Legal & Trust

Privacy Policy

This policy explains what information AI Hub collects, how it is used, and how your prompts, code and AI requests are handled.

Last updated: 25 August 2026 This document is a practical baseline and is not legal advice.

1. Information We Collect

Depending on how you use AI Hub, information may include:

name
email address
account information
IP address
device/browser information
payment transaction references
API usage metadata
selected AI model
input/output token counts
request timestamps
technical logs
security and error logs

Payments are processed by CHIP, a third-party payment provider. AI Hub does not store your card or bank details; it only receives transaction references needed to confirm and reconcile payments.

2. Prompts, Code and AI Requests

AI Hub processes your prompts, code and other input as necessary to route your request to the selected AI provider. AI Hub does not intentionally retain the full content of your requests beyond what is required for processing, security, troubleshooting or legal obligations.

To bill usage and enforce limits, AI Hub records usage metadata — the selected model, provider, input and output token counts, request timestamps, and, where applicable, the request IP address and user agent — but not the prompt, source code, or response content itself.

3. How Information Is Used

Information may be used to:

provide AI Hub services
authenticate users
generate API keys
calculate usage
process payments
maintain platform security
prevent fraud and abuse
troubleshoot errors
provide customer support
improve reliability
comply with legal requirements

4. Third-Party AI Processing

When you send a request to an AI model through AI Hub, relevant request data may be transmitted to the third-party AI provider responsible for processing that model.

This may include:

prompts
source code
documents/content supplied by you
system instructions
other information contained in an API request

Do not submit confidential or sensitive information unless you are authorized to do so and understand the applicable provider's data handling terms. See AI Providers & Data Routing.

5. International / Cross-Border Processing

Some AI providers and service providers may process information outside Malaysia.

AI Hub uses appropriate safeguards and contractual/technical measures where applicable. AI Hub does not claim that all data is stored in Malaysia.

6. Data Retention

As currently implemented:

Account records are retained while your account is active. Accounts deactivated for inactivity or disabled by an administrator are subject to automated removal after the platform's scheduled cleanup windows.
API usage logs (token counts and request metadata, not content) are retained for as long as needed to support billing, abuse attribution and support.
Payment records are retained to reconcile transactions and for financial records.
Prompt/response content is not intentionally stored (see section 2).

Exact retention periods have not yet been defined. TODO: Business/development team to define and document precise retention periods per record type.

7. Security

AI Hub takes reasonable measures to protect information, including:

encrypted HTTPS connections
hashed credentials (passwords and API keys are not stored in plaintext)
API key security controls
access controls
monitoring

AI Hub does not currently hold certifications such as ISO 27001, SOC 2 or PCI DSS.

8. User Rights

You may contact us to request:

access to personal data
correction
account deletion
privacy enquiries

Contact: support@aicampus.my.

9. Malaysia PDPA

AI Hub handles applicable personal data in accordance with the Personal Data Protection Act 2010 (Act 709) and other applicable Malaysian data protection requirements.