Privacy Policy

How AsteriQ collects, uses, and protects your personal information.

Effective: 1 January 2025Last updated: 1 January 2025

Data We Collect

We collect the following information when you use AsteriQ:

Account information — name, email address, phone number, organisation name

Usage data — login timestamps, features accessed, pages visited

Business data — information you upload to manage your business operations

Device information — IP address, browser type, operating system

Communications — support emails and messages you send us

We do not collect payment card details directly — payments are processed by our payment providers.

Why We Collect It

We use your information to:

Provide and operate the AsteriQ platform

Process your subscription and account

Send service updates, alerts, and notifications

Provide customer support

Improve the platform based on usage patterns

Comply with legal obligations

Protect against fraud and abuse

How Data Is Stored

Your data is stored using Supabase — a managed cloud database service — and served through Vercel infrastructure. Both providers maintain industry-standard security controls.

Data is stored in secure cloud servers. Backups are performed routinely by our infrastructure providers.

We retain your data for as long as your account is active. After account deletion, data is retained for up to 90 days before permanent deletion, unless required longer by law.

Data Subprocessors

AsteriQ uses the following subprocessors to provide its services:

Supabase Inc. — database and authentication infrastructure. Privacy Policy

Vercel Inc. — application hosting and delivery. Privacy Policy

Google — maps and analytics (where enabled). Privacy Policy

These providers process data on our behalf and are contractually bound to protect it.

Cookies

AsteriQ uses cookies to:

Maintain your login session

Remember your preferences

Analyse platform usage (analytics cookies)

You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality.

Your Rights Under PDPA Malaysia

Under the Personal Data Protection Act 2010 (PDPA Malaysia), you have the right to:

Access — request a copy of personal data we hold about you

Correction — request correction of inaccurate data

Deletion — request deletion of your personal data (subject to legal retention requirements)

Withdrawal — withdraw consent for data processing (may affect service availability)

To exercise these rights, contact us at privacy@asteriqhq.com.

Data Deletion Requests

To request deletion of your account and personal data:

1. Email privacy@asteriqhq.com with subject: Data Deletion Request

2. Include your account email address and organisation name

3. We will process your request within 30 days

4. You will receive confirmation when deletion is complete

Note: Some data may be retained as required by law or for legitimate business purposes such as fraud prevention.

Data Sharing

We do not sell your personal data to third parties.

We may share data with:

Infrastructure providers (Supabase, Vercel) as described above

Law enforcement when required by law

Professional advisors (lawyers, accountants) under confidentiality

We will never share your business data with your competitors or use it for advertising purposes.

Contact Us

For privacy questions, data requests, or concerns:

Email: privacy@asteriqhq.com

Subject line: Privacy Request — [your email]

We aim to respond to all privacy requests within 5 business days.