Privacy Notice

Who is responsible for your data

RumahHQ Development Sdn Bhd ("RumahHQ", "we") decides why and how your data is used and is the data user under the PDPA.

You can reach us at any time through the Contact Us button on every public page or at [email protected].

What we collect

Only what Studio needs to work. You can draw and look at your design without giving us anything. We collect data when you sign in, save, use AI, ask for a BQ or write to us:

• Your WhatsApp number, to sign you in with a one-time code, to link your account and to contact you about your design and quotation.
• Your name and e-mail address, when you give them to us (for example to receive your BQ by e-mail) or fill in the Contact Us form.
• Your designs: the floor plans you save to your account, with their names, notes and measurements.
• What you ask the AI features for (briefs and prompts) and the images and layouts the AI creates for you.
• Your cost estimates and BQ requests: the project details used for the estimate, the amounts shown to you and the reference number of each BQ we e-mail you.
• Technical data needed for security: a session cookie, your browser type, and your network address, which we use only to limit abuse (it is stored as a scrambled value, not as the address itself, for sign-in limits).

We do not collect payment card details, identity card numbers or other sensitive personal data. Please do not type them into notes, prompts or forms.

Why we use it

We use your data for these purposes only:

• To sign you in and keep your account secure, including sending the one-time code to your WhatsApp.
• To save your designs and AI images so that you can open them again later.
• To run the AI features and to prepare and e-mail your indicative cost estimate (BQ).
• To contact you on WhatsApp or e-mail about your design and quotation. Our sales team may follow up with you; you consent to this when you sign in and you can withdraw consent at any time.
• To prevent abuse, keep the service reliable and fix problems.
• To meet legal obligations.
• To count, in anonymous daily totals, how often the service and its features are used, so we can keep improving them. These totals contain no account, contact, device or address information.

Who we share it with

We do not sell your data. We share it only with people and services that help us run Studio, and only what they need:

• RumahHQ staff who handle enquiries and quotations, through our own customer records (CRM).
• WhatsApp message delivery, to send your sign-in code and our replies to you.
• E-mail delivery, to send you your BQ and answers to your messages.
• The AI provider that creates layouts and images: your brief or picture is sent to it for that purpose only.
• Hosting and backup providers that store the system and its encrypted backups.

Some of these providers operate servers outside Malaysia, so your data may be processed abroad. We choose providers carefully and ask them to protect it. We may also disclose data if the law or a court requires it.

How long we keep it

We keep data only as long as it is needed:

• Sign-in codes: valid for 5 minutes and deleted within 2 days.
• Sign-in sessions: up to 30 days from sign-in. Sign-in records in our security log: 12 months.
• Your account, designs and AI images: while your account exists, until you ask us to delete it.
• A design or AI image you delete yourself: kept for 90 days so you can undo a mistake, then erased.
• Cost estimates and BQ requests: 24 months.
• Contact Us messages: 24 months after the last message.
• Your record in our customer records (CRM): while we have a sales relationship with you or until you ask us to delete it, unless we must keep it by law.
• Backups: copies expire automatically within 45 days after the data is deleted from the live system.
• Anonymous usage totals: 24 months.

Stored in your own browser (your drafts and settings), data stays on your device until you clear it or sign out and choose to remove it.

Your rights and how to delete your data

Under the PDPA you may:

• ask what personal data we hold about you and get a copy;
• ask us to correct data that is wrong;
• withdraw your consent to be contacted, or to our use of your data;
• ask us to delete your account and the data linked to it (designs, AI images, estimates);
• complain to us, and to the Personal Data Protection Commissioner if you are not satisfied.

The quickest way: sign in, open My designs, and use "Download my data" or "Delete my account and data" under Your data; deleting takes effect at once. For any of these rights you can also press Contact Us and choose "Delete my data" (or write to [email protected] from the e-mail address or WhatsApp number on your account, so we can check it is you). We reply within 21 days. Deleting an account removes your data from the live system, including the messages you sent us and the BQ records; copies in backups expire as described above, a BQ already e-mailed to you stays in your own inbox, and we keep only what the law requires us to keep, plus anonymous counts of how many accounts were deleted.

How we protect it

Sign-in codes are stored only in scrambled form and expire after 5 minutes, connections use HTTPS, sign-in attempts are rate limited, and access to the admin screens is restricted to named administrators. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

Cookies and browser storage

Studio uses one essential cookie to keep you signed in. It is not used for advertising. If you work without signing in, your drafts and settings are stored in your browser only.

We do not use advertising cookies or sell data to advertisers. A bot-protection check (Cloudflare Turnstile) may run when you ask for a sign-in code.

Children

Studio is for adults planning a home. If you are under 18, please use it together with a parent or guardian.

Changes to this notice

If we change how we use your data we will update this page and its date. Material changes will be shown when you sign in.

Contact

Questions or requests about your data: press Contact Us, or write to [email protected].