Privacy Policy | Aether AI Labs

1. Who we are

Aether AI Labs (SSM registration number 202603189096 (003871416-X)), of 43 Tringkap, 39100 Brinchang, Pahang, Malaysia, operates aetherailabs.net and Prop Elite.

For questions about this policy or about your personal data, contact [email protected].

2. What this policy covers

This policy applies to the aetherailabs.net website, the Prop Elite application at propelite.aetherailabs.net, and to enquiries and development work handled by email or in person.

3. Personal data we collect

Information you give us directly:

Account and workspace details: name, email address, phone number, agency name and role.
Billing contact details, plan and seat count. Payment instrument data is handled by our payment provider, not by us.
Enquiry and support content: what you send us through the contact form, by email or by phone.
Records of development projects, including scope discussions and correspondence.

Information collected automatically: device and browser type, IP address, pages viewed, referring page, and timestamps, through server logs and analytics cookies.

4. Data your agency puts into Prop Elite

When your agency uses Prop Elite, your users upload personal data about third parties — client and lead names, contact details, property and transaction records, and agent commission data.

For that data your agency is the data user. It decides what to collect and why, and it is responsible for having consent or another lawful basis under the Personal Data Protection Act 2010. We process it on your agency's instructions, to provide the service, and for no independent purpose of our own.

Each agency's workspace data is kept logically isolated from every other agency's.

5. Why we use personal data

To create and administer your account and workspace.
To provide, maintain, secure and improve the service.
To take payment, issue receipts, and manage subscriptions and renewals.
To provide support and respond to your enquiries.
To send service messages about outages, billing, security and material changes to terms. These are not marketing and you cannot opt out of them while you hold an account.
To detect, investigate and prevent fraud, abuse and security incidents.
To comply with legal, tax and regulatory obligations.

6. Who we share personal data with

We do not sell personal data and we do not share it for third-party advertising. We share it only with the following classes of recipients, and only as far as each needs it:

Our payment provider, Curlec by Razorpay, to process subscription payments and mandates.
Cloud hosting, database and backup providers that run the service infrastructure.
Email and communication providers used to send service and support messages.
Analytics providers, currently Google Analytics 4, for aggregate website usage measurement.
Professional advisers such as accountants and lawyers, where needed.
Government bodies, regulators, courts or law enforcement, where we are required by law or to establish or defend a legal claim.
An acquirer or successor, if the business is reorganised, sold or merged. We would notify you before your data became subject to a different privacy policy.

7. Payment data

Card numbers, bank credentials and mandate details are collected and processed directly by Curlec by Razorpay under its own privacy terms. We do not receive, process or store your full card number.

We retain only what we need to run billing and meet our record-keeping obligations: the plan, amount, currency, date, outcome, and a masked reference to the payment instrument.

8. Transfers outside Malaysia

Some of our service providers store or process data on servers outside Malaysia. Where personal data is transferred out of Malaysia, we take reasonable steps to ensure the recipient protects it to a standard comparable to that required by the Personal Data Protection Act 2010, including through contractual commitments.

9. How long we keep it

Workspace data: for as long as your subscription is active, then 30 days after access ends, after which it is scheduled for permanent deletion.
Billing and tax records: for the period required by Malaysian tax and company law, currently seven years.
Enquiry and support correspondence: up to 24 months after the matter is closed.
Server and security logs: up to 12 months.

You can ask us to delete your data sooner by writing to [email protected], subject to records we must keep by law.

10. How we protect it

Data is encrypted in transit using HTTPS/TLS.
Access to production data is restricted to the personnel who need it, and is authenticated.
Workspaces are logically separated so one agency cannot read another's records.
Backups are taken on a regular schedule and access to them is restricted.

No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by law, without undue delay.

11. Your rights

Under the Personal Data Protection Act 2010 you may:

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is inaccurate, incomplete or out of date.
Withdraw consent to processing, where we rely on consent.
Ask us to limit processing for direct marketing or for processing likely to cause damage or distress.

Write to [email protected]. We will respond within 21 days as required by the Act. We may need to verify your identity first. If your request concerns data held in an agency's workspace, we will refer you to that agency, which is the data user for it.

12. Cookies and analytics

aetherailabs.net uses Google Analytics 4 to understand aggregate usage — which pages are visited, from where, and in which language. This uses cookies and similar identifiers.

We use analytics to improve the site, not to build advertising profiles, and we do not use it to identify individual visitors.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Blocking cookies does not stop you using the site.

Prop Elite uses strictly necessary cookies to keep you signed in and to remember interface preferences such as language and text size. These cannot be turned off without breaking the application.

13. Marketing

If we send you marketing about our services, every message will include a way to unsubscribe, and we will honour it. Withdrawing marketing consent does not stop service messages about your account.

14. Children

The service is sold to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact [email protected] and we will delete it.

15. Changes to this policy

We may update this policy. The revised version will be posted here with an updated date. Where a change materially affects how we use your personal data, we will give notice by email or in-app before it takes effect.

16. Contact and complaints

Write to us first — we would rather fix a problem than have you escalate it:

Aether AI Labs
SSM registration no. 202603189096 (003871416-X)
43 Tringkap, 39100 Brinchang, Pahang, Malaysia
Email: [email protected]

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) in Malaysia.