) records are kept so the request keeps being honoured.
We protect personal data with, among other measures: encrypted connections (HTTPS), row-level access controls in our database so each customer can only access their own data, secret-key authentication between internal systems, rate limiting, and the principle of least privilege for our service providers. No system is perfectly secure, but we take reasonable practical steps as required by the PDPA's Security Principle.
Under the PDPA you may: request access to your personal data; request correction of inaccurate data; withdraw consent to processing (which may mean we can no longer provide the Service to you); and, if you are a call recipient, ask us to stop contacting you at any time — including simply by saying so during a call. To exercise any of these rights, contact us at teohjoey22@gmail.com. We may need to verify your identity before acting on a request.
We may update this notice from time to time. Material changes will be announced by email or a notice on the website at least 14 days before taking effect.
Pitchify ("kami") memproses data peribadi dua kumpulan: (a) pelanggan — perniagaan yang mendaftar dan menggunakan Perkhidmatan; dan (b) penerima panggilan— individu yang dihubungi oleh ejen suara AI kami bagi pihak pelanggan. Notis ini dikeluarkan menurut Akta Perlindungan Data Peribadi 2010 ("PDPA").
Daripada pelanggan: nama, e-mel, nombor telefon, maklumat perniagaan, skrip panggilan, maklumat pembayaran (diuruskan oleh Stripe — kami tidak menyimpan nombor kad penuh), dan data penggunaan. Mengenai penerima panggilan: nama perniagaan dan nombor telefon (daripada senarai perniagaan awam atau senarai yang dimuat naik pelanggan), rakaman audio panggilan, transkrip, ringkasan automatik dan penilaian minat automatik. Secara automatik: data teknikal asas seperti alamat IP untuk keselamatan, dan kuki sesi untuk log masuk.
Untuk menyediakan Perkhidmatan (mencari prospek, membuat panggilan AI, melaporkan hasil), mengurus akaun dan bil, menguatkuasakan Terma Perkhidmatan, menghormati permintaan jangan-hubungi, mematuhi kewajipan undang-undang, dan meningkatkan kualiti Perkhidmatan. Kami tidak menjual data peribadi.
Panggilan dibuat oleh ejen suara kecerdasan buatan dan dirakam serta ditranskripsikan untuk semakan pelanggan. Jika penerima panggilan meminta untuk tidak dihubungi lagi, nombor tersebut akan disekat daripada panggilan akan datang.
Data dikongsi hanya dengan pembekal perkhidmatan yang perlu (pembawa telefoni, pembekal AI, pangkalan data, pemproses pembayaran, pengehosan) setakat yang diperlukan. Sesetengah pembekal memproses data di luar Malaysia; kami mengambil langkah munasabah untuk memastikan perlindungan setanding dengan PDPA.
Di bawah PDPA, anda boleh memohon akses kepada data peribadi anda, memohon pembetulan, menarik balik persetujuan, dan (bagi penerima panggilan) meminta kami berhenti menghubungi anda pada bila-bila masa — termasuk semasa panggilan itu sendiri. Hubungi: teohjoey22@gmail.com.
This notice is a general template and does not constitute legal advice. / Notis ini adalah templat umum dan bukan nasihat undang-undang.