Privacy Policy

Last updated: 2 September 2025

1. Introduction

Lush Cloud AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI services. This policy complies with Malaysia's Personal Data Protection Act (PDPA) 2010 and the European Union's General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Personal Information

Name and contact information (email, phone number)
Billing and payment information
Account credentials and preferences
Communication records with our support team

2.2 Usage Data

Service usage patterns and preferences
Device information and IP addresses
Browser type and operating system
Content uploaded or generated through our services

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and provide personalized services.

3. How We Use Your Information

We use your information for the following purposes:

Providing and maintaining our AI services
Processing payments and managing your account
Improving our services and developing new features
Communicating with you about updates and support
Ensuring security and preventing fraud
Complying with legal obligations

4. Legal Basis for Processing (GDPR)

For EU residents, we process your data based on:

Contract: To provide services you've requested
Legitimate Interest: To improve our services and ensure security
Consent: For marketing communications and optional features
Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

Service Providers: Third-party vendors who assist in providing our services
Payment Processors: To process transactions securely
Legal Authorities: When required by law or to protect our rights
Business Transfers: In case of merger, acquisition, or sale of assets

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Content you create may be retained according to your account settings and service requirements.

8. Your Rights

8.1 Malaysian Users (PDPA Rights)

Right to access your personal data
Right to correct inaccurate data
Right to withdraw consent
Right to limit processing of your data

8.2 EU Users (GDPR Rights)

Right to access, rectify, and erase your data
Right to restrict or object to processing
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with supervisory authorities

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions, to protect your data during international transfers.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Officer

Lush Cloud AI Studio

Level 17, The Bousteador, 10, Jalan PJU 7/6, Mutiara Damansara, 47800 Petaling Jaya, Selangor, Malaysia

privacy@lushcloud.ai