Privacy Policy

1.1This Privacy Policy comprises all Services from UNIVRSE INTERACTIVE SDN. BHD. (the “Company”, “we”, “our”, “us”) to the Customers. It describes our processing of Personal Data as a Data Controller connected to the Customer’s subscription to our Services or a free trial period.

1.2Our processing of Personal Data on behalf of Customers, as Data Processor, is regulated by the Data Processing Agreement entered upon the Customer’s subscription to the Services or a free trial period.

1.3Protecting your Personal Data is our highest priority regardless of whether such Personal Data relates to your use of our Services, website, or other correspondence between you and the Company.

2.1“Company”, “we”, “our”, “us” — UNIVRSE INTERACTIVE SDN. BHD., a company incorporated in Malaysia.

2.2“Customer”, “you”, “yours” — a free trial user or subscriber of Services provided by the Company.

2.3“Data Controller” and “Data Processor” — “controller” and “processor” respectively as defined in the GDPR.

2.4“GDPR” — the General Data Protection Regulation (EU Regulation 2016/679).

2.5“Personal Data” — any information relating to an identified or identifiable natural person.

2.6“Services” — all services rendered by the Company to the Customer, including services located at univrse.io and our mobile, VR applications, and other tools developed by the Company.

2.7“Terms of Service” — the Company’s Terms available at univrse.io.

3.1This Privacy Policy describes our processing of Personal Data as Data Controller in relation to Customer subscriptions or free trials. For all Personal Data entered, transferred, or stored on behalf of the Customer in our databases or a third-party supplier appointed by us, the Customer is the Data Controller and the Company is the Data Processor.

3.2Our processing of Personal Data as Data Processor is regulated by the Data Processing Agreement entered into upon the Customer’s subscription.

4.1If you sign up for our Services or a free trial, we may collect:

• Contact information (email address, phone number, first and last name)
• Usernames and IP addresses
• Company information
• Payment information (if subscribing to a paid plan)
• Cookies and usage data
• Voice data and VR/AR tracking data required to operate our VR applications

4.2Voice data is transmitted securely to enable communication. It may be recorded only when you explicitly request it.

4.3VR/AR Tracking Data is used to position your avatar within immersive environments. It may be stored only when you request functionality that requires recording.

4.4We do not process sensitive Personal Data unless it is strictly necessary for the delivery of our Services.

5.1We process Personal Data to:

• Provide, maintain, and improve our Services
• Notify you about changes to our Services
• Monitor platform performance and diagnose technical issues
• Contact you for product feedback and support
• Provide marketing communications (with your consent)
• Comply with applicable legal obligations
• Prevent fraud, abuse, or misuse of our Services
• Handle and resolve legal claims

5.2Our legal basis for processing includes contractual necessity, legitimate interest, your explicit consent, and compliance with legal obligations.

6.1Personal Data is stored in secure data centres, including infrastructure provided by Google Cloud.

6.2Transfers of Personal Data outside the EU/EEA occur only where adequate protections are in place, including standard contractual clauses or equivalent safeguards.

6.3We take all reasonable steps to ensure your data is handled securely and in accordance with applicable law wherever it is processed.

8.1We store Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law.

8.2Typically, Customer Personal Data is retained for up to 3 years following termination of the Customer relationship. Payment-related data is retained for 5 years plus the current calendar year to comply with applicable accounting and tax laws.