AISoftBox Sdn. Bhd.
Company Registration No.: 1437655-T
Effective Date: 14 August 2025
Last Updated: 14 August 2025
This Privacy Policy (“Policy”) explains how AISoftBox Sdn. Bhd. (“AISoftBox”, “we”, “us” or “our”) collects, receives, accesses, uses, processes, stores, transfers and protects information in connection with our websites, software, cloud platforms, dashboards, APIs, e-Invoice middleware, digital receipt solutions, applications and related services (collectively, the “Services”).
This Policy is intended to apply to customers, authorized users, business representatives and other individuals who interact with our Services.
By registering for, accessing or using the Services, you acknowledge that you have read and understood this Policy and agree to the processing of information as described herein.
Where you use the Services on behalf of a company, business or other organization (“Customer”), you represent that you are authorized to accept this Policy on behalf of that Customer.
For purposes of this Policy:
“Customer Data” means information, records, files, invoices, transaction information, personal information and other data submitted, uploaded, imported, transmitted or otherwise provided to AISoftBox by or on behalf of a Customer through the Services.
“Personal Data” means personal data or personal information as defined under applicable Malaysian data protection legislation.
“Third-Party Services” means any external service, platform, API, government system, accounting system, payment provider, hosting provider, communication provider or other third-party system that is connected to or used in conjunction with the Services.
“User” means any individual authorized by a Customer to access or use the Services.
AISoftBox provides technology infrastructure, software, middleware and related processing services.
In relation to Customer Data submitted through the Services, AISoftBox generally acts as a technology service provider processing information on behalf of the Customer according to the Customer’s instructions and use of the Services.
AISoftBox does not generally determine:
The Customer remains responsible for its own compliance obligations concerning Customer Data.
AISoftBox may collect and process information reasonably necessary to operate, maintain, secure and improve the Services.
Such information may include:
Depending on the Services used by the Customer, Customer Data may include:
AISoftBox may automatically collect:
The Customer acknowledges and agrees that it is solely responsible for:
AISoftBox is not responsible for the Customer’s failure to comply with any of the above obligations.
By using the Services, the Customer authorizes AISoftBox to access, process, transmit, store, copy, analyze and otherwise handle Customer Data to the extent reasonably necessary to:
Where the Services are used for e-Invoice processing, AISoftBox may transmit Customer Data to the relevant government or third-party systems, including the Inland Revenue Board of Malaysia (LHDN/IRBM) and its applicable e-Invoice or MyInvois infrastructure.
AISoftBox does not guarantee that:
AISoftBox shall not be responsible for failures, delays, rejection, downtime, maintenance, technical problems, changes or interruptions originating from LHDN/IRBM, MyInvois, government infrastructure or other external systems.
The Customer remains solely responsible for its tax, accounting and statutory obligations.
AISoftBox provides technology assistance and does not provide tax, accounting or legal advice.
The Services may depend upon or integrate with Third-Party Services.
These may include, without limitation:
The Customer acknowledges that AISoftBox may use such Third-Party Services where reasonably necessary to operate or improve the Services.
AISoftBox does not control the availability, security, functionality, policies or practices of Third-Party Services.
AISoftBox shall not be responsible for any failure, delay, interruption, data loss, security incident, modification or other issue caused by a Third-Party Service, except to the extent liability cannot lawfully be excluded.
AISoftBox may appoint, engage or use third-party service providers, contractors, subcontractors and infrastructure providers to assist in providing the Services.
Such providers may process or have access to information where reasonably necessary for:
The Customer authorizes AISoftBox to use such providers as reasonably necessary to provide the Services.
AISoftBox may use Customer Data for the following purposes:
AISoftBox may also use aggregated, statistical, anonymized or de-identified information derived from use of the Services for analytical, operational, research, development and business purposes, provided that such information does not reasonably identify the Customer or an individual.
As between AISoftBox and the Customer, the Customer retains its rights in Customer Data, subject to the rights granted to AISoftBox under this Policy and the applicable service agreement.
Nothing in this Policy transfers ownership of Customer Data to AISoftBox.
However, the Customer grants AISoftBox a non-exclusive, worldwide, royalty-free right and license to access, copy, process, transmit, store and use Customer Data to the extent reasonably necessary to provide, maintain, secure and improve the Services and to comply with applicable legal obligations.
AISoftBox retains all rights in:
AISoftBox may retain Customer Data and related records for as long as reasonably necessary for:
AISoftBox may establish operational retention periods for different categories of information.
Following termination of an account, AISoftBox may retain certain information for a reasonable period where required for legal, regulatory, security, accounting, audit or legitimate business purposes.
Backup copies may remain in backup systems for a reasonable period before being overwritten or securely deleted in accordance with AISoftBox’s backup procedures.
Where technically and legally practicable, AISoftBox may delete Customer Data following an appropriate request or termination of Services.
However, AISoftBox is not required to immediately delete information where:
AISoftBox may maintain system logs and audit records relating to use of the Services.
Such records may include:
AISoftBox may retain and use such records for security, troubleshooting, auditing, compliance, dispute resolution and operational purposes.
AISoftBox implements reasonable technical and organizational measures intended to protect information against unauthorized access, loss, misuse, alteration or disclosure.
