Privacy Notice

Privacy Notice — Course Architect Workflow

Last updated: 20 October 2026

Issued by: IOT SOLUTIONS

1. Who We Are

Course Architect Workflow is a product by IOT SOLUTIONS. This Privacy Notice explains how we collect, use, store, and manage your personal data when you use our platform.

2. What Data We Collect

We collect the following categories of data:

Account data:Full name, email address, mobile/WhatsApp number, role, company or training provider name, country, and main training area.

Signup checks:To keep to one account per person, we compare a standard form of your email address (for example, Gmail addresses without dots or “+” tags) and your mobile number with existing accounts, and record each signup attempt with its IP address and that standard email form. Signup attempt records are deleted after 30 days.

Usage data:Generation history (including module slide decks and the activity links you add to them, and the name and version of any saved style used), usage counts, plan information, and in-app activity.

Saved styles:Instructions you save as your own styles (Professional and Team plans), with their last 10 versions. Only you can see and use them; deleting a style deletes its history.

Workspace house style:On the Team plan: the organisation’s shared style, visible to its members, with its last 10 versions and which Org Owner or Admin saved each one. Removing it removes its history; the security log keeps who removed it, its name, version and text.

System metadata:IP address (for consent and security logs), browser/device metadata where available.

Sign-in and device records:For each sign-in: time, IP address, device/browser type, and approximate location (country, region and city) derived from your IP address by our hosting provider. Used only to protect your account — see Section 3.

Access records:When you open another account’s data (for example as an organisation admin or as IOT SOLUTIONS staff) or download participants’ data (Excel, CSV, PowerPoint), we record who, what, whose data, when, the IP address, device type and country — to protect customers’ data from insider misuse. These records cannot be changed or deleted by anyone and are removed automatically after 24 months.

Browser security reports:When your browser blocks something on a CAW page because of our security policy, it sends us a short report. We keep the page (without its query string), what was blocked, the IP address it came from, your account if you were signed in, your browser type, and for a live game the game PIN — only to find and fix security problems. Only IOT SOLUTIONS security staff can see them; they are deleted after 90 days. A longer period of up to 12 months may be set by IOT SOLUTIONS (for example when a client or auditor requires it). Reports linked to a security incident under investigation are kept until the investigation is closed, and may be given to the affected client, investigators or the authorities as evidence. If someone sends CAW compressed data it refuses (a security measure), we record the IP address, the page and the browser or tool type, seen only by IOT SOLUTIONS security staff and kept for the same period.

Two-factor authentication:Your authenticator secret is held by our authentication provider (Supabase). Recovery codes are stored only in hashed (irreversible) form; we cannot read them. If you use the self-service 2FA reset, we keep a record of the request (times, IP address and device type of the request and of finishing it, and how it ended) for 12 months; the emailed codes and cancel links are stored only as hashes. If you belong to an organisation, its owner is told that you started a reset.

Account recovery documents:Only if you request account recovery: copies of your IC/passport and a selfie holding it (and, for organisations, SSM certificate, authorisation letter and director ID). Used only to verify your identity, stored privately, seen only by the reviewing staff and approving manager, and deleted 30 days after the request is closed. We keep only a record of which checks passed — never your IC number or images.

Live game players:If you join a live game run by a trainer (at /play with a PIN): the nickname you choose, your answers (including any short answer you type in a poll — the room screen shows typed answers without nicknames, only when the host chooses), scores and answer times (in map games such as Territory Rush: your team, the tiles you take and when). No login is needed. Your phone keeps a random player code so you can re-join after a refresh; we store only an irreversible (hashed) form of it. The nickname is shown to the trainer and on the room screen. Only if the host asks (for example for an attendance record or a lucky draw) and you tick the consent box: your full name and phone number or email, the consent wording and its time. Your full name goes only to the host and their co-hosts, and your phone number or email only to the host and their organisation’s admins — never on the room screen, except the winner’s name in a lucky draw the host announces — and are not used for marketing by IOT SOLUTIONS. The host decides why they collect them; we store them on the host’s behalf.

Course registrations:If you register interest in a course published by a trainer on Course Architect Workflow: your name, contact details, company, the course, your consent choices, IP address and time. The TRAINER / training provider who published the course is the data controller for this information; IOT SOLUTIONS stores it on their behalf, does not use it for its own marketing, and keeps it until the trainer deletes it or closes their account. To access or erase it, contact the trainer (their contact is on the course page) or IOT SOLUTIONS.

Consent records:Timestamp, wording version, and source page for each consent action.

Communication preferences:Marketing consent status, transactional email settings, and unsubscribe records.

Feedback:Ratings, comments, and suggestions submitted through the feedback form.

Uploaded images:Images you upload to your assessments, materials or live games (case studies, sort & match cards, quiz, poll and escape-room questions and answer options, scale-vote cards, and points-allocation questions and options), together with an upload log (uploader, organisation, timestamp, and IP address) recording your confirmation that you are authorised to use each image. Hidden details in photos (such as GPS location and camera or phone information) are removed before they are stored.

3. Why We Collect This Data

•To create and manage your user account
•To provide the Course Architect Workflow service
•To generate and save course materials on your behalf
•To manage usage limits and plan quotas
•To protect your account — enforcing the number of devices your plan allows, showing you which devices are signed in, and detecting suspicious sign-ins (for example, a sign-in from a location that could not be reached since your previous sign-in, or signs that a login is being shared)
•To improve the platform based on usage patterns
•To provide support
•To send transactional account and service messages
•To send educational content and promotional offers — only when you have given explicit marketing consent

4. Transactional vs Marketing Communications

Transactional communications relate to your account access, usage limits, security notices, requested upgrade information, system updates, or support responses. These are sent as part of the service.

Service emails we send (when email sending is switched on) — the same messages also appear under the bell icon in the app: renewal reminders for paid plans (yearly plans 30, 14, 3 and 1 day before; monthly plans 3 and 1 day before); a reminder 7 days before pictures or participant results of your activities are deleted under the 30-day rule; a notice 3 days before a cancelled plan ends; an alert when your account is signed in from far away right after another sign-in; an alert to a trainer when someone registers interest in their course (at most one per course per hour, without the registrant’s details); account-recovery notices to the account’s current login email; plan details when you click “Email me upgrade details”; a notice to a workspace owner when the workspace has more members than its plan’s seats; and a notice to a member when their organisation’s Team plan ends and they move to their own Free account. When someone invites you to their workspace, we email you the invitation link they created (we use your address only to deliver that invitation; if you do not accept, the invitation expires after 48 hours). When the ownership of a workspace you belong to is offered, accepted, declined or withdrawn, we email the people involved — these are security messages and are sent even if you turned service emails off. When you accept an ownership offer we record the time, IP address and device type of your acceptance, and the new owner can see the workspace’s members and their workspace work, as the previous owner could. Platform Owners and Team Leads also receive governance alerts (for example, overdue approval requests). We keep a log of each email (type, account, a masked address — never the text) for 12 months. Notifications in the bell are deleted 90 days after you read them, or after 180 days.

Marketing communications include promotional offers, new plan announcements, newsletters, and educational campaign emails. We only send marketing communications if you have given your explicit consent and have not unsubscribed. These two categories are tracked separately in our system.

5. How to Stop Marketing Messages

•Click the unsubscribe link in any marketing email
•Visit /unsubscribe and enter your email
•Log in and withdraw your marketing consent from the Account Settings page
•Contact IOT SOLUTIONS directly to request withdrawal

Withdrawing marketing consent will not affect your ability to use the service or receive transactional messages.

6. Data Responsibility

You are responsible for reviewing and managing any personal, sensitive, or client data you enter into the platform. Do not input data that you are not authorised to process.

Where you upload images that contain identifiable individuals or other personal data, you are responsible for obtaining any consent required for that use. You must only upload images you own or are authorised to use, in accordance with the Terms of Use.

7. Data Retention

Live game nicknames, answers and lucky draw results are kept with the trainer’s game records so results can be reviewed and downloaded, and are deleted when the trainer deletes the game pack or 30 days after the game ends, whichever is first. Participant answers, scores, teams, photos and live game results (including lucky draws and any names or contacts players gave) are deleted 30 days after the assessment, live poll, challenge, relay, live game, evaluation, pre-training survey, scenario or event feedback form closes (a form left open counts as closed 30 days after its last answer); the trainer is reminded 7 days before and can download them first, and the questions are kept. Results of sessions that IOT SOLUTIONS runs itself (for its own training and to demonstrate the service) are kept by IOT SOLUTIONS and are not deleted under this rule; when they are shown to others, participants’ names are masked and their contact details are never shown. A live game player’s full name and phone number or email (only collected with consent) are deleted automatically 30 days after the game. We retain your account data while your account is active. Consent logs are retained for compliance purposes. To stop abuse of public pages (game joins, form and quiz submissions), we keep a scrambled code made from your IP address — not the address itself — for up to 24 hours. Browser security reports (the page path, what was blocked, the IP address, your account if signed in, the browser type and, for a live game, its PIN — never the rest of the link) are kept for 90 days. A longer period of up to 12 months may be set by IOT SOLUTIONS (for example when a client or auditor requires it). Reports linked to a security incident under investigation are kept until the investigation is closed, and may be given to the affected client, investigators or the authorities as evidence. Records of signed-out devices are deleted automatically 12 months after sign-out; security event logs (sign-ins, sign-outs, security alerts) are retained for security investigation and audit purposes. A combined security event list (the kind of event, its time and severity, the account id, a masked email such as k***@example.com, the IP address, country and device type — never notes, answers, course content or uploaded files) is kept for 180 days; high-risk events are emailed to IOT SOLUTIONS security staff, and the list may be copied to a security monitoring tool (SIEM) used by IOT SOLUTIONS, which keeps it under its own retention settings for security purposes only. Failed sign-in attempts on our sign-in pages (a wrong password or 2FA code) are part of this list: the time, the IP address and device type, and the account — or, if no account has that email, only a masked form of what was typed (such as k***@example.com); passwords and codes are never recorded. Urgent security alerts may also be sent to IOT SOLUTIONS security staff by SMS or WhatsApp; these say only how many events and what kind, never your name, email or IP address. Uploaded images are retained only while the related assessment exists and are deleted when that assessment is deleted; we may also purge images after an assessment is closed or after a maximum period. Pictures in live game packs (case studies and sort & match cards) are stored privately (there is no public link to them), shown only through short-lived links to the trainer’s workspace and the players of its live games, stripped of camera data such as location, and deleted when they are removed from the pack or the pack is deleted. All uploaded pictures (in assessments and live game packs) are deleted at the latest 30 days after the assessment or game pack they belong to was last used (launched, edited, duplicated or answered); the trainer is reminded 7 days before and can download them. Questions, answers and results are not affected. Encrypted backups of the service are kept for up to about 90 days (an office copy for up to 120 days) so that the service can be restored after a failure; data you delete disappears from backups as those copies expire. Account-recovery identity documents are not included in backups. You may request deletion of your account and data by contacting IOT SOLUTIONS.

Picture reports. When someone uses “Report a picture”, we keep what they wrote, the reason, where they saw the picture, their name and email if they gave them, and a scrambled code made from their IP address (to stop abuse). Only IOT SOLUTIONS staff see these; the trainer is never told who reported. If a picture is taken down, we keep a private evidence copy and its fingerprint for 90 days (longer only when the law or the police require it), and a permanent record of each step (what was done, by which staff member, when). The reporter’s name, email and code are deleted 24 months after the decision.

8. Security

We use Supabase for secure data storage with industry-standard encryption. API keys and sensitive credentials are stored server-side and are never exposed to the public-facing application.

9. Service Providers (Sub-processors)

To provide the service, we rely on the following third-party sub-processors. Each one has been chosen because it is required to deliver a specific function of the product, and no other undisclosed party ever handles your data on our behalf.

Google (Gemini API) — processes the course-generation inputs you submit and returns generated content. When a trainer asks the AI for help with a case study, a sort & match, a quiz, a poll, an escape room, a scale vote or a points allocation, that game’s pictures are also sent, only for that request. Under Google's paid API terms, requests are not used to train their models by default.
Alibaba Cloud (Qwen), where enabled — same purpose as Gemini. Requests are routed through the Singapore / Southeast Asia region and are not sent to mainland China. Same no-training-by-default clause applies.
Anthropic (Claude) and OpenAI (ChatGPT models), only where enabled — same purpose as Gemini, used only if IOT SOLUTIONS switches them on and a paid subscriber chooses one of them in the AI model menu. Requests are processed in the United States. Under their commercial API terms, requests are not used to train their models by default. Pictures are always sent to Gemini, not to these providers.
Supabase — hosts our database and authentication service; stores your account, profile, generation history, and organisation records with industry-standard encryption at rest and in transit.
Resend — only if enabled: sends account service emails to you (your email address and the message — see Section 4) and internal security alert emails to IOT SOLUTIONS staff (the kind of alert, the time, the account id or masked email, and the IP address; no customer data).
A security monitoring tool (SIEM) chosen by IOT SOLUTIONS — only if connected: receives the security event list (event type, time, severity, account id, masked email, IP address, country and device type) for security purposes only, either by reading it or by IOT SOLUTIONS sending it; no customer content.
Twilio — only if enabled: sends urgent security alerts by SMS or WhatsApp to IOT SOLUTIONS security staff. Receives the staff phone numbers and a short text (how many events and what kind, with a link to our admin page); no customer data.
Backups (GitHub and a storage provider chosen by IOT SOLUTIONS) — a nightly job on GitHub (Microsoft) copies the database and stored files, encrypts them on the job's temporary machine (wiped after each run) and stores them with an off-site storage provider, which holds only encrypted files it cannot read.
Vercel — hosts the application runtime and serves the app to your browser; keeps request logs used for reliability and abuse investigation.
Curlec (Razorpay Malaysia Sdn Bhd) — processes subscription payments and stores the payment identifiers necessary to renew or cancel your subscription. Card numbers, CVV and bank credentials never touch our servers.
Anthropic (Claude) — used by our engineering team for AI development assistance (writing code, reviewing changes, drafting documentation). No customer production data is ever shared with development-assistance tools — the assistant works only against source code, non-production test fixtures, and material we compose ourselves.

You are responsible for not submitting confidential personal data of third parties into generation inputs unless you are authorised to do so. This list is exhaustive as of the version of this notice below; if we add or replace a sub-processor, we will update this section and, where the change materially affects how your data is handled, notify you before the change takes effect.

10. Contact

For privacy-related enquiries, contact IOT SOLUTIONS through the in-app feedback form or at enquiry@iotsolutions.my.

Notis Privasi

Notis Privasi — Course Architect Workflow

Dikemaskini: 20 Oktober 2026

Dikeluarkan oleh: IOT SOLUTIONS

Sekiranya terdapat sebarang percanggahan antara versi Bahasa Inggeris dan Bahasa Malaysia, versi Bahasa Inggeris akan diguna pakai.

1. Siapa Kami

Course Architect Workflow adalah produk oleh IOT SOLUTIONS. Notis Privasi ini menerangkan bagaimana kami mengumpul, menggunakan, menyimpan, dan menguruskan data peribadi anda apabila anda menggunakan platform kami.

2. Data Yang Kami Kumpul

Kami mengumpul kategori data berikut:

Data akaun:Nama penuh, alamat e-mel, nombor telefon/WhatsApp, peranan, nama syarikat atau penyedia latihan, negara, dan bidang latihan utama.

Semakan pendaftaran:Untuk memastikan satu akaun bagi setiap orang, kami membandingkan bentuk standard alamat e-mel anda (contohnya alamat Gmail tanpa titik atau tag “+”) dan nombor telefon anda dengan akaun sedia ada, dan merekodkan setiap cubaan pendaftaran bersama alamat IP dan bentuk e-mel standard tersebut. Rekod cubaan pendaftaran dipadam selepas 30 hari.

Data penggunaan:Sejarah penjanaan (termasuk dek slaid modul dan pautan aktiviti yang anda tambah, serta nama dan versi gaya tersimpan yang digunakan), jumlah penggunaan, maklumat pelan, dan aktiviti dalam aplikasi.

Gaya tersimpan:Arahan yang anda simpan sebagai gaya anda sendiri (pelan Professional dan Team), bersama 10 versi terakhirnya. Hanya anda boleh melihat dan menggunakannya; memadam gaya turut memadam sejarahnya.

Gaya organisasi ruang kerja:Pada pelan Team: gaya bersama organisasi, boleh dilihat oleh ahlinya, bersama 10 versi terakhir dan Pemilik atau Admin Organisasi yang menyimpan setiap versi. Membuangnya turut membuang sejarahnya; log keselamatan menyimpan siapa yang membuangnya, nama, versi dan teksnya.

Metadata sistem:Alamat IP (untuk log persetujuan dan keselamatan), metadata pelayar/peranti jika tersedia.

Rekod log masuk dan peranti:Bagi setiap log masuk: masa, alamat IP, jenis peranti/pelayar, dan anggaran lokasi (negara, wilayah dan bandar) yang diperoleh daripada alamat IP anda oleh penyedia pengehosan kami. Digunakan hanya untuk melindungi akaun anda — lihat Seksyen 3.

Rekod akses:Apabila anda membuka data akaun lain (contohnya pentadbir organisasi atau kakitangan IOT SOLUTIONS) atau memuat turun data peserta (Excel, CSV, PowerPoint), kami merekodkan siapa, apa, data siapa, bila, alamat IP, jenis peranti dan negara — untuk melindungi data pelanggan daripada penyalahgunaan dalaman. Rekod ini tidak boleh diubah atau dipadam oleh sesiapa, dan dipadam secara automatik selepas 24 bulan.

Laporan keselamatan pelayar:Apabila pelayar anda menyekat sesuatu pada halaman CAW kerana dasar keselamatan kami, ia menghantar laporan ringkas kepada kami. Kami menyimpan halaman tersebut (tanpa rentetan pertanyaannya), perkara yang disekat, alamat IP asal laporan, akaun anda jika anda log masuk, jenis pelayar anda, dan PIN permainan bagi permainan langsung — hanya untuk mengesan dan membaiki masalah keselamatan. Hanya kakitangan keselamatan IOT SOLUTIONS boleh melihatnya; laporan dipadam selepas 90 hari. Tempoh yang lebih panjang sehingga 12 bulan boleh ditetapkan oleh IOT SOLUTIONS (contohnya apabila pelanggan atau juruaudit memerlukannya). Laporan yang berkaitan dengan insiden keselamatan yang sedang disiasat disimpan sehingga siasatan ditutup, dan boleh diberikan kepada pelanggan yang terjejas, penyiasat atau pihak berkuasa sebagai bukti. Jika seseorang menghantar data termampat yang ditolak oleh CAW (langkah keselamatan), kami merekodkan alamat IP, halaman dan jenis pelayar atau alat, yang hanya dilihat oleh kakitangan keselamatan IOT SOLUTIONS dan disimpan bagi tempoh yang sama.

Pengesahan dua faktor:Rahsia aplikasi pengesah anda disimpan oleh penyedia pengesahan kami (Supabase). Kod pemulihan disimpan hanya dalam bentuk cincang (tidak boleh diterbalikkan); kami tidak dapat membacanya. Jika anda menggunakan tetapan semula 2FA layan diri, kami menyimpan rekod permohonan itu (masa, alamat IP dan jenis peranti semasa memohon dan semasa menyelesaikannya, serta cara ia berakhir) selama 12 bulan; kod dan pautan pembatalan yang dihantar melalui e-mel disimpan hanya dalam bentuk cincang. Jika anda ahli sesebuah organisasi, pemiliknya dimaklumkan bahawa anda telah memulakan tetapan semula.

