Privacy Policy | Aether AI Labs

1. Who we are

Aether AI Labs (SSM registration number 202603189096 (003871416-X)), of 43 Tringkap, 39100 Brinchang, Pahang, Malaysia, operates aetherailabs.net and Prop Elite.

For questions about this policy or about your personal data, contact [email protected].

2. What this policy covers

This policy applies to the aetherailabs.net website, the Prop Elite web platform at propelite.aetherailabs.net and its mobile applications, and to enquiries and development work handled by email or in person.

3. Personal data we collect

Information you give us directly:

Account and workspace details: name, email address, phone number, agency name and role.
Billing contact details, plan and seat count. Payment instrument data is handled by our payment provider, not by us.
Enquiry and support content: what you send us through the contact form, by email or by phone.
Records of development projects, including scope discussions and correspondence.

Our servers record technical information such as IP addresses, request times and device or browser information when you use the service. Our website analytics and mobile notification provider also process technical information about usage. The mobile notification service creates installation and subscription identifiers when the app starts, and associates the device with your account after sign-in. This processing is separate from your choice to allow notification delivery.

4. Data your agency puts into Prop Elite

When your agency uses Prop Elite, your users upload personal data about third parties — client and lead names, contact details, property and transaction records, and agent commission data.

For that data your agency is the data user. It decides what to collect and why, and it is responsible for having consent or another lawful basis under the Personal Data Protection Act 2010. We process it on your agency's instructions, to provide the service, and for no independent purpose of our own.

Each agency's workspace data is kept logically isolated from every other agency's.

5. Why we use personal data

To create and administer your account and workspace.
To provide, maintain, secure and improve the service.
To take payment, issue receipts, and manage subscriptions and renewals.
To provide support and respond to your enquiries.
To send service messages about outages, billing, security and material changes to terms. You can disable mobile push notifications in your device settings; account-related notices may still appear in the application or be sent through another service channel.
To detect, investigate and prevent fraud, abuse and security incidents.
To comply with legal, tax and regulatory obligations.

6. Who we share personal data with

We do not sell personal data and we do not share it for third-party advertising. We share it only with the following classes of recipients, and only as far as each needs it:

Our payment provider, AiPay, processes subscription payments made through the payment channels offered by our service. The Google Play version of Prop Elite provides access to existing accounts and does not offer subscription purchases in the app.
Cloud hosting, database and backup providers that run the service infrastructure.
Email and communication providers used to send service and support messages.
OneSignal and the relevant device push service deliver mobile notifications. They process device and push subscription identifiers, the account identifier used to link a signed-in user to a device, and technical and usage information such as device model, operating system, language, time zone, IP address, country and app session activity.
Anthropic processes requests for optional AI-generated listing descriptions and lead replies. The request includes the relevant property details or lead context. Lead reply context can include the lead's first name, preferences, budget, matching property information and recent follow-up notes. The resulting draft is returned to your workspace for your review.
Analytics providers, currently Google Analytics 4, for aggregate website usage measurement.
Professional advisers such as accountants and lawyers, where needed.
Government bodies, regulators, courts or law enforcement, where we are required by law or to establish or defend a legal claim.
An acquirer or successor, if the business is reorganised, sold or merged. We would notify you before your data became subject to a different privacy policy.

7. Payment data

Payment details are collected and processed directly by AiPay under its own privacy terms. We do not receive or store your full card number or bank login credentials.

We retain subscription and transaction records needed to administer your account and keep payment records, including the plan, amount, currency, transaction reference, payment status and relevant dates.

8. Transfers outside Malaysia

Some of our service providers store or process data on servers outside Malaysia. Where personal data is transferred out of Malaysia, we take reasonable steps to ensure the recipient protects it to a standard comparable to that required by the Personal Data Protection Act 2010, including through contractual commitments.

9. How long we keep it

Workspace data is retained while your workspace is in use. After access ends, you or an authorised agency administrator can request deletion by writing to [email protected]. Account closure does not automatically delete workspace data.
Billing and tax records: for the period required by Malaysian tax and company law, currently seven years.
Enquiry and support correspondence: up to 24 months after the matter is closed.
Server and security logs: up to 12 months.

We manually review and process deletion requests, subject to records we must keep by law. We may need to verify your identity and authority to request deletion of agency records.

10. How we protect it

Data is encrypted in transit using HTTPS/TLS.
Access to production data is restricted to the personnel who need it, and is authenticated.
Workspaces are logically separated so one agency cannot read another's records.
Backups are taken on a regular schedule and access to them is restricted.

No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by law, without undue delay.

11. Your rights

Under the Personal Data Protection Act 2010 you may:

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is inaccurate, incomplete or out of date.
Withdraw consent to processing, where we rely on consent.
Ask us to limit processing for direct marketing or for processing likely to cause damage or distress.

Write to [email protected]. We will respond within 21 days as required by the Act. We may need to verify your identity first. If your request concerns data held in an agency's workspace, we will refer you to that agency, which is the data user for it.

12. Cookies and analytics

aetherailabs.net uses Google Analytics 4 to understand aggregate usage — which pages are visited, from where, and in which language. This uses cookies and similar identifiers.

We use analytics to improve the site, not to build advertising profiles, and we do not use it to identify individual visitors.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Blocking cookies does not stop you using the site.

Prop Elite uses strictly necessary cookies to keep you signed in and to remember interface preferences such as language and text size. These cannot be turned off without breaking the application.

13. Marketing

If we send you marketing about our services, every message will include a way to unsubscribe, and we will honour it. Withdrawing marketing consent does not stop service messages about your account.

14. Children

The service is sold to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact [email protected] and we will delete it.

15. Changes to this policy

We may update this policy. The revised version will be posted here with an updated date. Where a change materially affects how we use your personal data, we will give notice by email or in-app before it takes effect.

16. Contact and complaints

Write to us first — we would rather fix a problem than have you escalate it:

Aether AI Labs
SSM registration no. 202603189096 (003871416-X)
43 Tringkap, 39100 Brinchang, Pahang, Malaysia
Email: [email protected]

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) in Malaysia.

17. Mobile permissions and local processing

If you choose to sort properties by distance, the mobile app asks for foreground location permission. The distance calculation uses your device coordinates locally. The app does not enable GPS location sharing with OneSignal. You can refuse or revoke location permission and continue using other features.

Biometric unlock is handled by your device's operating system. We do not receive your fingerprint, face image or biometric template. The app stores its session credential in device secure storage.

The property cost, mortgage, RPGT and affordability calculators calculate their results on your device. Values entered only into these calculators are not sent to our server. This is separate from deal, commission and client records that you choose to save to your agency's workspace.

The app does not read your device address book, SMS inbox or email inbox. Client contact details and notes that you enter into workspace records are processed to provide the service. When you choose a call, WhatsApp or sharing action, the selected content is passed to the application you choose.