PRIVACY POLICY

This Privacy Policy describes how Verisance Corporation Sdn Bhd (trading as VIMOTION AI) handles your personal data when you visit https://www.vimotion.io or order our AI video production services.

We are the data controller. You can reach us at admin@vimotion.io.

We collect only what we need to fulfil your order and run the business:

• Contact details— your name, email address, WhatsApp number, and company name, collected when you submit the brief or pay for an order.
• Order details— the tier you purchased, the brief you submitted (industry, target audience, tone, references, materials notes), and any subsequent emails.
• Materials you send us— photos, logos, voice samples, scripts, or any other content you email to us in response to our materials request.
• Payment confirmation — we do not store your card or bank account number. Stripe (cards) and Billplz (FPX) handle payment data directly. We only see a transaction reference and the email + name they pass back to us.
• Technical data— standard web request data (IP address, browser, pages visited) for security and basic analytics.

We use your personal data for the following purposes:

• To process your payment and produce your video.
• To communicate with you about your order (status updates, materials requests, reminders, deliveries).
• To respond to support questions you send us.
• To keep records required by Malaysian tax and accounting law.
• To detect and prevent fraud, abuse, or breach of our Terms.

We do not sell your data, and we do not send you marketing emails unless you have explicitly opted in.

We share your data only with service providers that help us run the business, and only to the extent necessary:

• Stripe — card payment processing.
• Billplz — FPX / online banking payment processing (when enabled).
• Resend — sending transactional emails (order confirmation, materials request, delivery).
• Google Workspace (Sheets, Gmail) — storing order records and reading replies to detect when you have sent us your materials.
• Vercel — hosting the Site and serving the application.
• Cloudflare — DNS, edge security, and email routing for our domain.

Each of these providers has its own privacy and security obligations. We never share your data for advertising or marketing purposes.

Some of the providers above process data outside Malaysia (typically the United States, the European Union, or Singapore). By using the Service you consent to your personal data being transferred to and processed in those jurisdictions, where it is protected by contractual safeguards offered by those providers.

• Order records(order ID, customer name and email, tier, amount, payment reference, production status) — kept for at least 7 years as required by Malaysian tax and accounting law.
• Brief content and materials(photos, voice samples, references) — kept for 12 months after delivery, then deleted unless you ask us to keep them for follow-up work.
• Email correspondence— retained as part of the order record for the same 7-year period.
• Technical logs— rotated according to provider defaults (typically 30–90 days).

Under Malaysia's Personal Data Protection Act 2010 (the "PDPA"), you have the right to:

• Access the personal data we hold about you.
• Correct any data that is inaccurate or incomplete.
• Limit how we process your data, and withdraw consent we previously relied on.
• Request deletion of your data, subject to our legal retention obligations (see clause 6).
• Lodge a complaint with the Personal Data Protection Department of Malaysia.

To exercise any of these rights, email admin@vimotion.io. We will respond within 30 days.

The Site uses only the cookies necessary to operate the application and remember your preferences during a session. We do not currently use third-party advertising trackers, retargeting pixels, or behavioural analytics. If we add any in future, we will update this policy and (where required) ask for your consent first.

The Service is intended for use by adults running businesses or organisations. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We use industry-standard practices to protect your data: HTTPS-only access to the Site, encrypted environment variables for all credentials, scoped service-account access to Google Sheets, and webhook signature verification on payment notifications. No system is perfectly secure; if a breach affects your data, we will notify you and (where legally required) the Personal Data Protection Department within the timelines mandated by Malaysian law.

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date above. For material changes we will email customers with active orders.

Privacy questions, access requests, or complaints: admin@vimotion.io