Privacy Policy
EFFECTIVE 11 SEPTEMBER 2026
EFFECTIVE 11 SEPTEMBER 2026
EFFECTIVE 11 SEPTEMBER 2026
This Policy explains how EAGL LABS AI SDN. BHD. collects, uses, shares and protects personal data when you use Eagl. It applies to www.eaglpro.com, app.eaglpro.com and related Eagl services.
Eagl processes the information needed to operate accounts, accept and process source material, generate transcripts and Blueprints, manage subscriptions and credits, provide support and keep the service secure. We do not ask for identity documents or sensitive profile information when you create an account, and we do not receive or store complete payment card details.
1 Who we are
EAGL LABS AI SDN. BHD. (Company No. 202601000676 (1662774-W)) is the data controller responsible for the personal data described in this Policy. References to “Eagl”, “we”, “us” or “our” mean this company.
2 Personal data we collect
[ Account and identity data ]
Your first name, last name and email address.
A securely stored password credential or password hash when you register with an email address. We do not store your password in readable form.
An optional profile photograph.
If you sign in through a third-party identity provider, the account identifier and profile information that the provider makes available to Eagl, such as your name and email address.
[ User Content ]
We process material that you submit to Eagl, including audio or video files, text, URLs, transcripts, prompts, instructions and the Blueprints or other outputs created from that material. We call this “User Content”. User Content may contain personal data about you or other people.
Eagl’s systems and authorised service providers automatically process User Content to provide the service. Administrators of customer organisation accounts and Eagl’s general staff cannot access User Content. Access is restricted to authorised technical administrators where necessary to operate, secure, maintain or support the service, comply with legal obligations, or fulfil deletion requests.
[ Subscription payment and credit data ]
Your plan, subscription status, credit balance, transaction references and limited billing information.
Payment details are processed by a third-party payment processor. Eagl does not receive or store your complete card number, card security code or full bank account credentials.
[ Technical and usage data ]
Internet Protocol address, browser and device information, operating system, login times and security logs.
Service events such as feature interactions, processing status, error records, credit deductions and aggregate usage counts.
Cookies and similar technologies used for authentication, preferences, security, session management and load balancing.
[ Communications ]
We collect information you give us when you contact support, report a problem, respond to a survey or otherwise communicate with Eagl.
[ Information we do not request as account data ]
Eagl does not ask you to provide identification card or passport numbers, race, religion, health information, marital status or similar sensitive information as part of account registration. User Content may nevertheless contain these details. You should submit sensitive or third-party personal data only when you are authorised to do so.
3 How we collect personal data
We collect personal data:
directly from you when you register, upload or submit material, make a purchase or contact us;
from a third-party identity provider when you use its sign-in service;
from an organisation administrator when they invite you to or manage an organisation account; and
automatically from your browser, device and use of the service.
4 How we use personal data
We use personal data to:
create, authenticate, secure and administer your account;
receive and process User Content, create transcripts and Blueprints, and deliver the features you request;
manage subscriptions, payments, credits and organisation accounts;
provide customer support and send service messages, including security, billing and material product notices;
detect, investigate and prevent fraud, misuse, security incidents and technical failures;
measure and improve the reliability, performance and usability of Eagl, including through aggregate or de-identified information;
enforce our Terms of Service, establish or defend legal claims, and comply with applicable law; and
send Eagl marketing communications where permitted. You may unsubscribe at any time without affecting essential service messages.
Eagl uses automated systems, including artificial intelligence, to transcribe and transform User Content into the outputs you request. Eagl does not use this processing to make decisions that produce legal or similarly significant effects about you.
We do not use User Content to train Eagl’s general-purpose artificial intelligence models. Our service providers may process User Content only to deliver their contracted services to Eagl, subject to their applicable contractual and security commitments.
5 Organisation accounts
If you join an organisation account, its administrators can see your member email address. They can assign or revoke administrator roles, allocate credits and revoke access to the organisation’s credits. Organisation administrators cannot see your User Content, transcripts, Blueprints, processing activity or individual credit usage through Eagl’s organisation controls.
If your use of Eagl is provided by an employer, university or other organisation, that organisation may have its own policies and responsibilities for personal data it collects outside Eagl. You should contact the organisation about those separate practices.
