Privacy Policy
This policy explains what personal data Suara collects, why, who we share it with, and the choices you have. We have tried to write it in plain English. If something is unclear, email us at rez@trysuara.com and a founder will answer.
1. Who we are
Suara ("Suara", "we", "us") is run by its founders. We are setting up our company and will add its name, registration number and address here when that is done. Our team works from Malaysia and Canada.
Suara makes social media posts, images and captions, for small businesses in their own brand, starting from their own photos. You can try Suara with a free first week: you sign up on trysuara.com or by messaging us on Instagram, and we make a week of posts from your own photos.
For the purposes of Malaysia's Personal Data Protection Act 2010 (PDPA), we are the data controller for the personal data described in this policy. For Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we are the organisation responsible for it. For privacy questions, including anything for our Data Protection Officer, email rez@trysuara.com.
2. What this policy covers
This policy covers trysuara.com, signing up for your free first week, and the Suara service. It does not cover third-party sites or platforms we link to or work with, such as Instagram, Facebook, TikTok, Google or Telegram. Those have their own privacy policies.
3. What we collect when you sign up
When you sign up for your free first week, on our website or by messaging us on Instagram, you give us:
- your business name
- your email address
- your name
- your city and country
- your website or Instagram handle (optional)
- how you heard about us (optional)
- your agreement to our Terms of Use and this policy, with the date, time and version you agreed to
- whether you want update emails from us (optional, and separate)
Some of this is about your business rather than about you. We still treat it carefully, because for a small business the two often overlap.
4. Business lookup and public information
To save you typing, the form lets you search for your business. When you pick a result, we look it up on Google Maps Platform (Google Places) and receive the business's public listing: its name, address, website and other public details on that listing.
We may also read your business's public website to find its public Instagram account, public contact email, logo and brand colours. We only read what is already public. You can correct or remove any of it.
Your public photos. To make your free first week, we collect recent public posts from your business's Instagram account and photos from your business's Google Maps listing, using a data collection service (Apify). We keep these in your brand library so your posts are made from your own photos. We prefer photos your business posted itself. If you do not want us to use a photo, tell us and we will remove it.
Business search uses Google Maps. Google's use of data in that search is covered by the Google Privacy Policy.
Your location (optional). Your browser may ask whether Suara can use your location. If you allow it, we use it only to show nearby businesses first in the search. If you say no, search still works. We do not store your precise location with your signup.
5. Information collected automatically
When you sign up on our website, we also record:
- the page that sent you to us (the "referrer")
- campaign tracking tags in the link you used (known as UTM parameters), for example which post or partner sent you
- the date and time you signed up
We use these to understand which channels bring people to Suara.
Like almost every website, our hosting provider keeps standard server logs (such as IP address, browser type and the time of a request) for security and to keep the site running.
6. What we collect when you use the service
Once you are invited and create an account, we collect what you choose to give us so we can make your posts:
- Account details: your name, email address and login details.
- Brand information: your answers to our setup questions, your logo, brand colours, the voice you want, words or topics you never want used, and the facts about your business you want us to use (such as menu items or prices, if you choose to share them).
- Photos and files: the photos and other files you upload. These may show people, such as staff or customers. Please only upload photos you have the right to use, and where people in them are happy to appear.
- Your feedback: the corrections and preferences you give us (for example "less pink" or "talk more about the price"). Suara remembers these so every future batch gets closer to what you want.
- Posts: the images and captions we make for you, and whether you approved, edited or rejected them.
- Chat messages: if you talk to Suara on Instagram or Telegram, including in a group chat you add Suara to, the messages, voice notes, photos and files sent there.
- Connected social accounts: if you choose to connect an Instagram, Facebook or TikTok account for publishing, the connection details our publishing partner needs to post the content you have approved.
- Payment details: when paid checkout goes live, payments will be handled by Stripe. We will receive confirmation of payment, your plan and billing details such as name and country. We will not see or store your full card number.
7. Why we use your data
| What we do | Why |
|---|---|
| Make your free first week and send it to you | You asked for it. This is necessary to do what you asked. |
| Keep a record that you agreed to our terms | So we can show what you agreed to and when. |
| Look up your business and prepare your brand | To save you time and make your first posts accurate. |
| Make, edit and deliver your posts | This is the service you signed up for. |
| Remember your corrections and preferences | So each batch is closer to what you want. This is a core part of Suara. |
| Publish approved posts to accounts you connect | Only when you have connected an account and approved the post. |
| Send you updates about Suara | With your consent. You can stop these at any time. |
| Understand which channels bring people to Suara | To run and improve our business. |
| Take payment (when checkout is live) | To provide the paid service. |
| Keep Suara secure and prevent misuse | To protect you, other customers and us. |
| Meet legal obligations | For example tax records or responding to lawful requests. |
Where the law relies on consent, we ask for it, and you can withdraw it at any time. Withdrawing consent does not affect what we did before you withdrew it, but it may mean we can no longer provide some or all of the service.
We do not sell your personal data. We do not use your content to advertise to you or to anyone else.
8. How we use AI providers
Suara uses AI models to help write captions and make images. To do that, we send the relevant parts of your brand information, photos and instructions to our AI providers: Microsoft Azure OpenAI Service and Anthropic.
We use these providers under their business and API terms, which do not use API data to train their models by default. We have not opted in to any such training. Providers may keep data for a limited time for security and abuse monitoring, as described in their own terms.
AI can make mistakes. That is why nothing is published without your approval. See our Terms of Use for more.
We use your photos and corrections to make your posts. We do not use one business's photos, logo or brand details to make posts for another business.
