商家隐私政策

xhswriter.ai 由 StaffOS Sdn. Bhd.(公司注册号 202601021856 (1683953-V))运营。本政策涉及我们的两种角色:

• 就你的商家账户资料(你与我们之间的关系),在 PDPA 下我们是「资料使用者」(控制者);
• 就你通过平台收集的顾客个人资料,你是控制者,我们是你的「资料处理者」,仅按你的指示与本政策处理。

• 账户:邮箱、密码(以单向哈希存储,我们看不到明文)、联系人姓名、WhatsApp 号码。
• 品牌资料(品牌脑):品牌名、行业、卖点、目标客群、语气、禁话题、敏感词等知识库内容。
• 计费与交易记录:充值套餐、入账篇数、金额、余额变动、推荐关系等(用于对账与审计)。
• 登录会话:会话令牌(存于 HttpOnly、Secure、SameSite 的 Cookie),以及该会话的 IP 地址与浏览器标识(用于安全与防欺诈)。
• 审计日志:支持人员的「模拟登录」事件、品牌改名记录等(用于内部合规)。

我们处理上述资料,用于:提供与运营平台、验证身份、计费与对账、客户支持、风控与审计,以及就服务向你沟通。

我们仅按你的指示及为提供本服务之有限目的处理你顾客的个人资料。生成帖子时,我们会把顾客的问卷答案、 补充问答及上传图片内容发给我们的 AI 服务提供商;顾客的电话与姓名不会发给 AI。该提供商声明其 API 内容不用于训练模型。我们不出售任何资料,也不投放广告/追踪 Cookie。关于顾客侧的完整说明,另见面向顾客的《隐私政策》。

我们使用以下服务商代为处理资料,并要求其按合约保护资料:

说明:我们目前不在应用内处理银行卡支付;若日后引入支付服务商,银行卡资料由该支付服务商处理, 我们不会保存。我们仅在内部评测中使用另一家 AI 供应商,不向其发送你或你顾客的真实资料。

我们的应用、数据库与文件存储位于新加坡;部分处理在美国进行(由我们的 AI 服务提供商与邮件发送服务商)。 使用本服务即表示你同意这种把资料(含你顾客资料)传输至马来西亚境外的安排,并已就此向你的顾客 作出相应告知。我们会采取合理措施确保接收方提供相当的保护水平。这些跨境处理受合约性资料保护条款约束, 要求接收方达到与 PDPA 相当的标准,并辅以传输加密(TLS)与访问控制。

• 传输加密(TLS);密码以单向哈希存储。
• 访问控制与最小权限;顾客手机号等敏感字段在数据层受额外隔离。
• 会话 Cookie 经签名,设 HttpOnly、Secure、SameSite。

没有任何系统能保证 100% 安全;我们无法作绝对担保,但会尽合理努力保护资料。

为提供客户支持,我们经授权的人员可能通过受控的「模拟登录」机制临时进入你的账户视图。每一次此类访问都会 被审计记录(包括时间、操作人员身份、原因与所涉商家),且仅限我们的管理员账户使用;模拟期间的操作仅限于支持所需的范围。 我们以此换取支持效率的同时保持可问责。

• 账户活跃期间保留你的资料。
• 注销后,资料一般在 90 天内清除。
• 法律要求保留的记录(如与款项相关的记录)按马来西亚税法保留最长 7 年。

• 查阅 / 更正:多数账户与品牌资料可在 /app/settings 自助修改;
• 导出:商家后台提供活动参与者 CSV 导出;
• 删除账户与资料:电邮 hello@xhswriter.ai 申请;
• 投诉:可向我们或大马个人资料保护局(JPDP)投诉。

我们会在 PDPA 规定的 21 天内回应查阅请求,并在不无故拖延的情况下处理删除请求(受法律保留义务限制)。

我们只使用维持登录与基本功能所必需的 Cookie(会话与 CSRF),不投放广告/追踪类 Cookie。

我们可能更新本政策,并更新页首日期;重大变更会通过你的账户邮箱通知。

你也可以通过 联系客服 联系我们。

本文件以中英文提供,中文仅为方便阅读。如有冲突,以英文版本为准。

xhswriter.ai is operated by StaffOS Sdn. Bhd. (Company Reg. No. 202601021856 (1683953-V)). This policy covers our two roles:

• for your merchant account data (your relationship with us), we are the “data user” (controller) under the PDPA;
• for the customer personal data you collect through the platform, you are the controller and we are your “data processor”, handling it only on your instructions and per this policy.

• Account: email, password (stored one-way hashed — we never see the plaintext), contact name, WhatsApp number.
• Brand profile (knowledge doc): brand name, category, selling points, target audience, voice, off-brand topics, sensitive terms.
• Billing and transaction records: top-up packages, posts credited, amounts, balance changes, referral relationships (for reconciliation and audit).
• Login sessions: a session token (in an HttpOnly, Secure, SameSite cookie) and that session’s IP address and browser user-agent (for security and fraud prevention).
• Audit logs: support “act-as” (impersonation) events, brand-rename records, etc. (for internal compliance).

We process this data to provide and operate the platform, authenticate you, bill and reconcile, provide support, prevent fraud and maintain audit trails, and communicate with you about the Service.

We process your customers’ personal data only on your instructionsand for the limited purposes of providing the Service. To generate posts, we send customers’ form answers, follow-up Q&A, and uploaded image content to our AI provider; customers’ phone numbers and names are not sent to the AI. Our AI provider states that API content is not used to train its models. We do not sellany data and serve no advertising / tracking cookies. The full customer-facing explanation is in the consumer Privacy Policy.

We use the following providers to process data on our behalf, under contractual protections:

Note: we do not currently process card payments in-app; if we later introduce a payment processor, card data is handled by that processor and not stored by us. We use a separate AI vendor only for internal evaluation and never send it your or your customers’ live data.

Our application, database, and file storage are in Singapore, and some processing takes place in the United States (by our AI provider and email service provider). By using the Service you consent to this transfer of data (including your customer data) outside Malaysia, and you confirm you have given your customers corresponding notice. We take reasonable steps to ensure recipients provide a comparable level of protection. These cross-border processes are subject to contractual data-protection termsrequiring standards comparable to the PDPA, together with encryption in transit (TLS) and access controls.

• Encryption in transit (TLS); passwords stored one-way hashed.
• Access controls and least privilege; sensitive fields such as customer phone numbers are additionally isolated at the data layer.
• Session cookies are signed and set HttpOnly, Secure, SameSite.

No system is 100% secure; we cannot give an absolute guarantee, but we take reasonable steps to protect data.

To provide support, our authorised staff may temporarily enter your account view through a controlled “act-as” mechanism. Every such access is audit-logged (including the timestamp, staff identity, reason, and the merchant concerned) and is restricted to our administrator accounts; actions during an act-as session are limited to what support requires — trading support efficiency for accountability.

• We retain your data while the account is active.
• After deletion, data is generally purged within 90 days.
• Records we must keep by law (such as payment-related records) are retained for up to 7 years under Malaysian tax law.

• Access / correction: most account and brand data can be edited yourself at /app/settings;
• Export: the merchant console provides CSV export of campaign participants;
• Deletion of account and data: request by emailing hello@xhswriter.ai;
• Complaint: to us or to the Department of Personal Data Protection (JPDP).

We respond to access requests within the 21 days set by the PDPA and action deletion requests without undue delay, subject to legal retention obligations.

We use only cookies strictly necessary for login and basic functionality (session and CSRF). No advertising / tracking cookies.

We may update this policy and will update the date at the top; we notify you of material changes via your account email.

You may also reach us via WhatsApp.

This document is provided in Chinese and English; the Chinese text is for convenience only. In the event of any conflict, the English version prevails.