6 When we share personal data
We do not sell personal data. We may disclose the data needed for the purposes in this Policy to:
cloud hosting, data-storage and speech-to-text providers;
artificial-intelligence processing providers;
payment and billing processors;
identity and authentication providers;
professional advisers, auditors, insurers and contractors who need the information to provide services to us and are subject to appropriate confidentiality duties;
courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a buyer, investor or successor in connection with a proposed or completed merger, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality and data-protection arrangements.
These providers process different categories of data depending on the function they perform. We limit disclosures to what is reasonably necessary for that function.
7 Processing outside Malaysia
Some of our service providers operate infrastructure or support services outside Malaysia. Personal data may therefore be transferred to or processed in other countries. Where this occurs, Eagl takes reasonable steps required by Malaysian law to ensure that the transfer is permitted and that the data receives an appropriate level of protection. These steps may include contractual safeguards, security reviews and limits on the provider’s use of the data.
8 Cookies and similar technologies
Eagl uses cookies and similar technologies that are needed to keep you signed in, remember preferences, protect accounts, manage sessions and balance service traffic. We do not use cookies to store your password in readable form.
You can control cookies through your browser. Blocking cookies that are essential to authentication or security may prevent parts of Eagl from working correctly. Eagl does not currently use third-party advertising cookies or advertising pixels in the service.
9 Data retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, to operate the service, to comply with law, or to resolve disputes and enforce agreements. The period depends on the type of data and why we hold it.
Account data is generally kept while your account remains active.
User Content is generally kept until you delete it or close your account, subject to limited backup retention and any legal need to preserve particular records.
Payment and transaction records may be retained for accounting, tax, fraud-prevention and legal requirements.
Security logs, error records and support communications are retained for a period reasonably necessary to protect and support the service.
When data is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible. Account deletion requires removal across our identity and cloud systems. We aim to complete a verified deletion request within 30 days. Copies in backups may remain for a limited period before they are overwritten in the ordinary backup cycle.
10 Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include access restrictions, authentication controls, monitoring and safeguards provided by our hosting and payment providers.
No internet service can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect unauthorised access to your account.
11 Your choices and rights
Subject to the Personal Data Protection Act 2010 and other applicable Malaysian law, you may:
ask whether we hold personal data about you and request access to it;
ask us to correct personal data that is inaccurate, incomplete, misleading or out of date;
withdraw consent where our processing depends on consent;
ask us to stop or limit processing in circumstances provided by law, including direct marketing;
request data portability where that right applies; and
raise a question or complaint about our handling of your personal data.
To make a request, email privacy@eaglpro.com. We may ask for information needed to verify your identity and may refuse or limit a request where Malaysian law permits. Withdrawing consent does not affect processing already carried out lawfully, and it may mean that we can no longer provide some or all of the service.
12 Age requirements
You must be at least 16 years old to use Eagl. If you are 16 or 17, you may use Eagl only with the approval of your parent or legal guardian. Eagl is not intended for anyone under 16. If we learn that we collected personal data from a person under 16, we will take reasonable steps to delete it. A parent or guardian who believes that a child has provided data to Eagl should contact privacy@eaglpro.com.
13 Personal data about other people
Before submitting User Content that contains another person’s personal data, voice, image or communications, you must have the right to do so. This includes obtaining any notice, consent or other permission required to record, upload, transcribe or process the material. You must not use Eagl to process personal data unlawfully.
14 Third party links and services
Eagl may contain links to websites or services that we do not control. Their privacy practices are governed by their own notices. This Policy does not cover personal data that you provide directly to those third parties outside Eagl.
15 Data breaches
If we become aware of a personal data breach, we will assess and contain it, take reasonable steps to reduce harm, document our response and notify the Personal Data Protection Commissioner and affected individuals where required by Malaysian law. Any notice to affected individuals will describe the incident and the practical steps they should take, to the extent appropriate and lawful.
16 Changes to this Policy
We may update this Policy when our service, providers or legal obligations change. We will publish the revised version on our website and change the effective date above. If a change materially affects how we handle personal data, we will provide an appropriate additional notice.
17 Contact us
Questions, requests and complaints may be sent to:
EAGL LABS AI SDN. BHD.
Company No. 202601000676 (1662774-W)
privacy@eaglpro.com
You may also contact or lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the Commissioner’s official website at www.pdp.gov.my.
This Policy explains how EAGL LABS AI SDN. BHD. collects, uses, shares and protects personal data when you use Eagl. It applies to www.eaglpro.com, app.eaglpro.com and related Eagl services.
Eagl processes the information needed to operate accounts, accept and process source material, generate transcripts and Blueprints, manage subscriptions and credits, provide support and keep the service secure. We do not ask for identity documents or sensitive profile information when you create an account, and we do not receive or store complete payment card details.
1 Who we are
EAGL LABS AI SDN. BHD. (Company No. 202601000676 (1662774-W)) is the data controller responsible for the personal data described in this Policy. References to “Eagl”, “we”, “us” or “our” mean this company.
2 Personal data we collect
[ Account and identity data ]
Your first name, last name and email address.
A securely stored password credential or password hash when you register with an email address. We do not store your password in readable form.
An optional profile photograph.
If you sign in through a third-party identity provider, the account identifier and profile information that the provider makes available to Eagl, such as your name and email address.
[ User Content ]
We process material that you submit to Eagl, including audio or video files, text, URLs, transcripts, prompts, instructions and the Blueprints or other outputs created from that material. We call this “User Content”. User Content may contain personal data about you or other people.
Eagl’s systems and authorised service providers automatically process User Content to provide the service. Administrators of customer organisation accounts and Eagl’s general staff cannot access User Content. Access is restricted to authorised technical administrators where necessary to operate, secure, maintain or support the service, comply with legal obligations, or fulfil deletion requests.
[ Subscription payment and credit data ]
Your plan, subscription status, credit balance, transaction references and limited billing information.
Payment details are processed by a third-party payment processor. Eagl does not receive or store your complete card number, card security code or full bank account credentials.
[ Technical and usage data ]
Internet Protocol address, browser and device information, operating system, login times and security logs.
Service events such as feature interactions, processing status, error records, credit deductions and aggregate usage counts.
Cookies and similar technologies used for authentication, preferences, security, session management and load balancing.
[ Communications ]
We collect information you give us when you contact support, report a problem, respond to a survey or otherwise communicate with Eagl.
[ Information we do not request as account data ]
Eagl does not ask you to provide identification card or passport numbers, race, religion, health information, marital status or similar sensitive information as part of account registration. User Content may nevertheless contain these details. You should submit sensitive or third-party personal data only when you are authorised to do so.
3 How we collect personal data
We collect personal data:
directly from you when you register, upload or submit material, make a purchase or contact us;
from a third-party identity provider when you use its sign-in service;
from an organisation administrator when they invite you to or manage an organisation account; and
automatically from your browser, device and use of the service.
4 How we use personal data
We use personal data to:
create, authenticate, secure and administer your account;
receive and process User Content, create transcripts and Blueprints, and deliver the features you request;
manage subscriptions, payments, credits and organisation accounts;
provide customer support and send service messages, including security, billing and material product notices;
detect, investigate and prevent fraud, misuse, security incidents and technical failures;
measure and improve the reliability, performance and usability of Eagl, including through aggregate or de-identified information;
enforce our Terms of Service, establish or defend legal claims, and comply with applicable law; and
send Eagl marketing communications where permitted. You may unsubscribe at any time without affecting essential service messages.
Eagl uses automated systems, including artificial intelligence, to transcribe and transform User Content into the outputs you request. Eagl does not use this processing to make decisions that produce legal or similarly significant effects about you.
We do not use User Content to train Eagl’s general-purpose artificial intelligence models. Our service providers may process User Content only to deliver their contracted services to Eagl, subject to their applicable contractual and security commitments.
5 Organisation accounts
If you join an organisation account, its administrators can see your member email address. They can assign or revoke administrator roles, allocate credits and revoke access to the organisation’s credits. Organisation administrators cannot see your User Content, transcripts, Blueprints, processing activity or individual credit usage through Eagl’s organisation controls.
If your use of Eagl is provided by an employer, university or other organisation, that organisation may have its own policies and responsibilities for personal data it collects outside Eagl. You should contact the organisation about those separate practices.
