Privacy notice

Who we are

Kohre AI is an AI automation practice based in the Klang Valley, Malaysia, founded by Cheng Hong Koh. For anything in this notice, write to hello@kohreai.com.

What we collect

• What you give us. Your email address, and — if you choose to fill them in — your team size, the country or region you're based in, and a short description of the workflow you'd like help with. That's the whole form.
• Booking details. If you book an audit, our scheduling provider (Calendly) collects your name, email and chosen time, under its own privacy terms.
• Client data during a project. To build an automation we may need access to your systems and to sample records. That access is scoped to what the build requires, agreed in writing first, and revoked on handover.
• Basic site analytics. Aggregate page views and referrers, with no advertising or cross-site tracking cookies.

Why we hold it

To reply to your enquiry, run your audit, prepare a quote, deliver and support the work, and meet our own accounting and tax obligations. We may send you occasional practical notes about automation — every one of them has a one-click unsubscribe, and we don't sell, rent or share your details with advertisers.

AI models and your data

Your business data is never used to train external AI models. Where an automation we build calls a third-party model, we use accounts and settings configured so submitted content is excluded from provider training, and we tell you which providers are in the chain before anything goes live.

Who else sees it

Only the service providers we need to operate: email and file hosting, our scheduling tool, and — during a project — the platforms your automation runs on. Each is bound by its own data-processing terms. Some are outside Malaysia, so your information may be processed abroad under equivalent protections. We disclose information to anyone else only where the law requires it.

How long we keep it

Enquiries that don't become projects: up to 24 months, then deleted. Project records: seven years, as required for accounting. Access credentials: revoked at handover. Ask us to delete your details sooner and we will, unless we're legally required to keep them.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct or delete it, or withdraw consent to marketing at any time. Email hello@kohreai.com and we'll respond within 21 days. This notice is written to meet Malaysia's Personal Data Protection Act 2010; if you're in the UK, EU or another jurisdiction with equivalent law, we'll honour the same rights under it.

Security

Data is encrypted in transit and at rest, access is limited to the people doing the work, and credentials are stored in a password manager with two-factor authentication. No system is perfect; if a breach affects you, we'll tell you and the regulator without delay.

Changes

If we change this notice we'll update the date above. Material changes for active clients are sent by email.