Privacy notice

1. Who we are

Lebah IT (lebah.it) is operated by Brokaa Cloud Solution, Malaysia, the data user for the personal data described here. For anything about your data, email privacy@lebah.it.

2. What we collect

• Account: your name, email address and password (stored only as a one-way hash), the package you are on, and when you accepted this notice.
• Linked WhatsApp numbers: the phone number, and the messages, chats, contact names and files that pass through the numbers you link, so the dashboard can show, brief and send them.
• What you add: contacts, labels, notes, relationship answers, invoices, automations, AI instructions and uploaded files.
• Location (optional): only if you allow it in your browser. For users it is rounded to about 1 km before it is stored and is shown on maps only as a blurred area. Admin accounts store their device's exact location.
• Payments: your name, email, the package, amount and status. Card and bank details are entered on a third party's secure page and never reach Lebah IT.
• Credit claims: the public post link you submit to earn credits.
• Technical: a sign-in cookie, and your IP address (kept on your account as your last connection) for security, support and rate limits.

Your name, email and password are needed to open an account. Everything else is optional; without it, some features will not work.

3. Why we use it

• To run the service you signed up for: linking numbers, showing and sending messages, briefs, automations and team inboxes.
• To write AI replies and analyses when you turn those features on.
• To take payments, apply packages and count message credits.
• To send you service notices, including credit alerts from the Lebah IT official WhatsApp number.
• To show the number of users by area on the homepage map, without identifying anyone.
• To keep the service secure and to meet legal duties.

We do not sell personal data and do not use it for advertising.

4. Who we share it with

• Third parties that process payments on our behalf.
• Third parties that provide AI services, only when AI features are on: the message text needed to write a reply or analysis is processed by them. Their servers may be outside Malaysia.
• Third parties that serve map images to your browser and receive your IP address when a map loads.
• The WhatsApp platform, which carries every message you send or receive through a linked number.
• Third parties that store the data for us, and authorities when the law requires it.

Where data goes outside Malaysia, it is limited to what the feature needs.

5. How long we keep it

We keep your data while your account is open. When you delete your account, your account, linked numbers, messages, contacts and files are deleted and your WhatsApp numbers are unlinked. Payment records are kept for 7 years for tax and accounting, no longer linked to an account.

6. How we protect it

All traffic uses HTTPS. Passwords are hashed. WhatsApp login sessions are stored encrypted. Payment confirmations are verified before any package is applied. Only Lebah IT administrators can open the admin console.

7. Your rights

• Access: download everything we hold about you from your Account page.
• Correction: email privacy@lebah.it with the details to correct.
• Withdraw consent and delete: delete your account from the Account page at any time. You can also unlink a WhatsApp number or turn off location and AI whenever you like.
• Limit processing or ask a question: email privacy@lebah.it. We reply within 21 days.

If you are not satisfied with our answer, you can complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi) Malaysia.

8. Changes

If this notice changes in a way that matters, we will show it in the app and ask you to accept it again. The version date is at the top of this page.