6 When we share personal data
We do not sell personal data. We may disclose the data needed for the purposes in this Policy to:
cloud hosting, data-storage and speech-to-text providers;
artificial-intelligence processing providers;
payment and billing processors;
identity and authentication providers;
professional advisers, auditors, insurers and contractors who need the information to provide services to us and are subject to appropriate confidentiality duties;
courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a buyer, investor or successor in connection with a proposed or completed merger, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality and data-protection arrangements.
These providers process different categories of data depending on the function they perform. We limit disclosures to what is reasonably necessary for that function.
7 Processing outside Malaysia
Some of our service providers operate infrastructure or support services outside Malaysia. Personal data may therefore be transferred to or processed in other countries. Where this occurs, Eagl takes reasonable steps required by Malaysian law to ensure that the transfer is permitted and that the data receives an appropriate level of protection. These steps may include contractual safeguards, security reviews and limits on the provider’s use of the data.
8 Cookies and similar technologies
Eagl uses cookies and similar technologies that are needed to keep you signed in, remember preferences, protect accounts, manage sessions and balance service traffic. We do not use cookies to store your password in readable form.
You can control cookies through your browser. Blocking cookies that are essential to authentication or security may prevent parts of Eagl from working correctly. Eagl does not currently use third-party advertising cookies or advertising pixels in the service.
9 Data retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, to operate the service, to comply with law, or to resolve disputes and enforce agreements. The period depends on the type of data and why we hold it.
Account data is generally kept while your account remains active.
User Content is generally kept until you delete it or close your account, subject to limited backup retention and any legal need to preserve particular records.
Payment and transaction records may be retained for accounting, tax, fraud-prevention and legal requirements.
Security logs, error records and support communications are retained for a period reasonably necessary to protect and support the service.
When data is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible. Account deletion requires removal across our identity and cloud systems. We aim to complete a verified deletion request within 30 days. Copies in backups may remain for a limited period before they are overwritten in the ordinary backup cycle.
10 Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include access restrictions, authentication controls, monitoring and safeguards provided by our hosting and payment providers.
No internet service can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect unauthorised access to your account.
11 Your choices and rights
Subject to the Personal Data Protection Act 2010 and other applicable Malaysian law, you may:
ask whether we hold personal data about you and request access to it;
ask us to correct personal data that is inaccurate, incomplete, misleading or out of date;
withdraw consent where our processing depends on consent;
ask us to stop or limit processing in circumstances provided by law, including direct marketing;
request data portability where that right applies; and
raise a question or complaint about our handling of your personal data.
To make a request, email privacy@eaglpro.com. We may ask for information needed to verify your identity and may refuse or limit a request where Malaysian law permits. Withdrawing consent does not affect processing already carried out lawfully, and it may mean that we can no longer provide some or all of the service.
12 Age requirements
You must be at least 16 years old to use Eagl. If you are 16 or 17, you may use Eagl only with the approval of your parent or legal guardian. Eagl is not intended for anyone under 16. If we learn that we collected personal data from a person under 16, we will take reasonable steps to delete it. A parent or guardian who believes that a child has provided data to Eagl should contact privacy@eaglpro.com.
13 Personal data about other people
Before submitting User Content that contains another person’s personal data, voice, image or communications, you must have the right to do so. This includes obtaining any notice, consent or other permission required to record, upload, transcribe or process the material. You must not use Eagl to process personal data unlawfully.
14 Third party links and services
Eagl may contain links to websites or services that we do not control. Their privacy practices are governed by their own notices. This Policy does not cover personal data that you provide directly to those third parties outside Eagl.
15 Data breaches
If we become aware of a personal data breach, we will assess and contain it, take reasonable steps to reduce harm, document our response and notify the Personal Data Protection Commissioner and affected individuals where required by Malaysian law. Any notice to affected individuals will describe the incident and the practical steps they should take, to the extent appropriate and lawful.
16 Changes to this Policy
We may update this Policy when our service, providers or legal obligations change. We will publish the revised version on our website and change the effective date above. If a change materially affects how we handle personal data, we will provide an appropriate additional notice.
17 Contact us
Questions, requests and complaints may be sent to:
EAGL LABS AI SDN. BHD.