Dokumen pemulihan akaun:Hanya jika anda memohon pemulihan akaun: salinan IC/pasport anda dan swafoto memegangnya (dan, bagi organisasi, sijil SSM, surat kebenaran dan pengenalan pengarah). Digunakan hanya untuk mengesahkan identiti anda, disimpan secara peribadi, dilihat hanya oleh kakitangan penyemak dan pengurus yang meluluskan, dan dipadam 30 hari selepas permohonan ditutup. Kami hanya menyimpan rekod semakan yang lulus — tidak sekali-kali nombor IC atau imej anda.

Pemain permainan langsung:Jika anda menyertai permainan langsung yang dijalankan oleh jurulatih (di /play dengan PIN): nama samaran yang anda pilih, jawapan anda (termasuk jawapan ringkas yang anda taip dalam undian — skrin bilik memaparkan jawapan yang ditaip tanpa nama samaran, hanya apabila hos memilih), markah dan masa menjawab anda (dalam permainan peta seperti Territory Rush: pasukan anda, petak yang anda ambil dan bilakah). Tiada log masuk diperlukan. Telefon anda menyimpan kod pemain rawak supaya anda boleh menyertai semula selepas muat semula; kami hanya menyimpan bentuk kod itu yang tidak boleh diterbalikkan (hash). Nama samaran dipaparkan kepada jurulatih dan pada skrin bilik. Hanya jika hos memintanya (contohnya untuk rekod kehadiran atau cabutan bertuah) dan anda menanda kotak persetujuan: nama penuh dan nombor telefon atau e-mel anda, teks persetujuan dan masanya. Nama penuh anda hanya diberikan kepada hos dan hos bersama mereka, dan nombor telefon atau e-mel anda hanya kepada hos dan pentadbir organisasi mereka — tidak dipaparkan pada skrin bilik, kecuali nama pemenang cabutan bertuah yang diumumkan oleh hos — dan tidak digunakan untuk pemasaran oleh IOT SOLUTIONS. Hos menentukan tujuan pengumpulannya; kami menyimpannya bagi pihak hos.

Pendaftaran kursus:Jika anda mendaftar minat untuk kursus yang diterbitkan oleh jurulatih di Course Architect Workflow: nama, butiran hubungan, syarikat, kursus, pilihan persetujuan, alamat IP dan masa. JURULATIH / penyedia latihan yang menerbitkan kursus itu adalah pengawal data bagi maklumat ini; IOT SOLUTIONS menyimpannya bagi pihak mereka, tidak menggunakannya untuk pemasaran sendiri, dan menyimpannya sehingga jurulatih memadamnya atau menutup akaun mereka. Untuk mengakses atau memadamnya, hubungi jurulatih (butiran di halaman kursus) atau IOT SOLUTIONS.

Rekod persetujuan:Cap masa, versi teks, dan halaman sumber untuk setiap tindakan persetujuan.

Keutamaan komunikasi:Status persetujuan pemasaran, tetapan e-mel transaksi, dan rekod berhenti langganan.

Maklum balas:Penilaian, komen, dan cadangan yang dikemukakan melalui borang maklum balas.

Imej yang dimuat naik:Imej yang anda muat naik ke penilaian, bahan atau permainan langsung anda (kajian kes, kad sort & match, soalan dan pilihan jawapan kuiz, undian dan bilik lolos, kad undian skala, serta soalan dan pilihan agihan mata), bersama log muat naik (pemuat naik, organisasi, cap masa, dan alamat IP) yang merekodkan pengesahan anda bahawa anda dibenarkan menggunakan setiap imej. Butiran tersembunyi dalam foto (seperti lokasi GPS dan maklumat kamera atau telefon) dibuang sebelum disimpan.

3. Mengapa Kami Mengumpul Data Ini

•Untuk mencipta dan menguruskan akaun anda
•Untuk menyediakan perkhidmatan Course Architect Workflow
•Untuk menjana dan menyimpan bahan kursus bagi pihak anda
•Untuk menguruskan had penggunaan dan kuota pelan
•Untuk melindungi akaun anda — menguatkuasakan bilangan peranti yang dibenarkan oleh pelan anda, menunjukkan peranti yang sedang log masuk, dan mengesan log masuk yang mencurigakan (contohnya, log masuk dari lokasi yang mustahil dicapai sejak log masuk sebelumnya, atau tanda-tanda bahawa log masuk dikongsi)
•Untuk meningkatkan platform berdasarkan corak penggunaan
•Untuk menyediakan sokongan
•Untuk menghantar mesej transaksi akaun dan perkhidmatan
•Untuk menghantar kandungan pendidikan dan tawaran promosi — hanya apabila anda telah memberikan persetujuan pemasaran yang jelas

4. Komunikasi Transaksi vs Pemasaran

Komunikasi transaksi berkaitan dengan akses akaun anda, had penggunaan, notis keselamatan, maklumat naik taraf yang diminta, kemaskini sistem, atau respons sokongan.

E-mel perkhidmatan yang kami hantar (apabila penghantaran e-mel dihidupkan) — mesej yang sama juga dipaparkan di bawah ikon loceng dalam aplikasi: peringatan pembaharuan untuk pelan berbayar (pelan tahunan 30, 14, 3 dan 1 hari sebelum; pelan bulanan 3 dan 1 hari sebelum); peringatan 7 hari sebelum gambar atau keputusan peserta bagi aktiviti anda dipadam di bawah peraturan 30 hari; notis 3 hari sebelum pelan yang dibatalkan tamat; amaran apabila akaun anda dilog masuk dari lokasi yang jauh sejurus selepas log masuk lain; amaran kepada jurulatih apabila seseorang mendaftar minat terhadap kursusnya (paling banyak sekali bagi setiap kursus setiap jam, tanpa butiran pendaftar); notis pemulihan akaun kepada e-mel log masuk semasa akaun; butiran pelan apabila anda klik “Email me upgrade details”; notis kepada pemilik ruang kerja apabila ruang kerja mempunyai lebih ramai ahli daripada tempat duduk pelannya; dan notis kepada ahli apabila pelan Team organisasinya tamat dan mereka berpindah ke akaun Free mereka sendiri. Apabila seseorang menjemput anda ke ruang kerja mereka, kami menghantar e-mel pautan jemputan yang mereka cipta (alamat anda digunakan hanya untuk menghantar jemputan itu; jika anda tidak menerimanya, jemputan tamat selepas 48 jam). Apabila pemilikan ruang kerja yang anda sertai ditawarkan, diterima, ditolak atau ditarik balik, kami menghantar e-mel kepada pihak yang terlibat — ini mesej keselamatan dan dihantar walaupun anda telah mematikan e-mel perkhidmatan. Apabila anda menerima tawaran pemilikan, kami merekodkan masa, alamat IP dan jenis peranti penerimaan anda, dan pemilik baharu boleh melihat ahli ruang kerja serta kerja mereka dalam ruang kerja, seperti pemilik terdahulu. Pemilik Platform dan Ketua Pasukan juga menerima amaran tadbir urus (contohnya, permohonan kelulusan yang tertunggak). Kami menyimpan log bagi setiap e-mel (jenis, akaun, alamat bertopeng — tidak sekali-kali kandungannya) selama 12 bulan. Pemberitahuan dalam loceng dipadam 90 hari selepas anda membacanya, atau selepas 180 hari.

Komunikasi pemasaran termasuk tawaran promosi, pengumuman pelan baharu, surat berita, dan e-mel kempen pendidikan. Kami hanya menghantar komunikasi pemasaran jika anda telah memberikan persetujuan eksplisit dan belum berhenti langganan.

5. Cara Menghentikan Mesej Pemasaran

•Klik pautan berhenti langganan dalam sebarang e-mel pemasaran
•Lawati /unsubscribe dan masukkan e-mel anda
•Log masuk dan tarik balik persetujuan pemasaran anda dari halaman Tetapan Akaun
•Hubungi IOT SOLUTIONS secara terus untuk meminta penarikan balik

Menarik balik persetujuan pemasaran tidak akan menjejaskan kemampuan anda untuk menggunakan perkhidmatan atau menerima mesej transaksi.

6. Tanggungjawab Data

Anda bertanggungjawab untuk menyemak dan menguruskan sebarang data peribadi, sensitif, atau data pelanggan yang anda masukkan ke dalam platform.

Apabila anda memuat naik imej yang mengandungi individu yang boleh dikenal pasti atau data peribadi lain, anda bertanggungjawab untuk mendapatkan sebarang kebenaran yang diperlukan. Anda hanya boleh memuat naik imej yang anda miliki atau dibenarkan untuk digunakan, selaras dengan Terma Penggunaan.

7. Penyimpanan Data

Nama samaran, jawapan dan keputusan cabutan bertuah permainan langsung disimpan bersama rekod permainan jurulatih supaya keputusan boleh disemak dan dimuat turun, dan dipadam apabila jurulatih memadam pek permainan tersebut atau 30 hari selepas permainan tamat, yang mana lebih awal. Jawapan, markah, pasukan, foto dan keputusan permainan langsung peserta (termasuk cabutan bertuah dan sebarang nama atau hubungan yang diberikan pemain) dipadam 30 hari selepas penilaian, undian langsung, cabaran, geganti, permainan langsung, borang penilaian kursus, tinjauan pra-latihan, senario atau borang maklum balas acara ditutup (borang yang dibiarkan terbuka dikira ditutup 30 hari selepas jawapan terakhirnya); jurulatih diingatkan 7 hari sebelumnya dan boleh memuat turunnya dahulu, dan soalan-soalan disimpan. Keputusan sesi yang dijalankan sendiri oleh IOT SOLUTIONS (untuk latihannya sendiri dan untuk menunjukkan perkhidmatan) disimpan oleh IOT SOLUTIONS dan tidak dipadam di bawah peraturan ini; apabila ditunjukkan kepada pihak lain, nama peserta disembunyikan dan butiran hubungan mereka tidak sekali-kali ditunjukkan. Nama penuh dan nombor telefon atau e-mel pemain (hanya dikumpul dengan persetujuan) dipadam secara automatik 30 hari selepas permainan. Kami menyimpan data akaun anda selama akaun anda aktif. Log persetujuan disimpan untuk tujuan pematuhan. Untuk menghalang penyalahgunaan halaman awam (penyertaan permainan, penghantaran borang dan kuiz), kami menyimpan kod bercampur yang dijana daripada alamat IP anda — bukan alamat itu sendiri — selama sehingga 24 jam. Laporan keselamatan pelayar (laluan halaman, perkara yang disekat, alamat IP, akaun anda jika log masuk, jenis pelayar dan, bagi permainan langsung, PINnya — tidak pernah selebihnya pautan) disimpan selama 90 hari. Tempoh yang lebih panjang sehingga 12 bulan boleh ditetapkan oleh IOT SOLUTIONS (contohnya apabila pelanggan atau juruaudit memerlukannya). Laporan yang berkaitan dengan insiden keselamatan yang sedang disiasat disimpan sehingga siasatan ditutup, dan boleh diberikan kepada pelanggan yang terjejas, penyiasat atau pihak berkuasa sebagai bukti. Rekod peranti yang telah dilog keluar dipadam secara automatik 12 bulan selepas log keluar; log peristiwa keselamatan (log masuk, log keluar, amaran keselamatan) disimpan untuk tujuan siasatan keselamatan dan audit. Senarai gabungan peristiwa keselamatan (jenis peristiwa, masa dan tahap keterukannya, id akaun, e-mel bertopeng seperti k***@example.com, alamat IP, negara dan jenis peranti — tidak sekali-kali nota, jawapan, kandungan kursus atau fail yang dimuat naik) disimpan selama 180 hari; peristiwa berisiko tinggi dihantar melalui e-mel kepada kakitangan keselamatan IOT SOLUTIONS, dan senarai itu boleh disalin ke alat pemantauan keselamatan (SIEM) yang digunakan oleh IOT SOLUTIONS, yang menyimpannya mengikut tetapan simpanannya sendiri untuk tujuan keselamatan sahaja. Percubaan log masuk yang gagal pada halaman log masuk kami (kata laluan atau kod 2FA yang salah) adalah sebahagian daripada senarai ini: masa, alamat IP dan jenis peranti, dan akaun tersebut — atau, jika tiada akaun dengan e-mel itu, hanya bentuk bertopeng bagi apa yang ditaip (seperti k***@example.com); kata laluan dan kod tidak sekali-kali direkodkan. Amaran keselamatan segera juga boleh dihantar kepada kakitangan keselamatan IOT SOLUTIONS melalui SMS atau WhatsApp; amaran ini hanya menyatakan bilangan dan jenis peristiwa, tidak sekali-kali nama, e-mel atau alamat IP anda. Imej yang dimuat naik disimpan hanya selama penilaian berkaitan wujud dan dipadam apabila penilaian itu dipadam. Gambar dalam pek permainan langsung (kajian kes dan kad sort & match) disimpan secara peribadi (tiada pautan awam), dipaparkan hanya melalui pautan jangka pendek kepada ruang kerja jurulatih dan pemain permainan langsungnya, dibuang data kamera seperti lokasi, dan dipadam apabila dikeluarkan daripada pek atau pek itu dipadam. Semua gambar yang dimuat naik (dalam penilaian dan pek permainan langsung) dipadam selewat-lewatnya 30 hari selepas penilaian atau pek permainan berkaitan terakhir digunakan (dilancarkan, disunting, diduakan atau dijawab); jurulatih diingatkan 7 hari sebelumnya dan boleh memuat turunnya. Soalan, jawapan dan keputusan tidak terjejas. Sandaran tersulit perkhidmatan disimpan sehingga kira-kira 90 hari (salinan pejabat sehingga 120 hari) supaya perkhidmatan boleh dipulihkan selepas kegagalan; data yang anda padam hilang daripada sandaran apabila salinan tersebut luput. Dokumen pengenalan pemulihan akaun tidak dimasukkan dalam sandaran. Anda boleh meminta pemadaman akaun dan data anda dengan menghubungi IOT SOLUTIONS.

Laporan gambar. Apabila seseorang menggunakan “Laporkan gambar”, kami menyimpan apa yang ditulis, sebabnya, di mana gambar itu dilihat, nama dan e-mel mereka jika diberikan, dan kod rawak yang dibuat daripada alamat IP mereka (untuk mengelakkan salah guna). Hanya kakitangan IOT SOLUTIONS yang melihatnya; jurulatih tidak pernah dimaklumkan siapa pelapornya. Jika gambar diturunkan, kami menyimpan salinan bukti peribadi dan cap jarinya selama 90 hari (lebih lama hanya jika dikehendaki oleh undang-undang atau polis), serta rekod kekal setiap langkah (apa yang dilakukan, oleh kakitangan mana, bila). Nama, e-mel dan kod pelapor dipadam 24 bulan selepas keputusan dibuat.

8. Keselamatan

Kami menggunakan Supabase untuk penyimpanan data yang selamat dengan penyulitan standard industri. Kunci API dan kelayakan sensitif disimpan di bahagian pelayan dan tidak pernah didedahkan kepada aplikasi awam.

