Privacy Policy

Last updated: 2 September 2026

This Privacy Policy explains how Jom Belajar Sdn Bhd (Company No. 202501012048) ("Lebah", "we", "us") collects, uses, discloses, protects, and retains personal data when you use the Lebah.io platform ("Service"). We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA") and other applicable laws. This policy is part of, and subject to, our Terms of Service. If you do not agree, do not use the Service.

1. Our role and yours

This policy covers our customers (businesses and their users) and, where relevant, the call recipients our customers contact. For customer account data, we act as the data controller. For call data our customers generate (recordings, transcripts, contact details of call recipients), the customer is the controller and we act as a data processor on the customer's instructions. Customers are solely responsible for having a lawful basis and any required consent to contact, record, and process the data of the people they call, and for informing them as the law requires.

2. Personal data we collect

• Account and verification data: name, business name and registration details, email, phone number, address, and identity or registration documents submitted during sign-up (KYC).
• Call data: phone numbers involved, call times, durations, outcomes, call recordings, transcripts, and AI-generated summaries.
• Usage and technical data: agents, numbers, activity and audit logs, IP address, device and browser information, and cookies necessary for the Service.
• Payment data: billing details handled by our payment processor. We do not collect or store full card numbers.
• Communications: messages you send us for support or enquiries.

3. How and why we use personal data

• To provide, operate, maintain, secure, and improve the Service, including placing and receiving calls, transcription, and summaries.
• To verify identity, prevent, detect, and investigate fraud, abuse, and security incidents, and to enforce our Terms and Acceptable Use Policy.
• To process payments, manage subscriptions, and keep financial records.
• To provide support and send service, security, billing, and administrative messages.
• To comply with legal, regulatory, tax, and carrier obligations, and to establish, exercise, or defend legal claims.

4. Legal basis and consent

We process personal data where necessary to provide the Service you request, to comply with legal obligations, for our legitimate business interests (such as security and service improvement), or with consent. Where you upload or generate data about third parties (including call recipients), you confirm you have the necessary lawful basis and consent under the PDPA, and you will indemnify us for claims arising from your failure to do so.

5. Automated processing and AI

The Service uses automated systems, including speech recognition, language models, and synthetic voice, to conduct and analyse calls. We do not use call recordings or transcripts to build advertising profiles. We do not make legally significant decisions about individuals solely by automated means on our own behalf.

6. Disclosure of personal data

We do not sell personal data. We disclose it only:

• To trusted service providers that process data on our behalf under contractual safeguards, including providers of cloud hosting and storage, telephony, speech and artificial-intelligence processing, email delivery, and payment processing.
• To authorities, regulators, or carriers where required by law, legal process, or to protect rights, safety, or the integrity of the Service.
• In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality.

A current list of the categories of our service providers is available on request to support@lebah.io.

7. International transfers

Some service providers process data on servers outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure it is protected to a standard consistent with the PDPA.

8. Call recording and transcripts

The Service can record and transcribe calls where a customer enables it. The customer decides whether to record and is responsible for obtaining any consent and giving any notice required by law, including using the in-call recording announcement where required. Recordings and transcripts are stored to provide the Service and can be deleted by the customer.

9. Retention

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter for the period required to meet legal, tax, accounting, security, and dispute-resolution obligations, after which it is deleted or anonymised. Customers may delete Customer Content within the Service; residual copies may persist in backups for a limited period before being overwritten.

10. Security

We apply technical and organisational measures designed to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting personal data, we will act in accordance with applicable law.

11. Your rights

Subject to the PDPA, you may request access to or correction of your personal data, withdraw consent, or limit how your data is processed, by contacting us. We may verify your identity before acting and may charge a fee where permitted. Withdrawing consent may prevent us from providing the Service. Call recipients who wish to exercise rights should contact the customer who called them; where we act as processor we will assist that customer as appropriate. You may also lodge a complaint with the Malaysian Personal Data Protection Commissioner.

12. Cookies

We use only cookies necessary to sign you in and keep the Service secure. We do not use advertising or cross-site tracking cookies.

13. Children

The Service is for businesses and is not directed at, and must not be used by, children under 18.

14. Changes

We may update this policy from time to time. We will post the updated version and, for material changes, provide notice through the Service or by email.

15. Contact

For privacy questions, requests, or complaints, contact Jom Belajar Sdn Bhd at support@lebah.io.