Company No. 202601000676 (1662774-W)
privacy@eaglpro.com
You may also contact or lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the Commissioner’s official website at www.pdp.gov.my.
This Policy explains how EAGL LABS AI SDN. BHD. collects, uses, shares and protects personal data when you use Eagl. It applies to www.eaglpro.com, app.eaglpro.com and related Eagl services.
Eagl processes the information needed to operate accounts, accept and process source material, generate transcripts and Blueprints, manage subscriptions and credits, provide support and keep the service secure. We do not ask for identity documents or sensitive profile information when you create an account, and we do not receive or store complete payment card details.
1 Who we are
EAGL LABS AI SDN. BHD. (Company No. 202601000676 (1662774-W)) is the data controller responsible for the personal data described in this Policy. References to “Eagl”, “we”, “us” or “our” mean this company.
2 Personal data we collect
[ Account and identity data ]
Your first name, last name and email address.
A securely stored password credential or password hash when you register with an email address. We do not store your password in readable form.
An optional profile photograph.
If you sign in through a third-party identity provider, the account identifier and profile information that the provider makes available to Eagl, such as your name and email address.
[ User Content ]
We process material that you submit to Eagl, including audio or video files, text, URLs, transcripts, prompts, instructions and the Blueprints or other outputs created from that material. We call this “User Content”. User Content may contain personal data about you or other people.
Eagl’s systems and authorised service providers automatically process User Content to provide the service. Administrators of customer organisation accounts and Eagl’s general staff cannot access User Content. Access is restricted to authorised technical administrators where necessary to operate, secure, maintain or support the service, comply with legal obligations, or fulfil deletion requests.
[ Subscription payment and credit data ]
Your plan, subscription status, credit balance, transaction references and limited billing information.
Payment details are processed by a third-party payment processor. Eagl does not receive or store your complete card number, card security code or full bank account credentials.
[ Technical and usage data ]
Internet Protocol address, browser and device information, operating system, login times and security logs.
Service events such as feature interactions, processing status, error records, credit deductions and aggregate usage counts.
Cookies and similar technologies used for authentication, preferences, security, session management and load balancing.
[ Communications ]
We collect information you give us when you contact support, report a problem, respond to a survey or otherwise communicate with Eagl.
[ Information we do not request as account data ]
Eagl does not ask you to provide identification card or passport numbers, race, religion, health information, marital status or similar sensitive information as part of account registration. User Content may nevertheless contain these details. You should submit sensitive or third-party personal data only when you are authorised to do so.
3 How we collect personal data
We collect personal data:
directly from you when you register, upload or submit material, make a purchase or contact us;
from a third-party identity provider when you use its sign-in service;
from an organisation administrator when they invite you to or manage an organisation account; and
automatically from your browser, device and use of the service.
4 How we use personal data
We use personal data to:
create, authenticate, secure and administer your account;
receive and process User Content, create transcripts and Blueprints, and deliver the features you request;
manage subscriptions, payments, credits and organisation accounts;
provide customer support and send service messages, including security, billing and material product notices;
detect, investigate and prevent fraud, misuse, security incidents and technical failures;
measure and improve the reliability, performance and usability of Eagl, including through aggregate or de-identified information;
enforce our Terms of Service, establish or defend legal claims, and comply with applicable law; and
send Eagl marketing communications where permitted. You may unsubscribe at any time without affecting essential service messages.
Eagl uses automated systems, including artificial intelligence, to transcribe and transform User Content into the outputs you request. Eagl does not use this processing to make decisions that produce legal or similarly significant effects about you.
We do not use User Content to train Eagl’s general-purpose artificial intelligence models. Our service providers may process User Content only to deliver their contracted services to Eagl, subject to their applicable contractual and security commitments.
5 Organisation accounts
If you join an organisation account, its administrators can see your member email address. They can assign or revoke administrator roles, allocate credits and revoke access to the organisation’s credits. Organisation administrators cannot see your User Content, transcripts, Blueprints, processing activity or individual credit usage through Eagl’s organisation controls.
If your use of Eagl is provided by an employer, university or other organisation, that organisation may have its own policies and responsibilities for personal data it collects outside Eagl. You should contact the organisation about those separate practices.
