Who We Are
ProxifAI Sdn Bhd (Company No. 202601017845 / 1679942-M) ("ProxifAI", "we", "us", or "our") is a Malaysian company operating the platform at proxifai.me. We are committed to protecting and respecting the privacy of every person who interacts with our services.
ProxifAI is a subsidiary of Luminous Labs, and operates under the same privacy principles as our parent company. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our Digital Twin platform.
ProxifAI is built, from the ground up, to be PDPA 2026 compliant — adhering to Malaysia's Personal Data Protection Act and its 2026 amendments across every aspect of our operations.
Information We Collect
We collect personal and non-personal information to deliver our platform services and continuously improve your experience.
- —Identity InformationFull name, identity card or passport number, and other government-issued identity data collected during our talent verification process.
- —Contact InformationEmail address, phone number, and other contact details you provide when registering, contacting us, or submitting enquiries.
- —Biometric & Likeness DataVoice recordings, facial geometry data, video footage, and personality-range samples collected during capture sessions, solely from consenting, identity-verified talent. See Section 4 for full details.
- —Professional InformationCareer details, social media profiles, brand category preferences, and exclusion lists provided during talent onboarding.
- —Transaction InformationCampaign records, licensing agreements, usage data relating to Digital Twin deployments, and payment-related information.
- —Technical InformationIP address, browser type, operating system, device identifiers, and browsing patterns collected automatically via cookies, server logs, and tracking technologies.
- —CommunicationsRecords of correspondence with ProxifAI, including support requests and WhatsApp messages sent to our team.
How We Use Your Information
We use the information we collect for the following purposes:
- —Platform OperationsTo create, maintain, and operate talent profiles and Digital Twin assets on our platform.
- —Identity VerificationTo verify the identity of talent and enforce our ethical consent framework.
- —LicensingTo facilitate licensing agreements between talent and brands or agencies.
- —PaymentsTo process payments and maintain accurate campaign and transaction records.
- —PersonalisationTo personalise your experience on our website and platform.
- —CommunicationsTo communicate with you regarding campaign updates, onboarding progress, promotional content, or service-related matters.
- —Scope EnforcementTo monitor and enforce the approved scope of each Digital Twin deployment.
- —Legal ComplianceTo comply with legal and regulatory obligations, including PDPA 2026 requirements.
- —Service ImprovementTo improve the quality, safety, and ethical standards of our platform and services.
Biometric Data & Digital Twin Consent
ProxifAI processes a category of particularly sensitive personal data: biometric information, including facial geometry, voice recordings, and video likeness. We apply the highest standards of care to this data.
- —Consent always firstNo Digital Twin is created without a signed consent agreement tied to the talent's verified identity.
- —Scope agreed upfrontBefore any campaign is activated, the talent reviews and approves the specific brand, product category, and context of use.
- —Nothing goes live without sign-offCampaign materials are not released to clients until the talent has approved that specific job.
- —Digital watermarkingApplied to every Digital Twin output to prevent deployment outside authorised, paid contracts.
- —Pause or deactivate anytimeCampaigns already under signed agreements will run to completion, but no new bookings are accepted until you reactivate.
- —Data never soldBiometric data is never sold to third parties, used outside agreed scope, or retained beyond the duration set in your licensing agreement.
Every campaign comes with a Certificate of Authenticity — full, traceable documentation verifying the identity of the talent and their explicit consent, ensuring brands and agencies remain fully covered as AI disclosure requirements tighten.
Sharing Your Information
ProxifAI does not sell your personal information to third parties. We may share your information only in the following circumstances:
- —Brands and AgenciesTalent profile information is shared only in connection with campaigns you have explicitly approved.
- —Parent CompanyWe may share information with Luminous Labs for internal administrative, legal, and compliance purposes.
- —Service ProvidersWe may share data with trusted third-party providers who process data on our behalf under confidentiality obligations.
- —Legal RequirementsWe may disclose your information where required by law, regulatory authority, or court order, or to protect the rights, property, or safety of ProxifAI, our talent, or the public.
Data Retention
We retain your personal information for as long as your account or talent profile remains active, or as necessary to fulfil the purposes described in this policy — including ongoing licensing obligations, legal compliance, and the resolution of disputes.
Biometric and likeness data is retained for the duration of your Digital Twin licensing agreement. Upon deactivation or contract expiry, we will delete or anonymise such data within a reasonable period, unless a longer retention period is required by law.
You may request deletion of your data at any time by contacting us at the details in Section 13.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to improve functionality and understand how visitors interact with our platform. Data collected automatically includes IP addresses, browser type, operating system, and browsing patterns.
You may disable or manage cookies through your browser settings. Note that doing so may affect the functionality of certain parts of our website.
Your Rights
Under Malaysia's Personal Data Protection Act (PDPA) and its 2026 amendments, you have the following rights in respect of your personal data:
- —Right of AccessYou may request a copy of the personal data we hold about you.
- —Right to CorrectionYou may request that inaccurate or incomplete data be corrected.
- —Right to Withdraw ConsentWhere processing is based on consent — including biometric data — you may withdraw that consent at any time.
- —Right to ErasureYou may request deletion of your personal data, subject to legal and contractual obligations.
- —Right to Restrict ProcessingYou may request that we limit how we use your data in certain circumstances.
- —Right to ObjectYou may object to the processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us using the details in Section 13. We will respond to all valid requests within 21 days.
Data Security
We take the security of your personal information seriously. ProxifAI implements industry-standard technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction — including encryption in transit and at rest, access controls, and regular security reviews.
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. If you believe your account or personal data has been compromised, please contact us immediately.
Third-Party Links
Our website may contain links to external websites, including social media platforms and brand or agency partner pages. We are not responsible for the content, privacy practices, or policies of any third-party sites, and we encourage you to review their privacy policies before submitting personal information.
Children's Privacy
ProxifAI's services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal data from a person under 18 without appropriate consent, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or industry best practices. When we do, we will revise the Effective Date at the top of this page.
For material changes, we will make reasonable efforts to notify you directly — for example, via email or a prominent notice on our website. Your continued use of our platform following the posting of changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please reach out to us: