Privacy Policy

Information We Collect

Depending on the software or service you use, we may collect:

• Account information such as name, email address, phone number, company name, username, and billing details.
• Contact and support information submitted through forms, email, chat, tickets, training registration, or customer service requests.
• Usage data such as IP address, browser type, device information, operating system, app version, pages visited, log files, crash reports, and diagnostic data.
• Transaction and subscription data needed to process orders, invoices, access rights, renewals, and support entitlement.
• Content or files you upload to our services, only where a product feature requires that content to operate.
• Cookies, analytics identifiers, and similar technologies used to keep sessions active, improve performance, prevent abuse, and understand service usage.

How We Use Information

We use personal data for legitimate business and service purposes, including to:

• Provide, maintain, secure, and improve our software and services.
• Create and manage accounts, subscriptions, licenses, payments, invoices, training registrations, and customer records.
• Respond to enquiries, support requests, bug reports, abuse reports, and business communications.
• Monitor service health, detect errors, prevent fraud, enforce terms, and protect users and systems.
• Send operational notices, security alerts, service updates, and product information where permitted.
• Meet legal, regulatory, accounting, tax, audit, and compliance obligations.

Software Provided Through Organizations

If you use Tunnelbiz software through your employer, school, customer, or another organization, that organization may control your account, access, settings, and data within the product. In that case, your use of the software may also be subject to the organization's own policies and agreement with Tunnelbiz Studio Sdn Bhd.

Sharing of Information

We do not sell personal data. We may share information only when necessary with:

• Hosting, cloud infrastructure, payment, analytics, email, security, and support service providers who help us operate our products.
• Business customers or administrators who provide access to a managed product account.
• Authorities, regulators, courts, or professional advisers where required by law or to protect legal rights.
• Marketplace operators or platform providers where a product is distributed through third-party platforms such as cloud marketplaces or app stores.

Cookies, Analytics, and Advertising

Our websites and some software may use cookies, server logs, analytics tools, and advertising technologies. These tools help us remember preferences, protect accounts, measure traffic, improve performance, and display relevant content. You can control cookies through your browser settings, although disabling cookies may affect some product features.

Data Security and Retention

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. We retain personal data only for as long as needed for the purposes described in this policy, to provide the service, resolve disputes, enforce agreements, and meet legal or accounting requirements.

International Processing

Our services may use cloud infrastructure and service providers located in Malaysia or other countries. Where personal data is transferred or processed outside Malaysia, we take reasonable steps to ensure appropriate protection according to applicable requirements.

Children's Privacy

Our business software and cloud services are not intended for children. Some games, educational content, or animation-related products may be accessible to younger users, but we do not knowingly collect personal data from children without appropriate consent where required. If you believe a child has provided personal data to us, please contact us so we can review and remove it where appropriate.

Your Rights and Choices

Subject to applicable law, including Malaysia's Personal Data Protection Act 2010 and related requirements, you may request access to your personal data, correction of inaccurate data, withdrawal of consent where processing is based on consent, or deletion where retention is no longer required. Some requests may be limited where we must keep records for legal, security, billing, or operational reasons.

Third-Party Links and Platforms

Our products may link to third-party websites, app stores, cloud marketplaces, payment gateways, social media platforms, or customer systems. Their privacy practices are governed by their own privacy policies, and we are not responsible for how those third parties handle personal data.

Changes to This Policy

We may update this Privacy Policy when our products, legal obligations, or operational practices change. The latest version will be published on this page with an updated effective date.