6 When we share personal data
We do not sell personal data. We may disclose the data needed for the purposes in this Policy to:
cloud hosting, data-storage and speech-to-text providers;
artificial-intelligence processing providers;
payment and billing processors;
identity and authentication providers;
professional advisers, auditors, insurers and contractors who need the information to provide services to us and are subject to appropriate confidentiality duties;
courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a buyer, investor or successor in connection with a proposed or completed merger, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality and data-protection arrangements.
These providers process different categories of data depending on the function they perform. We limit disclosures to what is reasonably necessary for that function.
7 Processing outside Malaysia
Some of our service providers operate infrastructure or support services outside Malaysia. Personal data may therefore be transferred to or processed in other countries. Where this occurs, Eagl takes reasonable steps required by Malaysian law to ensure that the transfer is permitted and that the data receives an appropriate level of protection. These steps may include contractual safeguards, security reviews and limits on the provider’s use of the data.
8 Cookies and similar technologies
Eagl uses cookies and similar technologies that are needed to keep you signed in, remember preferences, protect accounts, manage sessions and balance service traffic. We do not use cookies to store your password in readable form.
You can control cookies through your browser. Blocking cookies that are essential to authentication or security may prevent parts of Eagl from working correctly. Eagl does not currently use third-party advertising cookies or advertising pixels in the service.
9 Data retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, to operate the service, to comply with law, or to resolve disputes and enforce agreements. The period depends on the type of data and why we hold it.
Account data is generally kept while your account remains active.
User Content is generally kept until you delete it or close your account, subject to limited backup retention and any legal need to preserve particular records.
Payment and transaction records may be retained for accounting, tax, fraud-prevention and legal requirements.
Security logs, error records and support communications are retained for a period reasonably necessary to protect and support the service.
When data is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible. Account deletion requires removal across our identity and cloud systems. We aim to complete a verified deletion request within 30 days. Copies in backups may remain for a limited period before they are overwritten in the ordinary backup cycle.
10 Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include access restrictions, authentication controls, monitoring and safeguards provided by our hosting and payment providers.
No internet service can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect unauthorised access to your account.
11 Your choices and rights
Subject to the Personal Data Protection Act 2010 and other applicable Malaysian law, you may:
ask whether we hold personal data about you and request access to it;
ask us to correct personal data that is inaccurate, incomplete, misleading or out of date;
withdraw consent where our processing depends on consent;
ask us to stop or limit processing in circumstances provided by law, including direct marketing;
request data portability where that right applies; and
raise a question or complaint about our handling of your personal data.
To make a request, email privacy@eaglpro.com. We may ask for information needed to verify your identity and may refuse or limit a request where Malaysian law permits. Withdrawing consent does not affect processing already carried out lawfully, and it may mean that we can no longer provide some or all of the service.
12 Age requirements
You must be at least 16 years old to use Eagl. If you are 16 or 17, you may use Eagl only with the approval of your parent or legal guardian. Eagl is not intended for anyone under 16. If we learn that we collected personal data from a person under 16, we will take reasonable steps to delete it. A parent or guardian who believes that a child has provided data to Eagl should contact privacy@eaglpro.com.
13 Personal data about other people
Before submitting User Content that contains another person’s personal data, voice, image or communications, you must have the right to do so. This includes obtaining any notice, consent or other permission required to record, upload, transcribe or process the material. You must not use Eagl to process personal data unlawfully.
14 Third party links and services
Eagl may contain links to websites or services that we do not control. Their privacy practices are governed by their own notices. This Policy does not cover personal data that you provide directly to those third parties outside Eagl.
15 Data breaches
If we become aware of a personal data breach, we will assess and contain it, take reasonable steps to reduce harm, document our response and notify the Personal Data Protection Commissioner and affected individuals where required by Malaysian law. Any notice to affected individuals will describe the incident and the practical steps they should take, to the extent appropriate and lawful.
16 Changes to this Policy
We may update this Policy when our service, providers or legal obligations change. We will publish the revised version on our website and change the effective date above. If a change materially affects how we handle personal data, we will provide an appropriate additional notice.
17 Contact us
Questions, requests and complaints may be sent to:
EAGL LABS AI SDN. BHD.
Company No. 202601000676 (1662774-W)
privacy@eaglpro.com
You may also contact or lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the Commissioner’s official website at www.pdp.gov.my.
