Ariyes Connect privacy policy
Last updated: 12 November 2026
This policy explains how Ariyes Online Sdn Bhd ("Ariyes", "we") handles personal data in Ariyes Connect. Ariyes Connect is the service that links the Ariyes products to other services a business chooses to connect, such as Google or Meta.
1 Who we are
- Ariyes Online Sdn Bhd (registration no. 1214463-P)
- SA-13-01, Menara Paragon, Persiaran Bestari, Cyber 11, 63000 Cyberjaya, Selangor, Malaysia
- Privacy contact: connect-support@ariyes.net
For data that a business connects through Ariyes Connect, that business decides what is connected and why. We process the data on the business's instructions to provide the service. For our own account and security records, we're responsible for the data ourselves.
2 What data we handle
| Category | Examples | Source |
|---|---|---|
| Business and user references | The business's identifier in the Ariyes products; the identifier, name or email of the person who connected a service | The Ariyes product you use |
| Connected-account details | The account you connected (for example your Google account email and Google account ID), and the properties, ad accounts or pages you selected | The connected service, when you authorise it |
| Access credentials | OAuth access and refresh tokens, or API keys | The connected service |
| Data from connected services | Only what a feature you use needs. For example: website analytics reports, advertising performance, business-profile information and reviews, messages or leads you choose to route to Ariyes. | The connected service, on request |
| Records of actions | What was requested or done through a connection, by which product, person or AI employee, when, and the result | Generated by Ariyes Connect |
| Technical logs | Request identifiers, timestamps, IP addresses, error codes | Generated by Ariyes Connect |
We don't receive or store the passwords for your connected accounts. This website uses no cookies, analytics or tracking.
3 How we use it
We use the data only to:
- provide the features you or your business requested through the Ariyes products: show reports, carry out actions you've allowed, and deliver events such as new leads or messages
- keep connections working (refreshing access, checking health) and keep them secure (preventing misuse, investigating incidents, keeping audit records)
- meet legal obligations
We do not:
- sell personal data
- use data from connected services for advertising
- use data from connected services to train general-purpose AI models
4 AI employees
If your business uses Ariyes Office AI employees, they may use data from a connected service to carry out a task the business assigned, for example drafting a reply to a review. They use only the connections and permissions the business has granted. Actions that affect your accounts follow the approval rules the business set.
When an AI model provider (currently Anthropic or OpenAI, through their business APIs) processes this data for a task, it does so under terms that don't allow it to use the data to train its models.
5 Data from Google
When you connect a Google service, we request only the access needed for the features you use. The current access is:
- Google account identity (
openid,email), to show and confirm which account is connected - read-only Google Analytics access (
analytics.readonly), to list your properties and produce reports you request
We'll update this section before requesting any additional Google access.
Ariyes Connect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Google user data is:
- used only to provide and improve the user-facing features described here
- not transferred to others except as needed for those features, for security, to comply with law, or as part of a merger or acquisition with notice
- not used for advertising, and not read by people except with your consent, for security or legal reasons, or when aggregated and anonymised for internal operations
6 Data from Meta (Facebook, Instagram, WhatsApp)
When you connect a Meta service, we use the data only for the features you enable, for example advertising reports, page posts and comments, or messages routed to your Ariyes inbox. We follow Meta's Platform Terms. To remove our access and request deletion, see Data deletion.
7 Who we share data with
- The Ariyes products and AI employees your business authorised to use a connection.
- Service providers that run Ariyes Connect for us, under contract:
- hosting and infrastructure in Malaysia
- Cloudflare, which serves this public website
- The connected services themselves, when we act on your instructions (for example sending a reply).
- Authorities, when the law requires it.
8 Where data is stored, and international transfers
Ariyes Connect stores data in Malaysia. Connected services such as Google and Meta process data in their own locations.
When we receive personal data from the European Economic Area or the United Kingdom, we use appropriate safeguards for the transfer, such as Standard Contractual Clauses. When we send personal data outside Malaysia, for example to a connected service at your request, we do so as permitted by section 129 of the Personal Data Protection Act 2010.
9 How long we keep data
| Data | Kept |
|---|---|
| Access credentials | Until you disconnect the service, or it stops working and isn't reconnected within 90 days. Then they're deleted, and we ask the service to revoke them where it supports that. |
| Cached results from connected services | Up to 30 days |
| Records of actions | 13 months, then deleted |
| Security and audit logs | 13 months, then deleted |
| Account and connection details | While your business uses Ariyes, then deleted within 90 days |
10 Security
- Encryption in transit and at rest.
- Credentials are encrypted with keys held in a separate secret service.
- Every business's data is kept apart.
- Access is limited to the people and systems that need it, and is logged.
- If a breach affects your personal data, we'll notify you and the authorities as the law requires.
11 Your choices and rights
- Disconnect a service at any time in the Ariyes product. You can also remove our access in the service itself: for Google, at myaccount.google.com/permissions; for Meta, in your Facebook settings under "Business integrations".
- Access, correct or delete your personal data, or (where the law gives you these rights) object to or restrict its use, or receive a copy. Write to connect-support@ariyes.net. We reply within 21 days.
- Individuals in Malaysia have rights under the Personal Data Protection Act 2010. Individuals in the EU and UK have rights under the GDPR and UK GDPR, including the right to complain to their data protection authority.
If your request concerns data a business connected (for example its customer messages), we'll work with that business, which decides what is connected.
12 Children
Ariyes Connect is a service for businesses. It isn't intended for anyone under 18.
13 Changes
We'll update this page when our practices change and change the date at the top. We'll give notice of material changes in the Ariyes products.
14 Contact
Privacy and support: connect-support@ariyes.net · Ariyes Online Sdn Bhd, SA-13-01, Menara Paragon, Persiaran Bestari, Cyber 11, 63000 Cyberjaya, Selangor, Malaysia