Dotify — Privacy Policy

Last updated: 3 August 2026 · Controller: Trusplus Sdn Bhd (Malaysia). Contact: amir@trusplus.my.

1. What we collect

Account data: email address (login is passwordless via one-time codes). Content you upload: product photos, reference images, voice recordings, audio tracks, and the ideas/scripts you enter. Generated content: videos, scripts, voiceovers and images created for you. Billing data: subscription and credit transactions (payments are processed by SecurePay/FPX and card providers — we never see or store full card or bank credentials). Technical data: basic logs needed to run and secure the service.

2. How we use it

Solely to provide Dotify: generating your content, operating your account and credits, processing payments, support, and preventing abuse. We do not sell personal data and we do not use your content to train our own AI models.

3. AI processing

To generate content, your inputs (e.g. product photos, scripts, voice samples) are transmitted to our AI processing partners — video/image engines (BytePlus), language models (Anthropic, OpenAI) and voice/audio models (ElevenLabs) — strictly to perform the generation you requested. Voice clones created from your recordings are deleted from the voice provider immediately after each render.

4. Connected accounts (e.g. TikTok)

If you connect a third-party account, we store the authorization tokens needed to perform the actions you initiate (such as sending a video you choose to your own TikTok drafts). We access only the data listed on the consent screen (e.g. your display name), never your private messages or followers, and we never post without your action. Disconnecting removes the tokens immediately. Data obtained from TikTok is used only to provide these features and is never sold or shared.

5. Retention & deletion

Your content and videos are kept while your account is active so you can reuse them. You can delete assets and videos in-app at any time; deleting your account removes your personal data and content within 30 days, except records we must keep for legal/accounting reasons. Cloud copies of assets sent to AI engines during a render are deleted after the render.

6. Security

Data is stored on secured servers (EU-hosted infrastructure) with encrypted transport, access controls, and audit logging of administrative actions.

7. Your rights

Under Malaysia's PDPA (and equivalent laws), you may request access, correction, or deletion of your personal data, and withdraw consent, by emailing amir@trusplus.my.

8. Changes

We will notify material changes in-app or by email. Continued use after changes means acceptance.