This Policy explains how EAGL LABS AI SDN. BHD. collects, uses, shares and protects personal data when you use Eagl. It applies to www.eaglpro.com, app.eaglpro.com and related Eagl services.
Eagl processes the information needed to operate accounts, accept and process source material, generate transcripts and Blueprints, manage subscriptions and credits, provide support and keep the service secure. We do not ask for identity documents or sensitive profile information when you create an account, and we do not receive or store complete payment card details.
1 Who we are
EAGL LABS AI SDN. BHD. (Company No. 202601000676 (1662774-W)) is the data controller responsible for the personal data described in this Policy. References to “Eagl”, “we”, “us” or “our” mean this company.
2 Personal data we collect
[ Account and identity data ]
Your first name, last name and email address.
A securely stored password credential or password hash when you register with an email address. We do not store your password in readable form.
An optional profile photograph.
If you sign in through a third-party identity provider, the account identifier and profile information that the provider makes available to Eagl, such as your name and email address.
[ User Content ]
We process material that you submit to Eagl, including audio or video files, text, URLs, transcripts, prompts, instructions and the Blueprints or other outputs created from that material. We call this “User Content”. User Content may contain personal data about you or other people.
Eagl’s systems and authorised service providers automatically process User Content to provide the service. Administrators of customer organisation accounts and Eagl’s general staff cannot access User Content. Access is restricted to authorised technical administrators where necessary to operate, secure, maintain or support the service, comply with legal obligations, or fulfil deletion requests.
[ Subscription payment and credit data ]
Your plan, subscription status, credit balance, transaction references and limited billing information.
Payment details are processed by a third-party payment processor. Eagl does not receive or store your complete card number, card security code or full bank account credentials.
[ Technical and usage data ]
Internet Protocol address, browser and device information, operating system, login times and security logs.
Service events such as feature interactions, processing status, error records, credit deductions and aggregate usage counts.
Cookies and similar technologies used for authentication, preferences, security, session management and load balancing.
[ Communications ]
We collect information you give us when you contact support, report a problem, respond to a survey or otherwise communicate with Eagl.
[ Information we do not request as account data ]
Eagl does not ask you to provide identification card or passport numbers, race, religion, health information, marital status or similar sensitive information as part of account registration. User Content may nevertheless contain these details. You should submit sensitive or third-party personal data only when you are authorised to do so.
3 How we collect personal data
We collect personal data:
directly from you when you register, upload or submit material, make a purchase or contact us;
from a third-party identity provider when you use its sign-in service;
from an organisation administrator when they invite you to or manage an organisation account; and
automatically from your browser, device and use of the service.
4 How we use personal data
We use personal data to:
create, authenticate, secure and administer your account;
receive and process User Content, create transcripts and Blueprints, and deliver the features you request;
manage subscriptions, payments, credits and organisation accounts;
provide customer support and send service messages, including security, billing and material product notices;
detect, investigate and prevent fraud, misuse, security incidents and technical failures;
measure and improve the reliability, performance and usability of Eagl, including through aggregate or de-identified information;
enforce our Terms of Service, establish or defend legal claims, and comply with applicable law; and
send Eagl marketing communications where permitted. You may unsubscribe at any time without affecting essential service messages.
Eagl uses automated systems, including artificial intelligence, to transcribe and transform User Content into the outputs you request. Eagl does not use this processing to make decisions that produce legal or similarly significant effects about you.
We do not use User Content to train Eagl’s general-purpose artificial intelligence models. Our service providers may process User Content only to deliver their contracted services to Eagl, subject to their applicable contractual and security commitments.
5 Organisation accounts
If you join an organisation account, its administrators can see your member email address. They can assign or revoke administrator roles, allocate credits and revoke access to the organisation’s credits. Organisation administrators cannot see your User Content, transcripts, Blueprints, processing activity or individual credit usage through Eagl’s organisation controls.
If your use of Eagl is provided by an employer, university or other organisation, that organisation may have its own policies and responsibilities for personal data it collects outside Eagl. You should contact the organisation about those separate practices.
