Help & FAQTermsLog in

Privacy Policy

Effective 14 October 2026

1. Who we are

AI Department is operated by Verisance Corporation Sdn Bhd (559820-V), Malaysia (“we”, “us”). This policy explains what personal data we collect when you use AI Department, including the WhatsApp AI Assistant, how we use it and your rights under Malaysia’s Personal Data Protection Act 2010. Contact: admin@verisance.com.my.

2. What we collect

  • Account data: your name, email address, company name and login details.
  • Business information you enter: brand answers, Brand Kit documents, task briefs, and the business details you give your WhatsApp assistant (products, prices, hours, policies, contact details).
  • Content we create for you: AI-written text, images and videos, and chat history with your AI departments.
  • Billing data: your plan and payment status. Card and bank details are entered on Stripe’s secure page and are never stored by us.
  • WhatsApp AI Assistant data: if you connect a WhatsApp Business number, we receive the messages your customers send to that number, their WhatsApp phone number and profile name, and the replies we send. We also store your WhatsApp Business account identifiers and an access token issued by Meta, which is encrypted.
  • Google Search Console data: if you choose to connect Google Search Console, we receive the search performance figures for the one website property you pick. Section 5 sets out exactly what this covers.
  • Usage data: which features you use and how often, so we can apply plan allowances and keep the service reliable.
  • Visits to our public pages: we count how many people open our front page, the free AI check and the sign-up page, which site sent them, and whether they were on a phone or a computer. We do this without cookies and without storing your internet address: the count uses a one-way code that changes every day and cannot identify you.
  • Scam Check: the link, message, post or screenshot you give our free Scam Check is sent to our AI provider to be read, and any link in it is opened by our server. If you choose a file to check, the file itself stays on your device: we receive only its name, its size, its fingerprint (a code worked out from the file) and the names of the files inside it, and we may ask an antivirus database (VirusTotal) whether that fingerprint is known. We do not store what you send or the result, and we do not ask who you are. We keep only a daily count of checks, using the same kind of one-way code.

3. How we use it

  • To provide the service: run your AI tasks, generate content and answer your customers on WhatsApp on your behalf, using the business information you provided.
  • To bill you, apply plan allowances and prevent abuse.
  • To support you and tell you about changes to the service.

We do not sell personal data. We do not use your content or your customers’ WhatsApp messages to advertise to them.

4. Your role and ours for WhatsApp messages

For the WhatsApp AI Assistant, you (the business) decide what the assistant says and who it talks to; we process your customers’ messages on your behalf to provide the service. You are responsible for having a lawful basis to message your customers and for the information you give the assistant. The assistant only answers questions about your business, tells customers it is an AI assistant if asked, and offers a way to reach your team.

5. Google account data (Google Search Console)

Connecting Google Search Console is optional. If you do connect it, AI Department asks your Google account for a single read-only permission, https://www.googleapis.com/auth/webmasters.readonly. Because that is access to your Google account rather than information you typed into ours, we set out here exactly what it means.

  • What we access: the list of Search Console properties your Google account is allowed to read, and — for the single property you choose — its search performance figures: impressions, clicks, average position, and the search queries and pages those belong to. The permission is read-only, so we cannot change or delete anything in your Google account. We do not request and cannot read your Gmail, Google Drive files, contacts, calendar or photos.
  • How we use it: to show you how your website is actually doing on Google inside AI Department — the totals and top queries on your AI SEO page, and a per-article line on posts we wrote for you. That is the only purpose.
  • How we store it: the refresh token Google issues is encrypted before it is saved, is never returned by our API and is never sent to your browser. The performance figures are stored in our database against your account alone.
  • Who we share it with: no one. Your Google Search Console data is not sold, not shared with other customers or any third party, not used for advertising, and not used to develop, improve or train any AI or machine-learning model. It is not sent to Anthropic, Google Gemini, MuAPI or any other provider named in section 6 — it is read from Google and shown to you.
  • How to disconnect and delete it: open AI SEO in AI Department and choose Disconnect. That immediately deletes the stored token and the figures we pulled. You can also withdraw our access at any time from your Google Account under Third-party apps & services.

AI Department’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Who we share data with

We share data only with the service providers that run AI Department, and only as needed:

  • Anthropic (Claude AI): processes your prompts, business information and WhatsApp conversations to write replies and content.
  • Google (Gemini) and MuAPI: generate AI images and videos you request.
  • Meta (WhatsApp Business Platform): delivers WhatsApp messages to and from your number.
  • Stripe: processes payments.
  • Supabase (database and login) and Render (application hosting): store and run the service.
  • Our email provider: sends service and account emails.

Some of these providers process data outside Malaysia. We choose providers that protect data with industry-standard security. We may also disclose data where the law requires it.

Google Search Console data (section 5) is an exception to this list: it is never passed to any of these providers.

7. How long we keep it

  • WhatsApp conversation logs: 90 days, then deleted automatically.
  • Google Search Console figures: while the connection is active, and deleted as soon as you disconnect it.
  • Account, business information and content: while your account is open, and deleted within 30 days after you ask us to delete your account.
  • Billing records: as long as Malaysian tax and accounting law requires.

8. Security

Data is sent over encrypted connections (HTTPS). Access to your data is restricted to your account. WhatsApp access tokens and Google refresh tokens are stored encrypted. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

9. Your rights

Under the PDPA you may ask to access or correct your personal data, withdraw consent, or limit how we use it. Email admin@verisance.com.my and we will respond within 21 days.

10. How to delete your data

You can delete your data at any time:

  1. Disconnect WhatsApp: in AI Department, open WhatsApp Assistant and click Disconnect number. We stop receiving and answering messages for that number immediately and delete its access token.
  2. Disconnect Google Search Console: in AI Department, open AI SEO and click Disconnect. We delete the encrypted Google token and every figure pulled from your Search Console property straight away.
  3. Delete your account and all data: email admin@verisance.com.my from your account email with the subject “Delete my data”. We delete your account, business information, content and WhatsApp conversation logs within 30 days, and confirm by email.
  4. If you are a customer of a business that uses our WhatsApp assistant: contact that business, or email us with the WhatsApp number you used and the business name, and we will delete your messages.

You can also remove AI Department’s access from Meta at any time in your Facebook or Meta Business settings under business integrations, and from Google at any time under Third-party apps & services.

11. Children

AI Department is a business service and is not meant for anyone under 18.

12. Changes

We will post any change to this policy on this page and update the effective date. For significant changes we will also notify you by email.