AX Frame data processing addendum

This addendum is for business customers. It sets out how REKA Inisiatif Sdn Bhd (company registration 1244206-A / 201701030037), "REKA", handles personal data that a customer puts into AX Frame. It forms part of the terms of service between the customer and REKA.

1. Roles

For the personal data covered by this addendum, the customer is the data controller (or, if it is itself a processor, acts for its controller) and REKA is the data processor. This covers the information you enter about your own infrastructure, and the names and email addresses of the people you invite to your workspace.

For the customer's account and sign-in details, and for running and securing the service, REKA decides why and how the data is used and acts as a controller. The privacy notice describes that.

2. What REKA does

REKA processes the covered personal data only to provide AX Frame to the customer, on the customer's documented instructions, which are the terms of service, this addendum and the customer's use of the product's features. REKA tells the customer if it believes an instruction would break the law.

3. The customer's responsibilities

The customer is responsible for having the right to put personal data into AX Frame, for giving any notices and obtaining any consents its own use requires, and for the accuracy of what it enters.

4. Confidentiality

REKA limits access to the covered personal data to people who need it to provide the service and who are bound to keep it confidential.

5. Security

REKA applies reasonable technical and organisational measures appropriate to the data, to protect it from loss, misuse, unauthorised access, disclosure, alteration or destruction. Access to each customer's data is separated from other customers' data.

6. Subprocessors

The customer agrees that REKA may use the subprocessors listed on the subprocessor list. REKA requires each to protect the data it receives and to use it only to provide its service to REKA. REKA updates the list, with a new version and effective date, before a new subprocessor starts processing covered personal data, and a customer may object by writing to support@go.antarax.ai.

7. Processing outside Malaysia

Some subprocessors process data outside Malaysia. AX Frame stores its data with Supabase, outside Malaysia. Where the PDPA applies to an overseas transfer, REKA will make sure an applicable condition under section 129 is met before data is transferred.

8. Helping the customer

REKA will give the customer reasonable help to respond to requests from people exercising their rights over covered personal data. The product's export and delete features are the usual way to do this. If a person contacts REKA directly about data held for a customer, REKA will refer them to the customer where appropriate.

9. Personal data breaches

If REKA becomes aware of a personal data breach affecting the customer's covered personal data, it will tell the customer without undue delay and give the information it has to help the customer meet its own obligations.

10. Return and deletion

During the term, the customer can export its data using the product's export features. When the customer's account is closed, its workspace data is deleted within 30 days, except where the law requires REKA to keep something.

11. Information

On reasonable written request, REKA will give the customer the information needed to show that it is meeting this addendum.

12. Governing law

This addendum is governed by the laws of Malaysia.

Contact

support@go.antarax.ai · REKA Inisiatif Sdn Bhd, 26A, 1/42 Taman City, Off Jalan Kuching, 51200 Kuala Lumpur, WPKL, Malaysia.