9. Penyedia Perkhidmatan (Sub-pemproses)

Untuk menyediakan perkhidmatan ini, kami bergantung kepada sub-pemproses pihak ketiga berikut. Setiap satu dipilih kerana diperlukan untuk menyampaikan fungsi tertentu produk, dan tiada pihak lain yang tidak didedahkan mengendalikan data anda bagi pihak kami.

Google (API Gemini) — memproses input penjanaan kursus yang anda hantar dan memulangkan kandungan yang dijana. Apabila jurulatih meminta bantuan AI untuk kajian kes, sort & match, kuiz, undian, bilik lolos, undian skala atau agihan mata, gambar permainan itu turut dihantar, hanya untuk permintaan tersebut. Di bawah terma API berbayar Google, permintaan tidak digunakan untuk melatih model mereka secara lalai.
Alibaba Cloud (Qwen), apabila diaktifkan — tujuan sama seperti Gemini. Permintaan dihalakan melalui wilayah Singapura / Asia Tenggara dan tidak dihantar ke tanah besar China. Klausa tanpa-latihan-secara-lalai yang sama terpakai.
Anthropic (Claude) dan OpenAI (model ChatGPT), hanya apabila diaktifkan — tujuan sama seperti Gemini, digunakan hanya jika IOT SOLUTIONS mengaktifkannya dan pelanggan berbayar memilih salah satu daripadanya dalam menu model AI. Permintaan diproses di Amerika Syarikat. Di bawah terma API komersial mereka, permintaan tidak digunakan untuk melatih model mereka secara lalai. Gambar sentiasa dihantar kepada Gemini, bukan kepada penyedia ini.
Supabase — menghoskan pangkalan data dan perkhidmatan pengesahan kami; menyimpan akaun, profil, sejarah penjanaan dan rekod organisasi anda dengan penyulitan standard industri semasa dalam simpanan dan dalam transit.
Resend — hanya jika diaktifkan: menghantar e-mel perkhidmatan akaun kepada anda (alamat e-mel anda dan mesej — lihat Seksyen 4) dan e-mel amaran keselamatan dalaman kepada kakitangan IOT SOLUTIONS (jenis amaran, masa, id akaun atau e-mel bertopeng, dan alamat IP; tiada data pelanggan).
Alat pemantauan keselamatan (SIEM) yang dipilih oleh IOT SOLUTIONS — hanya jika disambungkan: menerima senarai peristiwa keselamatan (jenis peristiwa, masa, tahap keterukan, id akaun, e-mel bertopeng, alamat IP, negara dan jenis peranti) untuk tujuan keselamatan sahaja, sama ada dengan membacanya atau dihantar oleh IOT SOLUTIONS; tiada kandungan pelanggan.
Twilio — hanya jika diaktifkan: menghantar amaran keselamatan segera melalui SMS atau WhatsApp kepada kakitangan keselamatan IOT SOLUTIONS. Menerima nombor telefon kakitangan dan teks pendek (bilangan dan jenis peristiwa, dengan pautan ke halaman pentadbir kami); tiada data pelanggan.
Sandaran (GitHub dan penyedia storan yang dipilih oleh IOT SOLUTIONS) — tugas malam di GitHub (Microsoft) menyalin pangkalan data dan fail tersimpan, menyulitkannya pada mesin sementara tugas itu (dipadam selepas setiap larian) dan menyimpannya dengan penyedia storan luar tapak, yang hanya memegang fail tersulit yang tidak boleh dibacanya.
Vercel — menghoskan aplikasi dan menyampaikannya kepada pelayar anda; menyimpan log permintaan untuk kebolehpercayaan dan penyiasatan penyalahgunaan.
Curlec (Razorpay Malaysia Sdn Bhd) — memproses pembayaran langganan dan menyimpan pengecam pembayaran yang diperlukan untuk memperbaharui atau membatalkan langganan anda. Nombor kad, CVV dan kelayakan bank tidak pernah menyentuh pelayan kami.
Anthropic (Claude) — digunakan oleh pasukan kejuruteraan kami untuk bantuan pembangunan AI (menulis kod, menyemak perubahan, menyediakan dokumentasi). Tiada data pengeluaran pelanggan pernah dikongsi dengan alat bantuan pembangunan — pembantu bekerja hanya terhadap kod sumber, data ujian bukan pengeluaran, dan bahan yang kami karang sendiri.

Anda bertanggungjawab untuk tidak memasukkan data peribadi sulit pihak ketiga ke dalam input penjanaan melainkan anda diberi kuasa. Senarai ini adalah menyeluruh setakat versi notis di bawah; jika kami menambah atau menggantikan sub-pemproses, kami akan mengemas kini bahagian ini dan, apabila perubahan itu menjejaskan cara data anda dikendalikan secara material, memaklumkan anda sebelum perubahan berkuat kuasa.

10. Hubungi Kami

Untuk pertanyaan berkaitan privasi, hubungi IOT SOLUTIONS melalui borang maklum balas dalam aplikasi atau di enquiry@iotsolutions.my.