Privacy Policy

1. Introduction

MYVENT AI VENTURE ("Myvent", "we", "us", or "our"), a company registered in Malaysia, operates the Myvent mobile application and website (collectively, the "Platform"). Myvent is an AI-powered event management platform that connects event planners with vendors.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our Platform. By accessing or using Myvent, you acknowledge that you have read and understood this Privacy Policy.

We are committed to complying with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards, including the principles of the EU General Data Protection Regulation (GDPR) where relevant.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, phone number (optional), profile photo (optional), location (city and state), and language preference. If you sign in via Google or Apple, we receive your name, email address, and profile photo from those services.

2.2 Event Data

When you create or manage events, we collect event details including event name, type, date, location (address and GPS coordinates), guest count, budget, cultural and religious requirements, special requirements, and cover images. We also store guest lists (names, contact details, dietary requirements, RSVP status) and task lists you create.

2.3 Financial Data

We collect payment transaction records, receipt images and extracted data, budget tracking information, and service fee calculations. Full credit card or bank account details are processed directly by our payment partner, Billplz, and are not stored on our servers. For vendors, we collect bank account details necessary for processing payouts.

2.4 Communication Data

Messages exchanged between users and vendors on the Platform are stored, including text content, images, documents, message reactions, and threading information. This enables real-time messaging and conversation history.

2.5 AI Interaction Data

When you use our AI planning assistant, we collect and store your conversation history with the AI, session metadata, and AI-extracted preferences. These preferences may include dietary requirements, cultural background, style preferences, budget patterns, and vendor preferences. This data is used to personalise your experience across sessions.

2.6 Location Data

With your permission, we collect GPS coordinates from your device to enable vendor proximity searches and location-based recommendations. Event venue locations and addresses are also stored.

2.7 Device and Technical Data

We collect push notification tokens, device platform (iOS or Android), device model, operating system version, and app version to deliver notifications and ensure compatibility.

2.8 Contacts

If you choose to import guests from your device contacts, we access contact names and phone numbers with your explicit permission. This data is only used to populate your event guest list and is not used for any other purpose.

2.9 Reviews and Ratings

When you leave reviews, we collect your ratings (across multiple dimensions such as quality, value, and professionalism), written review text, and any photos you upload. Reviews are publicly visible on vendor profiles.

3. How We Use Your Information

We use your personal data to:

• Provide, maintain, and improve the Platform and its features
• Power AI-assisted event planning, vendor recommendations, and personalisation
• Process payments, manage escrow deposits, and handle refunds
• Send transactional emails (payment receipts, booking confirmations, balance reminders) and push notifications
• Facilitate messaging between users and vendors
• Resolve disputes between users and vendors on the Platform
• Prevent fraud, abuse, and enforce our Terms of Use
• Generate anonymised, aggregated analytics to improve our services
• Comply with legal obligations and respond to lawful requests

4. AI Features and Automated Processing

Myvent uses artificial intelligence to enhance your event planning experience. It is important that you understand how these features work:

• AI Assistant: Our AI chat assistant is powered by OpenAI. When you use this feature, your messages and relevant event context are sent to OpenAI's servers in the United States for processing.
• Preference Learning: The AI extracts and stores your preferences (such as dietary needs, cultural background, style, and budget patterns) across sessions to provide increasingly personalised recommendations.
• Vendor Recommendations: The AI recommends vendors based on factors including your profile, budget, cultural fit, ratings, and availability. These recommendations are algorithm-based and do not constitute endorsements.
• Event Management: The AI can create and modify events on your behalf based on your instructions during chat sessions.
• Receipt Scanning: Receipt images are processed using on-device optical character recognition (OCR). The extracted text may be sent to OpenAI for structured data extraction.
• Opting Out: You may request deletion of your AI preference data or opt out of AI preference profiling by contacting us at myventinfo@gmail.com.

AI-generated content and recommendations are advisory only and may contain errors. You are responsible for reviewing and verifying any information or actions taken by the AI.

5. How We Share Your Information

We share your personal data with the following categories of third parties:

5.1 Service Providers

• OpenAI (United States): Chat messages, event context, and vendor data to power AI features
• Google Firebase (United States): Device tokens and notification content for push notification delivery
• Resend (United States): Email addresses and transactional email content for email delivery
• Billplz (Malaysia): Payment data for processing transactions
• Google Maps: Location queries to display maps and enable venue and vendor searches

5.2 Other Users

• Vendors: Your name and contact details are shared when you request quotes, make bookings, or send messages
• Event Collaborators: Profile information is visible to people you invite to collaborate on events
• Public Content: Reviews you post are publicly visible on vendor profiles

5.3 Legal Requirements

We may disclose your information when required by law, in response to valid legal process, or to protect the rights, safety, or property of Myvent, our users, or the public.

We do not sell your personal data to third parties.

6. Data Storage and Security

• Your data is stored on Supabase infrastructure hosted in Singapore.
• We implement Row Level Security (RLS) to ensure users can only access their own data.
• All data in transit is encrypted using HTTPS/TLS protocols.
• Authentication uses industry-standard JWT tokens with refresh token rotation.
• Rate limiting is applied to authentication endpoints to prevent abuse.
• File uploads are limited to 50 MB per file.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

7. Data Retention

• Account Data: Retained while your account is active and for up to 90 days after account deletion for legal and compliance purposes, after which it is permanently deleted.
• Financial Records: Retained for 7 years as required by Malaysian tax and regulatory obligations.
• AI Conversation History: Retained until you delete individual sessions or request full deletion.
• Messages: Retained until manually deleted by participants or upon account deletion.
• Push Notification Tokens: Deactivated automatically when they become invalid and removed periodically.

8. Your Rights

Under the Malaysian PDPA and applicable international data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your account and associated personal data.
• Data Portability: Request your data in a commonly used, machine-readable format.
• Withdraw Consent: Withdraw your consent for non-essential data processing at any time.
• Object to Profiling: Opt out of AI-based preference extraction and automated profiling.

To exercise any of these rights, please contact us at myventinfo@gmail.com. We will respond to your request within 30 days.

9. Children's Privacy

Myvent is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly. If you believe a minor has provided us with personal data, please contact us at myventinfo@gmail.com.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of Malaysia, including the United States (OpenAI, Google Firebase, Resend) and Singapore (Supabase). When we transfer data internationally, we ensure appropriate safeguards are in place, including contractual protections with our service providers, to protect your personal data in accordance with applicable data protection laws.

11. Cookies and Local Storage

The Myvent mobile app uses local device storage (SharedPreferences and secure storage) to cache preferences and authentication tokens for a seamless experience. Our website does not use tracking cookies or third-party analytics. We do not serve advertisements or use advertising trackers.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. For material changes, we will notify you via the app or email before the changes take effect. Your continued use of the Platform after the changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: