1 Introduction & Who We Are
Red Nova IT Solutions ("RedNova", "we", "us" or "our") operates this website (www.rednova.my) and provides AI agent products, integration and automation services for small and medium businesses. We are committed to protecting your privacy and being fully transparent about our data practices.
This policy explains what information we handle, why, and the rights you have over it. It applies to visitors of this website, users of our chatbot Red.Ai, and clients of our services.
Our core principle: we do not collect personal information unless it is necessary and you have been informed. Wherever possible, we design our systems to simply not hold your data.
2 Scope of This Policy
This policy covers:
- This website and its pages (landing page, products, services, support, chat)
- Interactions with our customer-care chatbot, Red.Ai, on the web, WhatsApp and Telegram
- Our integration, automation and AI agent services delivered to business clients
It does not cover third-party websites, platforms or services that we link to or that you use to reach us (for example, WhatsApp or Telegram themselves) — those are governed by their own privacy policies.
3 Our Core Privacy Principles
- Minimal collection — we collect only what we genuinely need
- Consent first — no data collection without your knowledge and agreement
- No selling of data — we never sell, trade or rent personal information
- Transparency — we tell you what we hold and why, in plain language
- Your control — you can access, correct or delete your data at any time
4 Information We Do NOT Collect Automatically
Unlike many websites, we deliberately avoid the following:
- Behavioural tracking of your browsing across pages or sites
- Advertising, remarketing or profiling trackers
- Analytics cookies that fingerprint your device
- Personal data captured by hidden third-party scripts
- Account creation, login credentials or payment details on this website
Our hosting server may record standard technical logs (such as IP address, browser type and access time) for security and operational purposes. These logs are used only to keep the site safe and are not linked to your identity.
5 Information You Choose to Share With Us
We only collect information when you actively provide it, for the purposes described at the point of collection:
When You Contact Us
- Your name and email address, so we can reply
- Your message and any details you choose to include
- Your preferred contact channel, if you state one
When You Become a Client
- Business name, billing details and contact persons
- Technical requirements for integrations (systems, credentials for connected platforms, configuration preferences)
- Project correspondence and support requests
Important: all collection is based on your active consent or a contract with you. We will always explain what we need and why before asking for it.
6 Chatbot & Messaging Interactions (Red.Ai)
Red.Ai is our customer-care AI agent. You can talk to it on this website, or message us through WhatsApp or Telegram. When you do, the following applies:
What We Process
- The content of your messages, so Red.Ai can understand and respond
- Conversation metadata (date, time, channel and session identifiers)
- For WhatsApp/Telegram: your phone number or user handle, as provided by the platform, so we can reply to you
How It Works
- Web chat conversations are handled by our customer-care platform, Chatwoot, so our team can respond and follow up with you
- Automated responses on our messaging channels are processed using our automation platform, n8n
- Conversations may be reviewed by our team to improve accuracy and service quality
Platform Responsibility
When you contact us via WhatsApp or Telegram, those platforms process your data under their own privacy policies and terms. We encourage you to review them. We receive only what is needed to respond to your message.
Please avoid sharing sensitive personal information (such as identity numbers, passwords or financial details) with Red.Ai — it does not need them to help you.
7 How We Use Your Information
We use the information you provide only for the purposes you authorised:
- To respond to your enquiries and provide requested information
- To operate and improve Red.Ai and our other AI agent products
- To deliver, configure and support our services for clients
- To send service updates, where you have opted in
- To keep our systems secure and prevent abuse
- To meet legal, accounting or regulatory obligations
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles.
8 Legal Bases for Processing
Depending on where you are located (for example, under Malaysia's Personal Data Protection Act 2010 or the EU/UK GDPR), we rely on the following legal bases:
- Consent — where you have explicitly agreed, e.g. contacting us or chatting with Red.Ai
- Contract — where processing is necessary to deliver services you engaged us for
- Legitimate interests — such as keeping our services secure and improving them, balanced against your rights
- Legal obligation — where the law requires us to retain or disclose information
9 Cookies & Similar Technologies
This website uses a minimal set of cookies:
- No advertising or marketing cookies
- No cross-site tracking or analytics cookies
- No social media pixels
Only technically essential storage (for example, to remember chat session state or your preferences) may be used, and you can clear it at any time through your browser settings.
10 Service Providers & Data Sharing
We do not sell, trade or rent your personal information to anyone. We share information only in these limited circumstances:
- With your consent — where you explicitly ask us to
- Service providers (processors) — trusted vendors who help us operate, under confidentiality and data-processing obligations. These currently include our hosting provider, our web-chat platform (Chatwoot, operated at crm.goguzi.com), our automation platform (n8n), and messaging platforms (WhatsApp Business, Telegram)
- Professional advisers — where needed for legal, audit or accounting purposes, under duty of confidentiality
- Legal requirements — where disclosure is required by law, regulation or a valid court order
For our business clients: you remain the data controller for personal data processed through the AI agents and integrations we operate for you, and we act as your data processor.
11 International Data Transfers
Some of our service providers process data in other countries, which may have data protection laws different from your own. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as contractual protections required by applicable data protection law.
12 Data Retention
We keep personal information only for as long as needed for the purpose it was collected:
- Chatbot conversations — retained for a limited period to operate, secure and improve the service, then deleted or anonymised
- Enquiries and correspondence — retained for up to 24 months after our last interaction, unless a longer period is needed
- Client project data — retained for the duration of the engagement and any contractual warranty or legal limitation period
- Server security logs — rotated automatically after a short operational period
When data is no longer required, it is securely deleted or irreversibly anonymised.
13 Data Security
We apply appropriate technical and organisational measures to protect your information:
- Encryption of data in transit (TLS/HTTPS) and at rest where supported
- Access controls limiting data to those who need it
- Regular security reviews and dependency updates
- Careful management of credentials and API keys for connected systems
- Minimal storage — we keep only what is necessary
No method of transmission or storage is 100% secure, but we work hard to protect your information and will notify you and the relevant authorities of any breach where the law requires it.
14 Your Privacy Rights
You have the following rights over your personal information (subject to applicable law):
- Access — request a copy of the personal data we hold about you
- Correction — ask us to fix inaccurate or incomplete data
- Erasure — ask us to delete your data where it is no longer needed
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a structured, commonly used format
- Objection — object to processing based on legitimate interests
- Withdraw consent — withdraw any consent you have given, at any time, without affecting the lawfulness of earlier processing
- Complain — lodge a complaint with your local data protection authority
To exercise any of these rights, email us at
privacy@rednova.my. We will respond within a reasonable timeframe required by law and will never penalise you for asking.
15 Children's Privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
16 Third-Party Links
Our website may contain links to third-party websites or services (such as messaging platforms or partner sites). We are not responsible for the privacy practices of those third parties and encourage you to read their privacy policies before providing them with any information.
17 Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will:
- Update the "Last updated" date on this page
- Post a notice on our website for significant changes
- Notify existing clients directly where the changes materially affect them
We encourage you to review this page periodically. Continued use of the website after an update constitutes acceptance of the revised policy.
18 Contact Us
If you have questions about this policy, your personal data, or wish to exercise your rights, contact our data protection team:
CompanyRed Nova IT Solutions
Our commitment: "At Red Nova IT Solutions, we believe privacy is a fundamental right. We are committed to being transparent about our data practices and respecting your privacy choices."
Last updated: October 24, 2026