Privacy Policy

Information we may collect

Depending on how you use MediaDesk, we may collect:

• name;
• email address;
• company or organisation;
• account information;
• authentication information;
• websites or domains submitted for analysis;
• questions submitted to MediaDesk;
• competitors selected by users;
• reports and monitoring configuration;
• subscription and transaction information;
• communications with us;
• email delivery and engagement events, as described below;
• IP address;
• browser and device information;
• usage information;
• security and technical logs; and
• other information voluntarily supplied to us.

Payment card information may be processed directly by our payment provider rather than stored by MediaDesk.

Public website information

When a website or domain is submitted to MediaDesk, the service may read publicly accessible pages from that website to identify its category, products, services and other information relevant to generating buyer questions and reports.

MediaDesk does not treat submission of a publicly accessible website as permission to access private or restricted areas of that website.

Purposes of processing

We may process information to:

• provide MediaDesk;
• authenticate users;
• generate AI visibility reports;
• monitor selected questions;
• compare results over time;
• process subscriptions;
• provide customer support;
• communicate service information;
• maintain security;
• prevent misuse;
• troubleshoot problems;
• analyse and improve MediaDesk;
• comply with legal obligations; and
• establish, exercise or defend legal rights.

AI providers

To provide AI visibility analysis, questions or prompts may be submitted to supported third-party AI services.

Users should therefore avoid placing confidential personal information, sensitive information or unnecessary personal data inside questions submitted for AI analysis.

Service providers

We may use service providers for functions such as:

• cloud hosting;
• databases;
• authentication;
• email delivery;
• payment processing;
• analytics;
• error monitoring; and
• AI processing.

These providers may process information as necessary to perform services for us.

Disclosure

We do not sell personal data.

Information may be disclosed:

• to service providers supporting MediaDesk;
• where required by law;
• to protect our legal rights or users;
• in connection with a corporate restructuring, acquisition or sale, subject to applicable law; or
• where you authorise the disclosure.

International processing

Some technology providers used by MediaDesk may operate outside Malaysia.

Accordingly, information may be processed or stored outside Malaysia where permitted under applicable law.

Where required, Bhumi Solutions will take reasonable steps to ensure appropriate safeguards apply to cross-border processing.

Data security

We use reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet-based service can guarantee absolute security.

Retention

We retain personal data for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business and accounting records, resolving disputes, enforcing agreements and complying with legal obligations.

Information that is no longer reasonably required will be deleted, anonymised or otherwise handled in accordance with applicable requirements.

Cookies and analytics

We use cookies to keep you signed in and to keep the website secure. Without them the website does not work, so they cannot be switched off.

We also measure how people use the website in two ways.

Vercel Web Analytics counts page views. It sets no cookies. It records the page, the referring page, your approximate location (country, region, city), browser, operating system and device type, and tells repeat views apart with a code worked out from your request that is discarded after 24 hours. We see totals, not individual visitors.

An anonymous visitor id (a cookie named md_anon) holds a random code, kept for up to a year. It lets us see whether the people who run a free check are the people who later sign up or subscribe. If you create an account, the steps you took before signing up on that browser are linked to your account. We do not share or sell it, and it is not used for advertising.

We do not set the visitor id if your browser sends Global Privacy Control, or if you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland.

Communications

We may send transactional communications relating to accounts, reports, subscriptions, security and operation of MediaDesk.

Marketing communications, where sent, should provide an appropriate method to unsubscribe.

Our email provider reports delivery events back to us, and we record them against the account the message was sent to. These events are: that a message was sent, that it was delivered, that delivery was delayed or failed, that it was reported as unwanted, and — where the measurement described below is enabled — that it was opened or that a link in it was followed.

We use these events for two purposes. The first is to know whether a report we are contracted to send actually arrived and was read, because for some plans the emailed report is the product rather than a notification about it. The second is to stop sending to addresses that reject our mail or report it as unwanted, which protects delivery for everyone else.

Open measurement works by including a small image in the message, which records that the message was displayed when your email client loads it. Click measurement, where enabled, works by routing links in the message through a MediaDesk subdomain operated on our behalf by our email provider, which records the click and then sends you on to the address shown. We do not scan the content of your replies, and we do not use these events to build a profile of you beyond the account the message was sent to.

You can prevent open measurement by setting your email client not to load remote images. Some email providers load those images automatically on your behalf, which means an open we record may not represent a person having read the message.

Your rights

Subject to applicable Malaysian law, you may have rights relating to personal data held about you, including rights to request access or correction and other rights provided under applicable data protection legislation.

Requests may be submitted to hello@mediadesk.asia.

We may need to verify identity before processing certain requests.

Children

MediaDesk is intended for business and professional users and is not designed for children.

Changes

We may update this Privacy Policy to reflect changes in MediaDesk, our providers or applicable requirements.

The latest version will be published on mediadesk.asia with the applicable last-updated date.

Contact

Privacy enquiries or complaints may be directed to: