HomePrivacy Policy
CERDASJANA / LEGAL

Privacy Policy

How we handle and protect personal data

Understand what information CerdasJana uses, why it is needed, who may process it and the choices available to you.

Effective:2026-10-12 Last updated:2026-10-12 Version:1.1.0
20 sections about your data, rights and privacy choices
Your privacy matters

We explain account and project data, AI processing, payments, storage, third-party transfers and how to request your data rights.

01 / 20

Who we are and what this Policy covers

This Privacy Policy describes how the operator of CerdasJana handles personal data when you visit cerdasjana.com, use app.cerdasjana.com, create or manage an account, subscribe, use AI and builder features, publish projects or contact us. It covers the website, application, workspaces, connected sites and related services collectively referred to as the Platform.

CerdasJana acts as a data controller for personal data used to run its own Platform. For personal data that a customer places in a generated or hosted application, responsibilities depend on who determines the purposes and means of processing. The identity of the Platform operator will be stated in the published legal and business information. A dedicated privacy enquiry channel will be provided separately.

02 / 20

Personal data we may collect

Depending on your activities, we may handle your name, display name, account email, login and security records, country or region, phone and billing information, subscription status, order references, newsletter subscription, support messages and correspondence.

We may also process device and browser information, IP addresses, timestamps, usage and security logs, project metadata, website or application content, domain and hosting configuration, database connection details, prompts, generated results and other information you choose to submit. Please avoid providing sensitive information unless necessary and authorised.

03 / 20

How we receive information

We receive information directly when you register, update your profile, enter prompts, create projects, complete an order, subscribe to updates or ask for help. We also receive technical information generated when you interact with Platform services.

Payment providers, identity or hosting partners and integrations you authorise may send transaction confirmations, status updates or connection information. Public business links that you paste into a builder may supply content you ask us to process, subject to your rights to use it.

04 / 20

Why we use personal data

We use relevant information to create and secure accounts, synchronise access between the main site and application, provide builder and AI functions, operate subscriptions and credits, deliver hosting or domain connections, process orders, handle requests and maintain service reliability.

We may also use appropriate records for troubleshooting, fraud and trial-abuse prevention, service security, auditing, legal compliance, customer communications and improvements to Platform performance. Optional marketing is handled separately as described below.

05 / 20

Consent, choices and other lawful grounds

We process personal data using a lawful basis applicable to the activity, including consent where required, steps needed to provide the service you request, legal obligations and other grounds permitted by relevant law. Not every purpose requires the same basis.

Where we request consent, you may decline or withdraw it as allowed by law. A required data field may be necessary to create an account, deliver a purchase or maintain security. Declining optional data collection should not prevent unrelated essential functions.

06 / 20

Accounts, login and synchronisation

Account identity, email, profile settings, password-related authentication information and access permissions may be synchronised between cerdasjana.com and app.cerdasjana.com so the same authorised user can access both services. Access records help us identify the correct account and protect sign-in functions.

Your display language preference may be stored per signed-in account. Guests may have a language choice stored only in their own browser. Account settings and service communications should not be treated as public information.

07 / 20

Project data, files, hosting and databases

When you use Website Builder, Webapp Builder, Excel Builder, Offline App Builder or App Package Builder, we may process project names, prompts, code, content, assets, files, revisions, deployments and configurations needed to provide the selected features. Managed hosting can also involve domain, DNS, certificate and database information.

External sites and databases remain subject to their own hosting environment and controls. Deleting a connection record in CerdasJana does not necessarily delete information retained by an external host. Your published applications may collect information from their own visitors under your responsibility.

08 / 20

AI prompts, outputs and service providers

Text, instructions and selected project context may be sent to AI model services to generate or refine text, code or other results. Where you request an image, a separate image-generation provider may process the relevant text request. The exact providers and processing locations can change.

Do not include credentials, confidential records or another person’s sensitive data in a prompt unless you are authorised and the processing is appropriate. The treatment of information for model training is governed by the applicable provider arrangements and disclosures. This Policy does not promise that every model provider follows an identical retention or training policy.

09 / 20

Payments, subscriptions and AI Credits

Payment services such as Stripe or PayPal may collect and process payment credentials through their checkout systems. CerdasJana may receive the transaction status, payment reference, subscription identifier, purchased package, amount, renewal or cancellation event and related billing contact information.

We use this information to apply access entitlements, maintain subscriptions, process credit top-ups, respond to disputes, detect fraud and meet accounting requirements. Payment-provider privacy terms also apply when you use their services.