9. Who we share data with
We share data only with service providers who help us run Suara, and only what each one needs. They process it on our behalf and under our instructions, except where noted.
| Provider | What they do for us | Where |
|---|---|---|
| Microsoft Azure | Hosting our apps and agents, our database, file storage (your photos and posts), messaging queue and logs | Malaysia (Malaysia West) |
| Microsoft Azure OpenAI Service | AI writing of captions and making and editing images | United States |
| Microsoft Azure Maps | Location lookups | United States |
| Microsoft Azure virtual machines | The computers our design team works on, which hold copies of your photos and designs while we work on them | India (Central India) |
| Anthropic | AI assistance our team uses to design, write and check your posts | United States |
| Google Maps Platform (Google Places) | Business search and lookup when you sign up | Global |
| Apify | Collecting your business's public Instagram posts and Google Maps photos | United States |
| Resend | Sending our emails, such as your signup and invite emails | United States |
| Google Workspace (Gmail) | Our support and business email | Global |
| Exa | Web search our team uses for research, which may include your business name | United States |
| Zernio (only if you connect accounts) | Scheduling and publishing approved posts to your social accounts | United Kingdom and Western Europe |
| Meta (Instagram) | Messaging with you on Instagram | Global |
| Telegram (only if you chat there) | Messaging between you and Suara, including group chats | Global |
| Stripe (when checkout goes live) | Payments and billing | Global |
Telegram, Instagram, Facebook, TikTok, X and LinkedIn are independent platforms. When you use them, their own terms and privacy policies apply to what you send and publish there.
We may also share data:
- if the law requires it, or to respond to a valid legal request
- to protect the rights, safety or property of our customers, the public or Suara
- with a buyer or successor if Suara is sold, merged or restructured. If that happens, we will tell you, and this policy (or one at least as protective) will continue to apply to your data.
10. Where your data is processed
Our team is in Malaysia and Canada. Our main database and file storage are in Malaysia, but some of our providers run servers in other countries, mainly the United States, India, the United Kingdom and Western Europe. For example, when we use AI to write or edit your posts, the relevant photos and text are processed in the United States. This means your data may be transferred to, stored in and accessed from countries outside the one you live in, including outside Malaysia and Canada. Those countries may have different data protection laws.
When we transfer data, we take steps to make sure it stays protected, including choosing established providers, using their contractual data protection terms, and limiting what we send to what is needed. Where Malaysian law applies, we rely on the conditions for cross-border transfers under the PDPA. Data held outside Canada may be accessible to courts and authorities in those countries under their laws.
11. Cookies and browser storage
We use your browser's local storage and session storage for things the site needs to work, such as remembering what you typed in the form if you reload the page. This stays in your browser.
We do not use advertising cookies, and we do not put third-party advertising trackers on our site. If that changes, we will update this policy first and ask for consent where the law requires it.
You can clear local storage at any time in your browser settings. The site will still work, although it may forget what you had typed.
12. Emails from us
When you sign up, we email you about your free first week. We only send Suara updates and offers if you ticked the separate box to receive them. If you reply to our emails, your reply goes to the founders.
You can stop update emails at any time by using the unsubscribe link in any email or by replying and asking. We will still send you essential messages about your account, such as security or billing notices, if you become a customer.
13. How long we keep data
- Free week data: if you do not continue after your free first week, we keep your brand library and posts for 6 months so you can pick up where you left off, then delete them. You can ask us to delete them sooner.
- Your agreement record: we keep the record of when you agreed to our terms for as long as you have an account and for as long as the law requires after that.
- Customer content and account data: we keep it while your account is active and for 30 days after it closes, so you can come back or download your posts. After that we delete it.
- Payment and tax records: we keep these for as long as the law requires.
- Backups and logs: copies in backups and server logs are deleted on a rolling schedule, within 35 days.
We may keep data longer if the law requires it, or if we need it to resolve a dispute. Anonymised data, which no longer identifies you, may be kept to understand how Suara is used.
14. How we protect data
We use reasonable technical and organisational measures to protect personal data. These include encrypted connections (HTTPS), access controls that limit who on our team can see data, secrets kept in a managed secret store rather than in code, and separating each business's brand records from every other business's.
No system is perfectly secure. If a data breach is likely to cause you significant harm, we will notify you and the relevant authorities as the law requires, including the Personal Data Protection Commissioner in Malaysia and the Office of the Privacy Commissioner of Canada.
15. Your rights
Wherever you are, you can ask us to:
- Access the personal data we hold about you, and get a copy.
- Correct data that is wrong or incomplete.
- Delete your data, where we do not need to keep it for legal reasons.
- Withdraw consent, for example to stop update emails or to stop us processing your data for the service.
- Move your data (data portability): get your data in a commonly used format, or have it sent to another provider where that is technically feasible.
To make a request, email rez@trysuara.com. We may need to confirm your identity before acting on it. We aim to respond within 21 days for requests under Malaysia's PDPA and within 30 days for requests under Canada's PIPEDA, and sooner where we can. If we need more time, or cannot do what you ask, we will tell you why. Requests are free unless they are clearly excessive.
Complaints. Please talk to us first, and we will try to put things right. You also have the right to complain to a data protection authority:
- In Malaysia: the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi), pdp.gov.my.
- In Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca.
- Elsewhere: the data protection authority where you live.
If you are in Quebec, you also have rights under Quebec's privacy law (Law 25), and you may contact the Commission d'accès à l'information du Québec.
16. Children
Suara is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from anyone under 18. If you think a person under 18 has given us their data, contact us and we will delete it.
17. Changes to this policy
We may update this policy as Suara grows, for example when we add new features or providers. We will change the "Last updated" date at the top. If a change is significant, we will tell you by email or on the site before it takes effect.
18. Contact us
Suara
Email: rez@trysuara.com