This policy explains how OmniNexus Sdn Bhd (Company No. 202401012303 / 1558153-T) ("OmniNexus", "we", "us") collects, uses and protects personal data when you use Marvis AI, the website at omninexus.io and everything we provide through them (together, "Marvis"). We are responsible for that data under Malaysia's Personal Data Protection Act 2010 (PDPA).
It covers people who visit our website, people who sign up for Marvis, the team members they invite, and anyone who contacts us.
The data we collect
What you give us
- Account details. Your name, email address, password, phone number and company name, and the details of the team members you invite.
- Billing details. Your billing name and address, and your plan and payment history. Our payment processor handles your card details, and we receive only what we need to show your billing history, such as the last four digits.
- Your content. Your brand details, logos, colours and the answers you give when you set up a brand, the links, PDFs, photos and videos you upload, the instructions you type in the chat, and the posts, images, videos and landing pages Marvis makes from them.
- Faces and voices. If you make a Digital AI Human video, the recordings of the person's face and voice used to make it. The PDPA treats this as sensitive data, so we use it only to make that person's videos and only with their written consent.
- Messages to us. What you send us by email, WhatsApp or the contact page, and our replies.
What we get when you connect other services
- Signing in with Google, Facebook or Apple. Your name, email address and profile picture from that service. If you use Apple's option to hide your email, we receive the relay address Apple gives us.
- Connecting Facebook, Instagram, LinkedIn or X. The names and IDs of the pages and profiles you connect, the access keys that let us publish for you, the posts we publish, and the figures for those posts, such as reach, likes, comments and clicks.
What we collect automatically
- Device and usage data. Your IP address, browser type and version, device type, the pages you visit, the time and date of each visit and diagnostic data such as error reports.
- Cookies and browser storage. Our Cookie Policy lists each one and what it is for.
What we hold for you
If you use landing pages and lead capture, the people who fill in your forms give their details to you, not to us. We store and process that data only for you, as explained under Your customers' data.
Whether you have to give it
To use Marvis you need to give us your name, email address and, for a paid plan, payment details. Without them we cannot open your account or bill you. Everything else is up to you, but some features do not work without it. For example, Marvis cannot publish to Instagram until you connect an Instagram account.
How we use your data
We use personal data to:
- open and run your account, and let your team work in it;
- make your posts, images, videos and landing pages, and translate them;
- publish posts to the accounts you connect, at the times you set;
- show you analytics for your posts and landing pages;
- bill you, collect payments and keep financial records;
- answer your questions and give you support;
- send you messages about your account, such as receipts, security alerts and changes to Marvis or these policies;
- send you news and offers about Marvis, which you can stop at any time with the link in each email;
- keep Marvis secure, and find and stop fraud, abuse and breaches of our Terms of Service;
- understand how Marvis is used, so we can fix problems and improve it; and
- meet our legal duties and protect our legal rights.
We do not sell your personal data. We do not use your content to train AI models for other customers.
AI processing
To make your content, Marvis sends your instructions, brand details and uploads to the AI model providers we work with. They process it to create the result and send it back to us. They act on our instructions and may not use your data for their own purposes.
Who we share it with
We share personal data only with:
- Service providers who help us run Marvis, such as cloud hosting, AI model providers, payment processing, email delivery and customer support tools. They may use the data only to provide their service to us.
- The platforms you connect. When you publish a post, it goes to Facebook, Instagram, LinkedIn, X or the other platform you chose, and that platform's own privacy policy applies to it.
- Your team. People you invite to your workspace can see the brands, content and analytics in it.
- Our professional advisers, such as lawyers, accountants and auditors, who are bound to keep it confidential.
- Authorities, when the law requires it or when we must protect our rights, our users or the public.
- A buyer or successor, if we merge, sell or transfer all or part of our business. We will tell you before your data comes under a different privacy policy.
Data from Google
Marvis's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Transfers outside Malaysia
Our service providers may store or process data outside Malaysia. When that happens, we transfer it only where the PDPA allows, and we take steps, such as contract terms, so that it stays protected to the standard this policy describes.
How long we keep it
We keep personal data only for as long as we need it for the purposes above:
- Your account and content for as long as your account is open. When your account closes, you have 30 days to export your content, and then we delete it.
- Invoices and payment records for seven years, as Malaysian tax and company law requires.
- Support messages for as long as we need them to help you and to keep a record of what we agreed.
- Device and usage data for as long as we need it to keep Marvis secure and working, after which we delete it or keep only totals that cannot identify you.
Copies in our backups are deleted as the backups are replaced. We may keep data longer when the law requires it or when we need it for a legal claim. The Data Deletion page explains how to ask us to delete your data sooner.
How we protect it
We encrypt data on its way to and from Marvis, limit access to the people who need it to do their jobs, and keep the access keys for your social accounts secret. No system is perfectly secure, so we cannot promise that your data will never be accessed without permission.
If a breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commissioner as the law requires.
Your rights
Under the PDPA you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong, incomplete, misleading or out of date;
- send your data to you or to another company in a format a machine can read;
- stop using your data for direct marketing;
- stop or limit using your data where it is causing you damage or distress; and
- delete your data, as explained on the Data Deletion page.
You can also withdraw your consent to how we use your data. If you do, we may not be able to keep providing Marvis to you.
You can change most of your account details yourself in Marvis. For anything else, write to us at support@omninexus.io from the email address on your account. We may ask you to prove who you are before we act, and we reply within 21 days, as the PDPA requires.
If you are not happy with how we handle your data, please tell us first so we can put it right. You can also complain to the Personal Data Protection Commissioner of Malaysia.
If you are in the EU or the UK
Where the GDPR or the UK GDPR applies, we rely on these legal grounds: the contract with you, to run your account and make your content; our legitimate interests, to keep Marvis secure and improve it; your consent, for marketing emails and for Digital AI Human recordings; and our legal duties, for financial records. You also have the right to object to how we use your data and to complain to your local data protection authority.
Your customers' data
Some features let you collect personal data from your own customers, such as the leads from a landing page. For that data, you decide why and how it is used, and we process it only on your instructions to run Marvis for you.
You are responsible for telling those people how you use their data, getting any consent the law requires and answering their requests. If one of your customers asks us about their data, we will pass the request to you.
Children
Marvis is for people aged 18 and over. We do not knowingly collect personal data from children. If you think a child has given us personal data, tell us at support@omninexus.io and we will delete it.
Links to other websites
Our website and your posts may link to sites we do not run, such as social platforms. We are not responsible for how they handle data, so read their privacy policies.
Changes to this policy
We may update this policy. For a material change we will tell you by email or in Marvis before it takes effect. The date at the top shows when it last changed.
Contact us
For questions about this policy or your data, write to us at support@omninexus.io.
OmniNexus Sdn Bhd (Company No. 202401012303 / 1558153-T), B-06-06, Skypark @ One City, Jalan USJ 25/1, 47650 Subang Jaya, Selangor, Malaysia.