Privacy Policy

Watson is operated by AlphaSquadX Sdn. Bhd. ('Watson', 'we', 'us', or 'our'). We provide a 24/7 employee that businesses use to answer customers, take bookings, collect payments, and run marketing, primarily over WhatsApp, Messenger, Instagram, and phone.

For personal data we collect about you as our customer or as a visitor to our website, we act as the data controller. For personal data inside the conversations Watson handles for a business, that business is the data controller and we act as its data processor. See 'Customer conversations' below.

Information you give us

• Account and contact details: your name, business name, email, phone number, and role.
• Your business information: the website or social media link you share, your services, hours, locations, and languages.
• Billing details needed to process your subscription, handled through our payment partners.
• Anything you send us in support requests or messages.

Information from your customers' conversations

When Watson operates as your front desk, it processes the messages, calls, and booking details your customers send. This can include names, phone numbers, appointment times, and anything a customer chooses to share. We process this on your behalf and under your instructions.

Information we collect automatically

• Usage and device data: pages viewed, actions taken, browser type, and approximate location from your IP address.
• Cookies and similar technologies, as described in 'Cookies' below.

When you paste a website or social media link to build a preview, Watson reads only the public content at that link, the same way any visitor would. We do not attempt to reach private, password-protected, or non-public pages, and we use what we read only to set up and demonstrate your Watson.

• To set up, provide, and operate Watson for your business.
• To build your live preview from the public website link you share.
• To process the bookings, deposits, and payments you or your customers make.
• To send you service messages, updates, and support.
• To improve Watson's accuracy, reliability, and safety.
• To send you marketing about Watson, which you can opt out of at any time.
• To meet our legal, tax, and regulatory obligations.

Under the PDPA, we process personal data where you have given consent, where processing is necessary to provide a service you asked for, to perform a contract, or to meet a legal obligation. Where we rely on consent, you may withdraw it at any time by contacting us, although this may affect our ability to provide the service.

When Watson answers on behalf of a business, that business decides what data is collected and why. The business is the data controller and we act as its data processor. We process customer conversations only to deliver the service to that business, and we do not sell them or use them for our own advertising.

If you are a customer of a business that uses Watson and you want to access or delete your data, please contact that business directly. We will support them in responding to your request.

Watson connects to Meta's platforms so it can answer for your business: the WhatsApp Business Platform, Messenger, Instagram messaging, and Facebook Login. When you connect one of these, we receive data through Meta's official APIs, such as the messages your customers send, their profile or display name, a platform-specific user ID, and, where you use Facebook Login, the basic profile fields you approve.

We use this data only to set up and operate Watson for your business, for the purposes described above. We do not sell it, we do not share it with data brokers, and we do not use it for advertising. We handle it in line with the Meta Platform Terms and the Meta Developer Policies.

You can disconnect Watson at any time from your WhatsApp, Facebook, or Instagram settings, which stops any further access. To delete the data we already hold, see 'How to delete your data' below.

With your permission, Watson can connect to your business's Gmail account through Google's APIs, so incoming customer emails appear in your shared inbox and your replies are sent from your own address.

We use Gmail data only to provide these inbox features to your business: displaying your messages, sending your replies, and keeping conversation status in sync. We do not use it for advertising, we do not sell it, and no human reads it except with your permission, for security purposes, or where the law requires.

Watson's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Watson's access at any time from your Google Account security settings.

We do not sell your personal data. We share it only with:

• Service providers who host, support, and secure Watson, under contracts that require them to protect your data.
• Messaging and payment platforms you use with Watson, such as WhatsApp and Meta, and local payment providers for FPX, DuitNow, and e-wallets.
• Authorities or advisors where the law requires it, or where it is needed to protect our rights, our users, or the public.

We use technical and organisational measures, including encryption in transit, access controls, and monitoring, to protect personal data against loss, misuse, and unauthorised access. No system is perfectly secure, but we work to keep your data safe and to respond quickly if something goes wrong.

We keep personal data only for as long as we need it for the purposes above: to run your account, meet legal and tax obligations, and resolve disputes. When we no longer need it, we delete or anonymise it. Businesses can ask us to delete their data, subject to any records we are required to keep by law.

We aim to store and process personal data in Malaysia, or in locations that provide comparable protection. Where data is transferred outside Malaysia, for example to a cloud or messaging provider, we take steps to make sure it stays protected in line with the PDPA.

Under the PDPA, you may:

• Ask what personal data we hold about you and request a copy.
• Ask us to correct data that is wrong or incomplete.
• Withdraw your consent, or ask us to stop using your data for marketing.
• Ask us to delete data we no longer have a reason to keep.
• Limit how we process your data in certain cases.

To make a request, contact us using the details below. We may need to verify your identity, and we will respond within the time the PDPA allows.

You can ask us to delete the personal data we hold about you at any time. There are two easy ways:

• Email haris@alphasquad.tech from the address linked to your account, with the subject 'Delete my data'.
• Or message us on WhatsApp from your registered number and ask us to delete your data.

We will verify the request and delete the personal data we hold within 30 days, except for records we are required to keep by law, such as tax or transaction records. If you connected Watson through Meta, you can also remove Watson from your Facebook or Instagram settings, under Apps and Websites, to revoke its access.

If you are a customer of a business that uses Watson, that business controls your data. Contact the business directly, or contact us and we will coordinate your deletion request with them.

We use cookies and similar technologies to run the site, remember your preferences such as your language, and understand how the site is used so we can improve it. You can control cookies through your browser settings. Blocking some cookies may affect how the site works.

If you reach us through a link or QR code shared by one of our sales representatives, we store that representative's reference code on your device for 90 days, so that we know how you found us if you book a demo. That code identifies the representative, not you.

Watson is built for businesses and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will remove it.

We may update this policy as Watson and the law evolve. When we make material changes, we will update the date at the top and, where appropriate, let you know. Please check back from time to time.

If you have questions about this policy, or you want to exercise your rights, contact our privacy team:

• Email: haris@alphasquad.tech
• Watson, a product of AlphaSquadX Sdn. Bhd., Malaysia

You also have the right to contact the Personal Data Protection Department of Malaysia (JPDP) if you have concerns about how your data is handled.