Legal

Privacy policy

Last updated [__] 2026

The short version

• We collect what we need to run Argnite: your contact details when you get in touch, and, for customers, sales data from the POS and video from the counter camera.
• Argus's standard checks look for people, not faces. Face recognition is a separate beta feature that only recognises loyalty members who explicitly opted in. Everyone else's face is discarded.
• Most video never leaves the outlet. Clips are kept only when something needs attention.
• We don't sell personal data, and we don't use it for advertising.
• You can ask to see, correct or delete your data. Email [privacy@argnite.com].

1. Who we are

[Argnite Sdn. Bhd.] (company no. [__]) ("Argnite", "we", "us") makes Argnite Analyst, Argus and the Iggy assistant for retail and F&B businesses. Our registered address is [__].

This policy explains how we handle personal data under Malaysia's Personal Data Protection Act 2010, as amended in 2024 ("PDPA"). It is also available in Bahasa Malaysia. If the two versions differ, [the Bahasa Malaysia version] applies.

2. What this policy covers

This policy covers personal data we handle through argnite.com, our WhatsApp line, the Argnite portal, Iggy on Telegram and the Argnite services (Argus, Analyst and Iggy).

We play two different roles, and it matters which one applies to you.

When you contact us, book a pilot or sign in to the portal, we decide how your data is used. Under PDPA we are the data user, and this policy tells you what we do with it.

When we process data for a customer, the customer decides why it is collected. That includes video from cameras in their outlets, their sales records and their staff's phone numbers. We process it on the customer's behalf and only on their instructions. If you work at, or shop at, one of our customers' outlets, the business that runs the outlet is responsible for your data and is the first place to go with questions. We will help them answer you.

3. What we collect

When you get in touch or book a pilot

Your name, work email, phone number, company and outlets, and anything you tell us in messages, including on WhatsApp.

When you use the portal

Your account details (name, work email, phone number and role), sign-in records, what you do in the portal, such as notes and settings, and your conversations with Iggy.

When you use Iggy on Telegram

If you connect Iggy to Telegram, we store your Telegram user ID and the portal account it is linked to, and keep your questions and Iggy's replies the same way as portal conversations. Iggy only answers with what your portal account is allowed to see.

Through the services, for our customers

• Sales data from the customer's POS: items, prices, times, payment method, and the cashier name or ID attached to each transaction. We don't need card numbers and don't ask for them.
• Video from Argus: footage from the camera the customer points at the counter. The Argus box in the outlet analyses it there and records whether people are present. Where the customer has switched the features on, it also counts how many people are waiting and links till events to the moment they happened.
• Contact and call records: the names, roles and phone numbers of the people Argus should call, and a log of each call (when, to whom, and whether they answered).
• Face templates (beta): if a customer switches on Customer recognition, a face template for each of its loyalty members who gave explicit consent, and a record of when and where each member was recognised. Section 4 explains how this works.
• Device readings from the Argus box, such as temperature, storage and uptime. On their own these aren't personal data.

Automatically, from our website

Our hosting provider keeps basic technical logs (IP address, browser type, pages requested and the time) so the site stays up and secure. The public website doesn't use advertising or analytics cookies. The portal uses one cookie to keep you signed in, and stores a small display preference in your browser.

4. Video, Argus and face recognition

Argus's standard features (opening checks, staff availability and queue counts) look for people, not faces. They don't identify anyone and don't create biometric data.

Most video never leaves the outlet. The Argus box keeps a rolling recording on its own storage and overwrites it after [__] hours.

A clip leaves the outlet only when something needs attention, such as an empty counter at opening or a flagged till event. Clips and timelapses are sent over an encrypted connection to our cloud storage and kept for [__] days. A customer can ask us to keep a particular clip longer, for example during an investigation.

Only the customer's authorised users can watch clips. A small number of Argnite staff can see them when they need to, for example to fix a fault the customer has reported.

Customers must tell people that cameras are in use, with clear signs in the outlet, and must not point Argus at toilets, changing rooms, prayer rooms, staff rest areas or anywhere else people expect privacy. Our Terms of use set this out.

Customer recognition (beta)

Customer recognition is an optional beta feature that a business can switch on to recognise members of its own loyalty programme. A face template is biometric data, which PDPA treats as sensitive personal data, so the feature is built around explicit consent.

