Privacy Policy

Last updated: 16 October 2026

LayanLeads is a service provided by Stark Automate Solutions ("we", "us", "our"). It consists of our website at www.layanleads.com and our main application at ai.layanleads.com (together, the "Service"). This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website, sign up for or log in to the app, chat with our AI agent Cici, or otherwise use the Service. We handle personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) and, where applicable, the Personal Data Protection Act 2012 (Singapore).

1. Personal data we collect

Contact details you give us, such as your name, company name, email address and phone or WhatsApp number.
Messages and conversation content you send to us or to Cici on WhatsApp or other channels, including any attachments.
Account and subscription details when you sign up at ai.layanleads.com, such as your login credentials, business profile, selected plan and billing information. Payments are processed by our payment providers; we do not store full card details.
Business data our customers upload or connect in the ai.layanleads.com app, such as product catalogues, appointment calendars, spreadsheets and their own customers' messages.
Technical data collected automatically when you visit our website or use the app, such as IP address, approximate location (country), browser type, device information and pages viewed.

2. Data we receive from Facebook and WhatsApp

When you choose "Connect with Facebook" in the ai.layanleads.com app to link your WhatsApp Business Account, Meta asks for your permission and then shares with us:

Your Facebook name and profile picture, used only to show who connected the account.
The WhatsApp Business Account you selected, its ID, phone numbers, display names and quality ratings.
An access token that lets LayanLeads manage that WhatsApp Business Account and send and receive messages for it (permissions whatsapp_business_management and whatsapp_business_messaging).
Message templates, incoming messages and delivery and read statuses for that account.

We use this data only to provide the Service to you: to send your broadcasts and AI agent replies, show your conversations, and report delivery. We do not use it for advertising, we do not sell it, and we share it only as described in this Policy. Access tokens are stored encrypted. You can remove our access at any time with Disconnect in the app, or in Facebook under Settings > Business Integrations. To delete your data, follow our data deletion instructions.

3. How we use personal data

To respond to your enquiries and provide demonstrations of the service.
To register you, create and manage your account on ai.layanleads.com, and provide the LayanLeads service.
To operate AI agents that reply to, book, sell to or collect reports from our customers' contacts on their behalf.
To process payments and manage subscriptions.
To maintain, secure and improve our website and service, including monitoring quality and preventing fraud or misuse.
To send service updates and, where you have agreed, marketing messages. You can opt out at any time.
To comply with legal and regulatory obligations.

4. Customer data processed on behalf of businesses

When a business uses LayanLeads to talk to its own customers, that business decides what data is collected and how it is used, and we process that data on its behalf and according to its instructions. If you are a customer of a business that uses LayanLeads, please contact that business directly about your personal data. We will assist our customers in responding to such requests.

5. Disclosure of personal data

We do not sell personal data. We may share it only with:

Service providers who help us run LayanLeads, such as cloud hosting, messaging platforms (including WhatsApp / Meta), AI model providers, spreadsheet integrations such as Google Sheets, and payment processors. They may only use the data to provide services to us.
Our customers, where the data comes from conversations handled on their behalf.
Authorities or other parties where required by law, or to protect our rights, users or the public.
A successor entity in the event of a merger, acquisition or sale of assets, subject to this Policy.

6. Transfers outside Malaysia

Some of our service providers store or process data outside Malaysia and Singapore. Where this happens, we take reasonable steps to ensure the data receives a comparable standard of protection to that required under applicable data protection laws.

7. Data retention

We keep personal data only for as long as needed for the purposes described above, or as required by law. When it is no longer needed, we delete or anonymise it. Customers may request deletion of their conversation data at the end of their subscription.

8. Security

We use reasonable administrative, technical and physical safeguards, such as encrypted connections and access controls, to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Cookies and local storage

Our website uses your browser's local storage to remember preferences such as your chosen language. The ai.layanleads.com app uses cookies and similar technologies that are necessary to keep you signed in, secure your session and remember your settings. We and our hosting provider may also collect basic technical and analytics data to keep the site secure and working. You can clear or block this through your browser settings.

10. Your rights

Subject to applicable law, you may:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Withdraw consent or limit how we process your data, including opting out of marketing.
Request deletion of your data where we no longer need it.

We may need to verify your identity before acting on a request, and a reasonable fee may apply for access requests where permitted by law.

11. Children

LayanLeads is a business service and is not directed at children under 18. We do not knowingly collect personal data from children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with its "Last updated" date.

13. Contact us

For questions, requests or complaints about this Privacy Policy or your personal data, contact Stark Automate Solutions:

In the event of any inconsistency between the English version of this Policy and any translation, the English version prevails.