Privacy notice

Personal Data Protection Act 2010 (Malaysia) · Last updated 12 October 2026

Agent Pulse ("we", "us") provides a Telegram reminder service for insurance agents in Malaysia. This notice explains what personal data we process, why, and your rights. By subscribing you consent to the processing described here.

1. Data we collect

• About you, the agent: your name, phone number, Telegram user ID, and the login credentials for your insurer's agent portal, which you provide once through our secure form.
• About your clients: the data shown in your portal's policy list that we read on your behalf, typically policyholder name, policy number, date of birth, policy status, premium amount, payment frequency and method, and commencement date. Also any customer details you paste into the bot yourself (for example name, identity card number, phone number).
• Usage data: commands you send to the bot and basic service logs needed to run and troubleshoot it.

2. Why we process it

• To read your policy list once a day and send you your reminders (birthdays, premiums due, policy anniversaries) and premium summaries.
• To store the customer records you add and let you search and export them.
• To bill you, answer your support questions and keep the service running securely.

We do not use client data for marketing, profiling or any purpose other than producing your reminders. We do not sell or share it with third parties.

3. Your clients' data and your obligations

You remain the data user responsible for your clients' personal data under the PDPA; we process it on your instructions as your service provider. You confirm that you are entitled to access the policy list in your agent portal and to have it processed for your own servicing of those clients.

4. Portal credentials

Your portal login is collected only through an encrypted (HTTPS) web form, never through chat messages, and is stored encrypted. It is used solely to sign in to your own portal account to read your policy list at the time you choose. Because the portal allows one active session per agent, that sign-in ends any session you have open at that moment. You may change your password at any time; tell us and we update our copy.

5. Storage, security and retention

• Data is stored on servers we control, with encrypted daily backups held with Cloudflare, Inc. (data at rest encrypted). Where a choice exists we keep data in Malaysia or Singapore; backups may be stored outside Malaysia.
• Access is restricted to the people who operate the service. Your bot responds only to your Telegram account.
• Messages are delivered through Telegram, whose own privacy policy applies to message transport.
• When you cancel, your credentials, policy data and customer records are deleted within 30 days, and removed from backups as those rotate (at most 90 days).

6. Your rights

You may ask to access or correct the personal data we hold about you, withdraw consent, or request deletion, by messaging us in the bot or through the contact below. Withdrawing consent for portal access ends the service, since we cannot produce reminders without it.

7. Demo bot

The public demo bot (@AgentPulseDemoBot) uses fictional sample data only. It stores your Telegram chat ID and the entry link you used, so we can reply to you, and forwards any free-text message you send to our team. Anything you paste into the demo's /add command is shown back to you and not stored.

8. Changes and contact

We may update this notice; the date above shows the current version. Questions or requests: message us at @AgentPulseDemoBot.