Privacy Policy - FunnelDesk

1. Who we are

Webex Creative (IP0575841) runs FunnelDesk at https://www.funneldesk.my. This Privacy Policy explains how we handle personal data under Malaysia’s Personal Data Protection Act 2010 (PDPA).

We play two roles:

For your account (you and your staff), we are the data controller.
For the details of your customers that you store in FunnelDesk, your business is the data controller and we are your data processor. We handle that data only to provide FunnelDesk to you.

For any privacy question, contact us at [email protected].

2. What we collect

Account details: your name, business name, email address, role and sign-in times. Passwords are stored only in encrypted (hashed) form.
Billing details: your plan, payment history, invoices and receipts, and payment proofs you upload for bank transfers. Card details are entered on Stripe’s secure page and never reach our servers.
Business data you add: your customers’ names, company, phone, email, address, city and state, notes, contact history, meetings, sales, invoices, calendar events and reminder emails.
Security data: IP addresses are kept only in encrypted (hashed) form, to protect accounts from misuse and keep an activity record.
AI usage: how many AI requests your account made, for credit limits. We do not keep a copy of AI requests apart from what you choose to save.

3. Why we use it

to provide FunnelDesk and its features to you
to send emails you switch on, such as daily summaries, meeting reminders and payment reminders
to handle subscriptions, payments, receipts and refunds
to keep FunnelDesk secure, prevent misuse and fix problems
to reply to your questions and give support
to meet our legal and tax obligations

We do not sell personal data, show advertising, or use your customers’ details for our own marketing.

4. Do you have to give us this data?

Your name, email and business name are needed to create and run your account. Without them we cannot provide FunnelDesk. Everything else, such as customer details or a phone number, is up to you.

5. Who we share it with

We share data only with service providers that help us run FunnelDesk, and only what each one needs:

Hosting: our web hosting provider stores the FunnelDesk database and files.
Email: emails are sent through Google (Gmail / Google Workspace).
Payments: Stripe processes card payments and subscriptions.
AI: when someone in your team uses the AI assistant, Anthropic (the maker of Claude) processes the details needed for that request, such as a customer’s first name, company, stage, notes and recent contact history, or a chat or business card you choose to upload. Customer phone numbers and email addresses are not sent for message writing. Your account owner can switch AI off.

We may also disclose data when the law requires it, for example to a court or a government authority.

6. Transfers outside Malaysia

Some providers listed above, such as Stripe and Anthropic may process data outside Malaysia. We choose providers that protect data to a standard comparable to the PDPA and transfer only what is needed.

7. How we protect it

encrypted connection (HTTPS) for all pages
passwords stored only as strong one-way hashes, and payment and email secrets stored encrypted
each business’s data kept strictly separate, so one business can never see another’s data
limits on repeated sign-in attempts, protection against form forgery, and an activity record of important changes
regular backups

8. How long we keep it

While your account is active, we keep your data so you can use FunnelDesk.
After your plan ends, we keep your data for at least 90 days so you can come back or export it. After that, we may delete it, after warning you by email.
Reminder email records are deleted automatically after 180 days.
Payment and invoice records are kept as long as tax and accounting laws require, generally 7 years.
Deleted data is removed from backups within our normal backup cycle.

9. Your rights

Under the PDPA you can ask to see the personal data we hold about you, correct it, limit how we use it, or withdraw consent. You can also export your business data at any time from FunnelDesk, or ask us to delete your account. Send requests to [email protected]. We reply within 21 days.

10. If your details are stored by one of our clients

If a business uses FunnelDesk to keep your details, that business decides how they are used. Please contact the business directly to see, correct or delete your data, or to stop receiving their emails. If you contact us instead, we will pass your request to them.

11. Data breaches

If a personal data breach happens, we will act quickly to contain it, notify the Personal Data Protection Commissioner and affected people where the PDPA requires, and tell affected businesses without undue delay.

12. Cookies

FunnelDesk uses one essential cookie to keep you signed in. We do not use advertising or tracking cookies. Stripe may use its own cookies on its payment pages.

13. Changes to this policy

We may update this policy. For important changes, we will email account owners before they apply. The date at the top shows the latest version. If the English and Bahasa Malaysia versions differ, the English version applies.

14. Contact

Webex Creative, Suite 33-01, 33rd Floor, Menara Keck Seng, 203, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia.. Email: [email protected].