• A member is only recognised if they tick a separate, unticked consent box on the business's registration page. Joining the loyalty programme can't depend on it, and nobody under 18 can switch it on.
• The member's selfie is turned into a face template (a set of numbers) on their own phone and then deleted. We store the template, never a photo.
• In the outlet, Argus compares faces against members' templates on the box itself. If a face doesn't match a member, it is discarded within seconds and never stored.
• A visit is recorded only when the match is at least as confident as the business's setting (94% by default). Matches can still be wrong, which is why the feature is labelled beta.
• Templates are used only to count members' visits and tailor their rewards. They are never used for watchlists or bans, never used to monitor staff, never shared with other businesses and never used to train models.
• A member can withdraw at any time. We then delete their template straight away and anonymise their visit history. We also delete a template automatically if the member hasn't visited for [12] months.

The business that runs the loyalty programme is responsible for collecting consent and answering members' requests. We process the data on its behalf and give it the tools to do both.

5. Why we use personal data

• To provide the services: run opening checks, place calls, answer questions in Iggy and show you the portal.
• To set up pilots and accounts, and to reply when you contact us.
• To keep the services working and secure, including support, fixing faults and stopping misuse.
• To improve Argnite. For this we use aggregated or de-identified data, for example to measure how often alerts were right. We don't use customer footage or members' face templates to train any model.
• To meet our legal obligations, such as keeping tax records and responding to lawful requests from authorities.

We ask for your consent where PDPA requires it, and otherwise rely on the grounds PDPA allows, such as performing a contract with you or complying with the law. Where we act for a customer, the customer is responsible for having a lawful basis for the data it asks us to process.

6. Iggy and AI

Iggy answers questions using AI models, some of them run by outside providers. When you ask Iggy something, the data needed to answer (for example, an outlet's sales for last week) is sent to the model to produce the reply. Our contracts with these providers don't allow them to use our customers' data to train their own models. [Confirm with each provider before launch.]

Telegram carries your questions and Iggy's replies through its own servers, and Telegram chats with bots are not end-to-end encrypted. Telegram's own privacy policy applies to that part. If that doesn't suit your business, use Iggy in the portal instead, or ask us to switch Telegram off for your company.

Iggy can be wrong. Treat its answers as a starting point and check anything important. Forecasts and Loss watch flags are estimates based on patterns. A Loss watch flag is not a finding that anyone did anything wrong, and nobody should be disciplined because of a flag alone.

7. Who we share it with

We don't sell personal data, and we don't share it for advertising. We share it only with:

• Service providers that help us run Argnite, under contracts that require them to protect it. These include cloud hosting ([Amazon Web Services], [Vercel]), email delivery ([Resend]), phone calls ([telephony provider]), messaging (WhatsApp, operated by Meta, and Telegram) and AI model providers ([names]).
• The customer you work for, if you use Argnite as a member of their staff.
• Our professional advisers, such as lawyers and auditors, when we need their advice.
• Authorities, when the law requires it or when it is needed to protect someone's safety.
• A buyer or successor, if Argnite is sold or restructured. They would have to keep the commitments in this policy.

8. Data stored outside Malaysia

Some of our providers store or process data outside Malaysia, for example in Singapore or the United States. We send personal data abroad only where PDPA allows it, such as when the destination has laws that protect personal data to a similar standard, or when the provider is bound by contract to protect it that way. Our main data storage is in [region].

9. How long we keep it

We keep personal data only as long as we need it for the purposes above, then delete or anonymise it.

10. Security and breaches

We encrypt data when it moves between systems and when it is stored, and we give access only to the people who need it to do their jobs. Argus boxes connect to our cloud over encrypted connections and delete old recordings automatically.

No system is perfectly secure. If a personal data breach happens and is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and, where required, the people affected, as PDPA requires. If the breach involves a customer's data, we will tell the customer without undue delay so they can meet their own obligations.

11. Your rights

Under PDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong or out of date;
• stop using it for a particular purpose, or withdraw your consent (this may mean we can no longer provide a service to you);
• send your data to you or another provider, where PDPA gives you that right;
• stop sending you marketing.

Email [privacy@argnite.com] or WhatsApp us on +60 16-226 5121. We will reply within 21 days. We may need to confirm who you are first, and we may charge the fee PDPA allows for access requests.

If your data reached us through one of our customers (for example, you appear in footage from an outlet), we will pass your request to that customer and help them answer it.

If you aren't happy with how we have handled your data, you can complain to the Personal Data Protection Commissioner at the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), pdp.gov.my.

12. Children

Argnite is a service for businesses, and the website and portal are meant for adults. We don't knowingly collect children's data through them. Outlet cameras may record young customers, which is one more reason customers must put up clear signs.

13. Changes to this policy

We update this policy when our practices change, and the date at the top shows when we last did. If a change matters, we will tell customers by email or in the portal before it takes effect.

14. Contact us