10 / 20

Cookies, local storage and technical logs

Our websites may use cookies, browser storage, session identifiers and similar technologies for authentication, security, saved language preferences, site functionality and service performance. Some hosting, payment or other integrated features may set their own technologies.

You can manage browser cookies and storage through your device settings, although blocking essential storage may interrupt sign-in or account functions. Any non-essential analytics or advertising technologies, if introduced, should be disclosed and managed with the choices required by applicable law.

11 / 20

Newsletter and promotional messages

If you subscribe to CerdasJana updates, we store the email address provided, the subscription record and related timing information for that request. We use this to send relevant product news, announcements and guides when a newsletter service is operated.

You may withdraw marketing permission or request removal from future marketing communications. Service and transaction messages, such as security alerts, payment receipts or important account notices, may still be sent when necessary and lawful.

12 / 20

Connected websites and third-party links

You may choose to connect domains, external hosting, public business profiles or other third-party services. The information you provide for such integrations may be shared with the relevant service only where needed to perform the action you requested.

Third-party websites, payment systems and services apply their own privacy practices. We are not responsible for information you give directly to those parties or for their independent handling of it. Please check their policies before connecting accounts or uploading data.

13 / 20

When personal data may be disclosed

Information may be disclosed to authorised hosting, cloud, infrastructure, AI, payment, email, technical-support and security providers as needed to operate the Platform, subject to appropriate confidentiality, security and contractual measures.

We may also share data with professional advisers or authorities where lawfully required, and where necessary to investigate fraud, protect users or respond to valid legal processes. We do not treat personal data as a product for unrestricted sale to advertisers.

14 / 20

International processing and transfers

Some AI, payment, cloud, communication or hosting providers may process information outside Malaysia. The countries, subprocessors and technical routes can depend on the service requested and change over time.

Where cross-border personal data transfers are subject to Malaysia’s Personal Data Protection Act 2010, as amended, or other relevant laws, we must apply the lawful conditions and safeguards required for the transfer.

15 / 20

Security and personal data incidents

We use proportionate technical and organisational protections appropriate to the services, such as access restrictions, authenticated sessions, network controls and security monitoring. No internet service, generated application or external host can be guaranteed completely secure.

Please protect your credentials and review generated code, exported files, database connections and published applications before use. We investigate suspected incidents and make notifications to affected persons or regulators when applicable law requires them.

16 / 20

Keeping information and deleting it

We retain personal data only for periods reasonably necessary for its purposes, including account access, contracted services, security, payment records, dispute handling and legal requirements. Different categories may have different retention periods and backups may take additional time to cycle.

Under the stated product policy, sites and managed sub-domains may become read-only for up to 60 days after trial or subscription expiry and may then be deleted. External hosted resources are not necessarily removed by deleting a CerdasJana record. Some financial, fraud-prevention and legal records may need to be kept longer.

17 / 20

Your privacy rights and requests

Subject to applicable law and identity verification, you may ask whether we process your personal data, request access or correction, withdraw consent where applicable, object to direct marketing, seek restriction where provided by law or raise a concern about our handling of information. Other rights, including portability, may apply in particular circumstances.

To exercise these rights, use the official CerdasJana privacy enquiry form once it is published. Do not submit passwords or identity documents unless requested through a secure process. We may need to verify your identity. You may also contact the Malaysian Personal Data Protection Commissioner where appropriate.

18 / 20

Your own published websites and applications

When you build and publish a project, you may act as an independent data controller or service operator for personal information collected through that project. You are responsible for publishing suitable privacy information, collecting any required consent and protecting your users’ information.

A generated website or application is not automatically compliant with privacy laws. Review forms, tracking, database storage, email features, cookies, external scripts and AI-generated code before publishing, and respond to your own users’ privacy requests where required.

19 / 20

Children and age limits

CerdasJana account access is intended for persons aged at least 18 or the higher applicable age of majority stated in our Terms & Conditions. We do not intentionally offer accounts to children below this requirement.

If a child has supplied personal information without appropriate authority, we will assess the matter and take reasonable action when notified through an official privacy enquiry channel, in accordance with applicable law.

20 / 20

Updates to this Policy

We may revise this Policy when our services, providers, legal requirements or information practices change. We will post the revised version and its updated date and give additional notice where the law requires it.

This Policy is presented in English (UK), Bahasa Melayu, Bahasa Indonesia, Simplified Chinese and Tamil. If translations differ, the English wording is the interpretative reference where legally permitted. A dedicated privacy enquiry form will be added separately.