Legal
Privacy Policy
Last updated:
1. Introduction
Maine HQ ("Maine", "we", "us", or "our") operates an AI-assisted messaging service used by independent real estate professionals to communicate with prospective property buyers and tenants. This Privacy Policy ("Policy") describes how we collect, use, share, and otherwise process Personal Data in connection with our website and related services (collectively, the "Services"). By using the Services, you acknowledge and agree to this Policy.
Our data handling practices are designed to support compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and comparable international standards. Where we process Personal Data on behalf of a real estate professional who uses the Services (a "participating agent"), the participating agent acts as the data controller and Maine acts as a data processor.
2. Definitions
"Personal Data" means any information relating to an identified or identifiable individual, which may include, by way of example, identifiers, contact details, device or network information, the content of communications, and other information generated through interaction with the Services.
"Service Data" means data relating to the use, support, security, and operation of the Services. Service Data is processed for operational purposes and, where it does not identify an individual, is not treated as Personal Data.
3. Collection and Use of Information
Information You or Others Provide. In the course of interacting with the Services — for example, by exchanging messages with a participating agent's business number, or by registering for and using areas of the Services reserved for participating agents — Personal Data may be supplied to us. This includes information transmitted through the messaging interface and any information you elect to provide during your interaction. We process such information to operate the conversational experience, to facilitate communication between you and the relevant participating agent, and to support related scheduling, notification, and follow-up activities.
Information Collected Automatically. When you interact with the Services, we automatically collect technical and operational information such as network identifiers, device and browser characteristics, access timestamps, and diagnostic logs. This information is processed as Service Data for security, reliability, and product-operation purposes.
Use of Information. We process Personal Data to provide, operate, secure, and improve the Services; to enable and maintain the communication facilitated through the Services; to support scheduling, notifications, and related operational functions carried out on behalf of participating agents; to detect, prevent, and investigate misuse or security incidents; and to comply with applicable legal and regulatory obligations. We do not sell Personal Data, and we do not use the content of communications to train general-purpose artificial-intelligence models.
5. International Data Transfers
The Services rely on infrastructure and providers that may be located in jurisdictions outside your own, including outside Malaysia. Where Personal Data is transferred across borders, we transfer it only as necessary to operate the Services and rely on applicable provider terms, security measures, and other safeguards designed to protect Personal Data. By using the Services, you consent to such transfers.
6. Data Retention
We retain Personal Data only for as long as necessary to fulfil the purposes described in this Policy, to operate and support the Services, and to meet applicable legal, regulatory, and record-keeping requirements, after which it is deleted, archived, or anonymised. Backup copies may persist for a limited period in the ordinary course of operations. You may request deletion of your Personal Data as described in Section 8.
7. Security
We implement reasonable, industry-standard technical and organisational measures designed to protect Personal Data, including encryption of data in transit, encryption at rest provided by our infrastructure providers, access controls and least-privilege principles, multi-factor authentication on administrative accounts where supported, and periodic security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, including in respect of services operated by third-party providers.
8. Your Rights
Subject to applicable law, you may have the right to access, correct, or request deletion of your Personal Data; to withdraw consent; to object to or restrict certain processing; and to receive certain Personal Data in a portable format. To exercise any of these rights, email admin@mainehq.ai with the subject line "Privacy Request". We will respond within the period required by applicable law.
You may also request that we stop messaging you at any time by replying STOP in the relevant conversation, or by emailing us. If you believe your concerns have not been adequately addressed, you may lodge a complaint with the Personal Data Protection Department of Malaysia at pdp.gov.my or another competent supervisory authority.
9. Children's Privacy
The Services are not directed to individuals under the age of 18, and we do not knowingly collect Personal Data from minors. If you believe a minor has provided Personal Data, contact us at admin@mainehq.ai and we will take appropriate steps to delete it.
11. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, the Services, or legal requirements. Where required, we will provide notice of material changes through appropriate channels. The "Last updated" date at the top of this page reflects the most recent revision, and your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.
12. Contact
For questions about this Policy or to exercise your rights, contact us at admin@mainehq.ai. You may also contact the Personal Data Protection Department of Malaysia at pdp.gov.my.