Privacy Policy

What personal data we collect, why we collect it, and the rights you have over it under Malaysia’s PDPA.

Last updated 27 August 2026

1. Who controls your data

The data controller for this website and for the Dojo services is SUPER SIMPLE TECHNOLOGY SDN. BHD. (registration number 202401009740 / 1555590-M), B323 Merchant Square, Jalan Tropicana Selatan 1, Tropicana, 47410 Petaling Jaya, Selangor, Malaysia. You can reach us about anything in this policy at support@dojoapp.ai.

This policy explains what personal data we collect, why, and what you can do about it. It is written to meet Malaysia's Personal Data Protection Act 2010 (PDPA).

2. What we collect

Data you give us

  • Account details — name, work email address, company name, and phone number where you provide one.
  • Billing details — billing address and the records of your transactions. Card details are handled by our payment processor and are not stored on our systems.
  • Support correspondence — the messages you send us by email, WhatsApp, Telegram or in a shared support channel, and our replies.

Data we collect automatically

  • Service logs — IP address, timestamps, and the actions taken on infrastructure we operate for you, kept for security and troubleshooting.
  • Website analytics — pages viewed and approximate location, collected through Google Analytics so we can see what parts of the site are useful.

Customer Data

Content you place on the infrastructure we host for you may itself contain personal data about your own users. For that content we act as a data processor on your instructions, not as a controller. We do not access it except where you ask us to for support, or where we must to keep the service running or to comply with the law.

3. Why we use it

  • To create and administer your account and provide the services you have ordered.
  • To bill you and keep the accounting records the law requires us to keep.
  • To provide support and respond to what you ask us.
  • To secure our infrastructure — detecting abuse, intrusion and misuse.
  • To send service notices about outages, maintenance and material changes to terms. These are not marketing and you cannot opt out of them while you hold an account.
  • To send product news, only where you have opted in. Every such message carries an unsubscribe link.

4. Who we share it with

We do not sell personal data. We share it only with parties who help us run the service, and only as far as they need it:

  • Infrastructure and data centre providers, who host the servers your services run on.
  • Payment processors, who take payment and carry out the fraud and identity checks the law requires of them.
  • Communication and analytics tools we use to run support and to measure this website.
  • Professional advisers, regulators and law enforcement, where we are legally required to disclose, or need to establish or defend a legal claim.

5. Where your data is held

We host in the region agreed with you, and we support keeping data within Malaysia where you need that. Some of the suppliers listed above operate outside Malaysia, so your data may be transferred abroad. Where it is, we take reasonable steps to ensure it stays protected to a standard comparable with the PDPA.

6. How long we keep it

  • Account data — for as long as your account is open, then up to 12 months after closure.
  • Billing and tax records — 7 years, as Malaysian tax law requires.
  • Service and security logs — normally 90 days, longer where an incident is under investigation.
  • Customer Data — retrievable for 30 days after termination, then deleted from active systems, with backups expiring on their normal cycle.

7. How we protect it

We encrypt data in transit with TLS, restrict administrative access to the staff who need it, keep audit logs of that access, and patch the systems we operate. No system is perfectly secure, but we take these obligations seriously — see our security page for detail on how we work.

8. Your rights

Under the PDPA you may ask us to:

  • give you access to the personal data we hold about you;
  • correct it where it is inaccurate, incomplete or out of date;
  • stop processing it for direct marketing;
  • limit how we process it, or withdraw a consent you previously gave.

Email support@dojoapp.ai and we will respond within 21 days. We may need to verify who you are first. If you are unhappy with our response you can complain to the Personal Data Protection Commissioner of Malaysia.

9. Cookies

This site sets cookies that are strictly necessary for it to work — keeping you signed in and remembering your language. It also sets Google Analytics cookies to measure traffic. You can block or delete cookies in your browser settings; the necessary ones being blocked will stop parts of the site working.

10. Children

The Services are for business use and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have, tell us and we will delete it.

11. Changes

We will post any update here with a new date at the top, and where the change is material we will notify account holders by email before it takes effect.

12. Contact

Write to support@dojoapp.ai, or to SUPER SIMPLE TECHNOLOGY SDN. BHD., B323 Merchant Square, Jalan Tropicana Selatan 1, Tropicana, 47410 Petaling Jaya, Selangor, Malaysia. Our telephone number is +60 14 689 0160.

This document is published in English. Where it is translated, the English version governs.

SUPER SIMPLE TECHNOLOGY SDN. BHD. (202401009740 / 1555590-M) · B323 Merchant Square, Jalan Tropicana Selatan 1, Tropicana, 47410 Petaling Jaya, Selangor, Malaysia · support@dojoapp.ai