Privacy Policy

Version 2026-10-14. Data user for agent accounts: Miracle Mikhael Enterprise (SSM JM1034029V / 202503287594), 117 Jalan Sri Selayang, Taman Sri Selayang, 68100 Batu Caves, Selangor, Malaysia. Contact: hello@ejenhub.com.

Ringkasan: Kami simpan data akaun anda untuk menjalankan EjenHub. Data klien anda adalah milik anda; kami hanya memprosesnya bagi pihak anda dan tidak menjual atau menggunakannya untuk pemasaran. Data disimpan di Cloudflare (mungkin di luar Malaysia). Anda boleh eksport dan padam bila-bila masa.

This policy follows the Personal Data Protection Act 2010 (as amended in 2024).

1. What we collect about you (the agent)

• Account: name, email, password (stored only as a salted hash), agency name and phone if you add them.
• Billing: Stripe customer and subscription references and invoice amounts. Card details are handled by Stripe, not us.
• Security: sign-in times, IP address at sign-in and an activity log of important actions in your account.

2. Your clients' data

The leads and clients you add (name, phone, email, optional birthday, occupation, address, last 4 digits of IC, notes, policy, claim and follow-up records and files you upload) belong to you. You are their data user; we process them only to provide EjenHub to you, under the Data Processing Agreement at /dpa. We never sell this data, contact your clients, or use it for advertising. EjenHub does not ask for health information, and you agree not to store it.

3. Why we use your data

To create and secure your account, provide the service, send service emails (email confirmation, password reset, trial and billing notices), take payment, give support and meet legal obligations.

4. Who we share with (sub-processors)

• Cloudflare, Inc. — hosting, database, file storage and transactional email. Data may be stored and processed outside Malaysia.
• Stripe — subscription payments.
• Google Analytics and Meta Pixel — only on the public website and the signed-out sign-up page, and only if you click Accept on the cookie banner. They receive page visits and sign-up events with browser/device details and IP address. They never run inside the app after you sign in and never receive your clients' data.

We disclose data to authorities only when the law requires it.

5. Retention

• Your data stays while your account exists. Deleting a client removes their records and files immediately. Deleting your account removes everything immediately.
• Database backups (Cloudflare Time Travel) can keep deleted rows for up to 30 days before they are gone for good.
• Billing records may be kept for up to 7 years for tax and accounting.
• The activity log is kept for 2 years.

6. Security

Encrypted connections (HTTPS), hashed passwords, private file storage that only your signed-in account can open, sign-in rate limits, cross-site request protection and per-account data isolation. If a personal data breach is likely to cause significant harm, we will notify the Commissioner within 72 hours and tell affected users without undue delay.

7. Your choices and rights

You can view, correct and export your data and delete your account in Settings. You may also ask us for access or correction at hello@ejenhub.com; we reply within 21 days. Your clients should contact you (their agent) for access to or correction of their records; we will help you answer.

8. Cookies

The app uses one essential sign-in cookie. On the public site we set a cookie (eh_consent) to remember your cookie choice for 6 months; analytics/advertising cookies load only after you click Accept. You can change your choice with "Cookie settings" in the website footer.

9. Changes

We will notify you in the app when this policy changes and ask you to agree again.