Privacy Policy
Effective date: 1 October 2026 Last updated: 1 October 2026
This Privacy Policy explains how Rectifyq (“Rectifyq”, “we”, “us”, “our”) handles personal data when you visit rectifyq.com and its subdomains (the “Site”) or use any related tool, application or service (together, the “Services”).
Rectifyq is an independent, Malaysia-focused cyber threat intelligence platform. We aim to collect as little personal data as possible.
By using the Services, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.
1. Who We Are
| Service | Rectifyq |
| Website | https://rectifyq.com |
| Jurisdiction | Malaysia |
| Privacy contact | [email protected] |
2. Information We Collect
2.1 Information you provide to us
- Contact information, such as your name and email address, if you email us, subscribe to a newsletter, or submit a form.
- Messages and attachments you send us, for example threat reports, tips, or incident information you choose to share.
2.2 Information collected automatically
When you visit the Site, our hosting and security providers may automatically process:
- IP address, browser type and version, device type and operating system
- Pages visited, referring URL, date and time of access
- Basic security and performance logs
This data is used in aggregate for security, abuse prevention and performance, and is not used to build individual profiles.
2.3 Information received through Google Sign-In / Google APIs
If you choose to sign in with Google or connect a Google account to a Rectifyq feature, we receive only the information covered by the permissions (“scopes”) you approve on the Google consent screen. See Section 5 for details.
2.4 Cookies and similar technologies
The Site uses only the cookies and local storage that are necessary for it to work (for example, security and session cookies, and remembering display preferences). Where we use privacy-respecting analytics, they collect aggregated usage statistics. You can block or delete cookies in your browser settings; parts of the Site may not work correctly if you do.
We do not use advertising cookies and do not sell or share personal data for advertising.
3. How We Use Information
We use personal data only to:
- Provide, operate, secure and improve the Services
- Authenticate you and enable features you have chosen to use
- Respond to your enquiries and support requests
- Send updates or newsletters you have asked to receive (you can unsubscribe at any time)
- Detect, prevent and investigate abuse, fraud and security incidents
- Comply with legal obligations
We do not sell your personal data, and we do not use it for advertising or to train generalised AI/ML models.
4. Legal Basis and Malaysian Law
We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA), as amended, and its Personal Data Protection Principles. Depending on the context, we rely on your consent, the need to perform a service you requested, our legitimate interest in running and securing the Services, or legal obligation.
5. Google User Data
This section applies to any data we access through Google APIs.
5.1 Data accessed
We request access only to the Google user data necessary for the feature you are using. The scopes requested are:
| Scope | What it allows | Why we need it |
|---|---|---|
openid, userinfo.email, userinfo.profile | Your email address, name and profile picture | To identify your account and sign you in |
We do not request broader access than we need. You can see or change what you have granted at any time in your Google Account permissions page: https://myaccount.google.com/permissions
5.2 How we use Google user data
We use Google user data only to provide and improve the user-facing features you requested, as described above. We do not use it for any other purpose.
5.3 Google API Services User Data Policy – Limited Use
Rectifyq’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide or improve user-facing features that are prominent in the Services.
- We do not transfer Google user data to others, except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with prior notice to you.
- We do not use Google user data for serving advertisements, including retargeting, personalised or interest-based advertising.
- We do not allow humans to read Google user data unless we have your affirmative consent for specific items, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymised for internal operations.
- We do not use Google user data to develop, improve or train generalised AI and/or machine learning models.
5.4 Storage, protection and retention
Google user data is stored only as long as necessary to provide the feature, and is protected using encryption in transit (HTTPS/TLS) and access controls. When you disconnect your Google account or ask us to delete your data, we delete the Google user data we hold, except where we must retain it by law.
6. Sharing of Information
We share personal data only in these limited cases:
- Service providers who help us run the Services (such as web hosting, content delivery and security, and email delivery), under obligations to protect the data and use it only for our purposes. These providers may include Cloudflare.
- Legal and safety reasons, where disclosure is required by law or legal process, or necessary to protect rights, safety, or the security of the Services.
- Business transfers, if Rectifyq is involved in a merger, acquisition or sale of assets (we will give notice).
Threat intelligence published on the Site (for example indicators of compromise, threat actor profiles and ransomware claims) concerns organisations and malicious activity, not private individuals’ personal data.
7. International Transfers
Our service providers may process data in countries outside Malaysia. Where this happens, we take reasonable steps to ensure the data remains protected in line with this policy and applicable law.
8. Data Retention
We keep personal data only as long as needed for the purposes in this policy:
- Enquiry emails: generally up to 24 months
- Newsletter subscriptions: until you unsubscribe
- Account or Google sign-in data: until you disconnect or request deletion
- Server and security logs: typically up to 90 days
We may keep data longer where required by law or to resolve disputes.
9. Security
We use reasonable technical and organisational measures to protect personal data, including HTTPS encryption, access restrictions and the principle of least privilege. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will notify affected individuals and authorities as required by law.
10. Your Rights
Under the PDPA and applicable law, you may:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent to processing, including disconnecting Google access
- Request deletion of your data
- Limit the processing of your data
- Opt out of marketing emails
To exercise these rights, email [email protected]. We may need to verify your identity, and we aim to respond within 21 days.
To revoke Rectifyq’s access to your Google account at any time, visit https://myaccount.google.com/permissions and remove Rectifyq.
11. Children’s Privacy
The Services are not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
12. Third-Party Links
The Site may link to external websites, such as sources of threat reports. We are not responsible for their privacy practices; please read their policies.
13. Changes to This Policy
We may update this policy from time to time. The “Last updated” date above shows when it was last revised. Material changes will be highlighted on the Site, and where required we will seek your consent again. Continued use of the Services after changes means you accept the updated policy.
14. Contact Us
Questions or complaints about this policy or our handling of personal data:
Rectifyq Email: [email protected] Website: https://rectifyq.com
If you are not satisfied with our response, you may contact Malaysia’s Personal Data Protection Commissioner (https://www.pdp.gov.my).