Last updated: 15 October 2026
This Privacy Policy explains how Asrix Prime Berhad ("we", "us") processes personal data when you use https://digital-twin.asrix.net/ and the AI Digital Twin platform (the "Service"). We process personal data in accordance with applicable law, including the Malaysian Personal Data Protection Act 2010 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Data we collect
- Account data: name, e-mail address, organisation, password (stored hashed), language and security settings.
- Content you provide: portraits, voice samples, documents, persona settings and other material you upload.
- Conversation data: messages exchanged with digital twins, detected language, citations and timestamps. Audio recordings are not stored unless your organisation enables it.
- Technical data: IP address, browser type, log and security events.
- Contact data: information you send us through the contact form.
2. Why we use it
To provide and secure the Service, operate digital twins on your behalf, answer enquiries, prevent abuse, meet legal obligations and — with your consent — send product news.
3. AI processing
Conversations and content are processed by the AI models configured by your organisation. These may run on our or your own servers, or with third-party providers (for example OpenAI, DeepSeek, ElevenLabs, D-ID or HeyGen) acting as processors under their own terms.
4. Biometric data and consent
Portraits and voice samples can identify a person. We only use them with the documented consent of the person depicted. Consent can be withdrawn at any time; the related voice or avatar is then disabled and its samples deleted.
5. Sharing
We do not sell personal data. We share it only with service providers that help us run the Service, when required by law, or with your instruction.
6. Retention
We keep data for as long as your account is active or as required by law. Organisations can set retention periods for conversations; deleted content is removed from active systems and from backups as they expire.
7. Security
Encryption of secrets at rest, access controls, multi-factor authentication, audit logging and isolated tenant data.
8. Your rights
You may request access to, correction or deletion of your personal data, object to processing or withdraw consent by contacting [email protected].
9. Changes
We will post changes on this page and update the date above.