Privacy policy

What we collect, and why

Only what you type into the pilot request form: your name, mobile numberand email (required) and your agency (optional), plus the time you sent it and the page you sent it from. We use them only to contact you about the pilot and, if you join, to set up your account. We don't sell them, and we won't add you to a mailing list.

The form's handler sees your IP address for about a minute, only to limit how many requests one address can send, and doesn't store it. Our hosting provider may keep ordinary technical logs, as any web host does.

Where it goes, and for how long

Your request goes to a small handler at Bunny, our hosting provider, which passes it straight to a group in Lark, our team chat. Both may process it outside Malaysia. We keep it while we're in touch with you and for up to 24 months after our last contact, then delete it. Ask us and we'll delete it sooner.

Cookies and tracking

This site sets no cookies, keeps nothing in your browser's storage and runs no analytics, advertising or tracking. It loads no third-party scripts, fonts or images: everything comes from the site's own files. What you type into the form stays in the page until you send it, and is gone if you close the page.

If we ever add analytics or any other non-essential tracking, we will update this policy and ask for your consent before it runs, not after.

What stays on your Mac

Your messages, contacts and media, group chats included, stay in the app's folder on your Mac. So do your property portal sign-ins and the keys that keep your messaging account linked (encrypted with your Mac's keychain). AskBase doesn't encrypt the message database itself, so keep your Mac locked. Signing out or unlinking leaves the messages there. To remove them, delete ~/Library/Application Support/AskBase. AskBase keeps syncing while its window is closed, until you quit it. It has no analytics, tracking or crash reporting.

What leaves your Mac

Chat content leaves only when you ask AskBase to do something with a chat. It never leaves for a group chat, a chat you've switched off with "Use this chat for AI", or a chat without a phone number.

• Updating a lead: the chat's new messages (up to 200) and up to 4 recent photos.
• Drafting a reply: the chat's last 50 messages.
• Copying a draft: the text you send, so your AI staff learn how you write.

Updates and drafts also carry the contact's name and phone number, so our server can match the lead. Our server passes what the task needs to our AI providers, OpenAI and Anthropic. The AI never gets the number saved on a contact, but a number typed inside a message reaches it as written.

After the task, our server doesn't keep the messages. The one exception: when the AI moves a lead to a new stage, it keeps a quote of up to 300 characters to show why. (A task that fails can leave an encrypted copy in our error records.)

One thing is sent automatically. For chats linked to a lead, the app sends the time of the latest message each way, so AskBase can remind you who to follow up. It sends no message text, and it does this even for chats switched off for AI.

Other AI work:

• Your AI staff send the AI the leads, contact names, notes, listings and files a task needs, with phone numbers masked.
• Designs go to OpenAI: the text, your brand kit (including your phone and REN number), your logo, your headshot if you agree, and photos. OpenAI gets a random id for you, not your name or email.
• Photos have hidden details, such as location, removed before they are sent.
• The Video Director searches the web with Tavily. We block any search that contains a phone number, an IC number or an email address.

What we keep on our server

• Your account: your name, your email, your password as a hash, and each computer you sign in from (its name and an id based on its hardware). Sign-in IP addresses are erased within 90 days.
• Your work: leads and contacts, notes, reminders, appointments, listings (their private details are encrypted), teams, your brand kit, content and designs, the stage quotes above, and your AI staff conversations and notes. A draft can restate what a client said.
• Files you or the app upload. Screenshots in AI staff conversations are deleted after 30 days.
• Your plan: credits and payments. We never take card details.

Your Meta ads account (optional)

If you connect your Meta ads account (you sign in with Facebook Login for Business, in your browser), AskBase:

• reads your name and Meta user id, your Facebook Pages, their lead forms, and your ad accounts;
• imports new leads from the Lead Ads forms you choose, as contacts and leads, with the form answers (email included) in a note. A lead without a valid phone number is skipped;
• keeps the names of the ads, ad sets and campaigns those leads came from;
• reads ad performance only when you ask for it, keeps it for 15 minutes and never saves it;
• stores Meta's access keys encrypted on our server, never in the app.

We use this data only to run these features for you. We don't sell it or use it for advertising.

To disconnect, go to Settings → Meta Ads. We withdraw our access, then delete the keys and our list of your Pages, forms and ad accounts. Removing AskBase in your Facebook settings, or asking Meta to delete your data for AskBase, does the same. Leads already imported stay as your records. Email info@cbksolutions.com.my to have them deleted too.

Property portals

If you connect a portal account, the app types your email and password into the portal's own sign-in page, then forgets them. They are never stored, logged or sent to us. The portal's sign-in cookies stay on your Mac. When you post a listing, the app fills in the portal's form from your AskBase listing. Nothing from the portal comes back to our server.

Who handles your data

Vultr (our server and database), Bunny (file storage in Singapore, and this website), OpenAI and Anthropic (AI), Tavily (web search), Maileroo (sign-in emails), Lark (pilot requests) and Meta (only if you connect it). Some of them process data outside Malaysia. We use them under their business terms and take reasonable steps to give your data protection comparable to Malaysian law. We share personal data with no one else, unless the law requires it.

How long we keep it

• Your account and your work: until you ask us to delete them. Deleting a lead or contact in the app hides it, but our server keeps a copy.
• Sign-in IP addresses: 90 days. Screenshots in AI staff conversations: 30 days. Server logs: 14 days. Ad performance: 15 minutes.

Your choices

• Switch any chat off with "Use this chat for AI". Group chats start switched off.
• Disconnect Meta ads, or unlink your messaging account, in Settings at any time.

Your rights

Under the PDPA you can ask for a copy of your personal data, ask us to correct or delete it, or ask us to stop contacting you. Email info@cbksolutions.com.my. It is free, and we will respond within the time the law allows.

AskBase has no delete-account button yet. To close your account or have its data deleted, email us and we will do it by hand. Data already sent to an AI provider is handled under that provider's terms.

Security

Passwords are stored as hashes. Sensitive data, such as Meta access keys and private listing details, is encrypted, and files are shown through links that expire. If a breach affects your data, we will tell you, as the law requires.

Changes to this policy

If what we do with personal data changes, we will update this page and the date at the top.