6 When we share personal data
We do not sell personal data. We may disclose the data needed for the purposes in this Policy to:
cloud hosting, data-storage and speech-to-text providers;
artificial-intelligence processing providers;
payment and billing processors;
identity and authentication providers;
professional advisers, auditors, insurers and contractors who need the information to provide services to us and are subject to appropriate confidentiality duties;
courts, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
a buyer, investor or successor in connection with a proposed or completed merger, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality and data-protection arrangements.
These providers process different categories of data depending on the function they perform. We limit disclosures to what is reasonably necessary for that function.
7 Processing outside Malaysia
Some of our service providers operate infrastructure or support services outside Malaysia. Personal data may therefore be transferred to or processed in other countries. Where this occurs, Eagl takes reasonable steps required by Malaysian law to ensure that the transfer is permitted and that the data receives an appropriate level of protection. These steps may include contractual safeguards, security reviews and limits on the provider’s use of the data.
8 Cookies and similar technologies
Eagl uses cookies and similar technologies that are needed to keep you signed in, remember preferences, protect accounts, manage sessions and balance service traffic. We do not use cookies to store your password in readable form.
You can control cookies through your browser. Blocking cookies that are essential to authentication or security may prevent parts of Eagl from working correctly. Eagl does not currently use third-party advertising cookies or advertising pixels in the service.
9 Data retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, to operate the service, to comply with law, or to resolve disputes and enforce agreements. The period depends on the type of data and why we hold it.
Account data is generally kept while your account remains active.
User Content is generally kept until you delete it or close your account, subject to limited backup retention and any legal need to preserve particular records.
Payment and transaction records may be retained for accounting, tax, fraud-prevention and legal requirements.
Security logs, error records and support communications are retained for a period reasonably necessary to protect and support the service.
When data is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible. Account deletion requires removal across our identity and cloud systems. We aim to complete a verified deletion request within 30 days. Copies in backups may remain for a limited period before they are overwritten in the ordinary backup cycle.
10 Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include access restrictions, authentication controls, monitoring and safeguards provided by our hosting and payment providers.
No internet service can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect unauthorised access to your account.
11 Your choices and rights
Subject to the Personal Data Protection Act 2010 and other applicable Malaysian law, you may:
ask whether we hold personal data about you and request access to it;
ask us to correct personal data that is inaccurate, incomplete, misleading or out of date;
withdraw consent where our processing depends on consent;
ask us to stop or limit processing in circumstances provided by law, including direct marketing;
request data portability where that right applies; and
raise a question or complaint about our handling of your personal data.
To make a request, email privacy@eaglpro.com. We may ask for information needed to verify your identity and may refuse or limit a request where Malaysian law permits. Withdrawing consent does not affect processing already carried out lawfully, and it may mean that we can no longer provide some or all of the service.
12 Age requirements
You must be at least 16 years old to use Eagl. If you are 16 or 17, you may use Eagl only with the approval of your parent or legal guardian. Eagl is not intended for anyone under 16. If we learn that we collected personal data from a person under 16, we will take reasonable steps to delete it. A parent or guardian who believes that a child has provided data to Eagl should contact privacy@eaglpro.com.
13 Personal data about other people
Before submitting User Content that contains another person’s personal data, voice, image or communications, you must have the right to do so. This includes obtaining any notice, consent or other permission required to record, upload, transcribe or process the material. You must not use Eagl to process personal data unlawfully.
14 Third party links and services
Eagl may contain links to websites or services that we do not control. Their privacy practices are governed by their own notices. This Policy does not cover personal data that you provide directly to those third parties outside Eagl.
15 Data breaches
If we become aware of a personal data breach, we will assess and contain it, take reasonable steps to reduce harm, document our response and notify the Personal Data Protection Commissioner and affected individuals where required by Malaysian law. Any notice to affected individuals will describe the incident and the practical steps they should take, to the extent appropriate and lawful.
16 Changes to this Policy
We may update this Policy when our service, providers or legal obligations change. We will publish the revised version on our website and change the effective date above. If a change materially affects how we handle personal data, we will provide an appropriate additional notice.
17 Contact us
Questions, requests and complaints may be sent to:
EAGL LABS AI SDN. BHD.
Company No. 202601000676 (1662774-W)
privacy@eaglpro.com
You may also contact or lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the Commissioner’s official website at www.pdp.gov.my.