However, the Customer acknowledges that:
Accordingly, AISoftBox does not warrant that the Services will be completely free from security vulnerabilities, cyberattacks or unauthorized access.
The Customer is responsible for:
AISoftBox shall not be responsible for unauthorized activity resulting from compromised credentials, inadequate Customer security controls, misuse by Customer personnel or unauthorized disclosure of account information by the Customer.
AISoftBox may use cookies, session technologies and similar technologies to operate, secure and improve the Services.
Such technologies may be used for:
Disabling certain cookies may affect the functionality of the Services.
AISoftBox may contact Customers using the contact information provided during registration or use of the Services.
Communications may include:
Certain operational or security communications may continue even where a Customer has opted out of promotional communications.
Subject to applicable law, AISoftBox may send information concerning its products, services, promotions, events or related offerings.
Customers may request to opt out of promotional communications.
AISoftBox may nevertheless continue sending essential service, security, account, billing and operational communications.
Customer Data may be stored, processed or transmitted through infrastructure operated by AISoftBox or its service providers.
Depending on the Services and infrastructure configuration, information may be processed within or outside Malaysia.
By using the Services, the Customer acknowledges and authorizes such processing and transfer to the extent permitted by applicable law.
AISoftBox may change hosting providers, infrastructure locations or technical architecture where reasonably necessary to operate or improve the Services.
Where AISoftBox processes Personal Data on behalf of a Customer, AISoftBox may refer requests from individuals concerning such Personal Data to the relevant Customer.
The Customer remains primarily responsible for responding to requests concerning Personal Data that the Customer collected or controls.
AISoftBox may provide reasonable technical assistance where required and commercially reasonable, subject to applicable service arrangements and any applicable fees.
AISoftBox may require appropriate identity verification before processing any request.
AISoftBox may disclose information where reasonably necessary to:
AISoftBox may make such disclosure without further notice where permitted or required by law.
If AISoftBox is involved in a merger, acquisition, restructuring, financing, sale of assets, sale of business or similar transaction, information relating to Customers and the Services may be transferred as part of that transaction.
AISoftBox may disclose relevant information to prospective purchasers, investors, advisers or transaction parties subject to appropriate confidentiality arrangements where appropriate.
AISoftBox may suspend, restrict or terminate access to the Services where reasonably necessary to:
Where reasonably practicable, AISoftBox may notify the Customer of such action.
AISoftBox shall not be responsible for losses resulting from a suspension or restriction carried out in accordance with this Policy or the applicable service agreement.
AISoftBox does not guarantee that the Services will:
Services may be unavailable due to:
To the maximum extent permitted by applicable law, AISoftBox shall not be responsible for loss, corruption, alteration, delay, rejection or unavailability of Customer Data caused by:
The Customer should maintain appropriate copies and records of its own business and transaction data.
To the maximum extent permitted by applicable law, the Customer agrees to indemnify and hold harmless AISoftBox, its directors, officers, employees, contractors and service providers against claims, losses, damages, liabilities, costs and expenses arising from:
Customers may submit information relating to their own customers, employees, suppliers or other third parties through the Services.
The Customer acknowledges that AISoftBox may process such information solely to provide the Services and for the purposes described in this Policy.
The Customer is responsible for ensuring that such submission and processing is lawful.
AISoftBox shall not be responsible for disputes between the Customer and its own customers, employees, suppliers or other third parties concerning information submitted through the Services, except to the extent such responsibility cannot lawfully be excluded.
The Services are primarily intended for businesses and authorized business users.
AISoftBox does not intentionally design its Services for direct use by children.
If Customer Data contains information relating to children, the Customer is responsible for ensuring that such processing is lawful and that all required safeguards, permissions and consents have been obtained.
AISoftBox reserves the right to amend, modify, replace or update this Privacy Policy from time to time.
Changes may be made to reflect:
The updated Policy may be published on the AISoftBox website or within the Services.
Unless otherwise required by law, continued use of the Services after the updated Policy becomes effective constitutes acceptance of the updated Policy.
This Policy shall be governed by and interpreted in accordance with the laws of Malaysia.
Any dispute concerning this Policy shall be subject to the applicable jurisdiction of the courts of Malaysia, unless otherwise required by applicable law or agreed under a separate written agreement between AISoftBox and the Customer.
If any provision of this Policy is found to be invalid, unlawful or unenforceable, that provision shall be modified or removed only to the extent necessary, and the remaining provisions shall continue in full force and effect.
This Policy describes the general privacy and data-processing practices applicable to the Services.
Where a separate written agreement, service agreement, data processing agreement or other contractual document exists between AISoftBox and a Customer, the terms of that agreement may contain additional provisions governing the processing of Customer Data.
Nothing in this Policy is intended to override mandatory rights or obligations imposed by applicable law.
For privacy-related enquiries, requests or complaints, please contact:
AISoftBox Sdn. Bhd.
Company Registration No.: 1437655-T
Malaysia
Privacy / Support Email: [email protected]
Website: www.aisoftbox.com
AISoftBox may require sufficient information to verify the identity of the requester before responding to a privacy request.
By using AISoftBox Services, the Customer acknowledges that:
AISoftBox Sdn. Bhd. reserves all rights not expressly granted under this Privacy Policy.