Privacy Policy
Effective Date: 10 October 2026
Company: Blue1.my (ECOTEN HARDWARE TRADING)
Website / Platform: https://blue1.my
1. Introduction
ECOTEN HARDWARE TRADING (“we”, “our”, or “us”) operates the Blue1.my platform, an AI-assisted short-form video co-producer for founders and teams. We are committed to protecting the privacy of the data you provide and the content you upload. This Privacy Policy explains how we collect, use, store, track, and disclose information in compliance with Malaysia’s Personal Data Protection Act 2010 (PDPA) as well as applicable international standards such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
By accessing our website or using our platform, you acknowledge and agree to the terms set forth in this Privacy Policy.
2. Data We Collect
To provide our AI video ideation, editing, production, and analytics services, we collect and process the following categories of information:
User-Provided Content (Footage & Brand Materials)
Videos, recordings, images, and materials you upload or connect so the platform can produce content for you:
- Talking-head footage, screen recordings, product screenshots, and reference images
- Brand materials such as logos, fonts, colors, website URLs, and brand descriptions (“Brand DNA”)
- Video ideas, scripts, captions, and content calendar entries
- Projects, timelines, storyboards, and exported videos
User & Account Data
Information provided directly by users when creating or managing an account:
- Name, business email address, and login credentials
- Billing and subscription status (processed securely through Stripe)
- Referral codes and waitlist information
- Connected social accounts (e.g., Instagram, YouTube), including account identifiers, access tokens, and channel or post performance data retrieved through official APIs
Usage & Performance Logs
Data generated automatically through interaction with the platform:
- Projects created, videos rendered, features used, and settings configured
- Video performance data from connected accounts (e.g., views, retention, engagement) used to improve future content
Technical & Device Data
Standard server logs and metadata automatically collected for performance and security purposes:
- IP addresses (used for security auditing and counting unique visitor sessions)
- Browser type, system settings, and operating system information
- Access dates, times, and referring URL paths
Billing Note: We do not store or process your credit card numbers on our servers. All transaction and financial information is securely transmitted to and managed by our payment processor, **Stripe**.
3. Tracking, Cookies, and Analytics Technologies
We employ standard tracking mechanisms and storage tools to enable core functionality, verify system health, and provide marketing analytics:
Our platform uses an automated visitor logging system to monitor site performance. We log visited URL paths, timestamps, user-agent data, and IP addresses. These logs are debounced and checked to measure unique page views and identify malicious crawling or automated abuse.
We utilize necessary functional cookies and local storage tokens to store secure session keys. This keeps you securely logged into your workspace and maintains your active preferences as you navigate the dashboard. You can configure your browser to reject cookies, but doing so will prevent you from logging in and utilizing the application.
4. How We Use Data
We use the processed data for the following essential business purposes:
- Analyzing your footage and materials to plan, edit, caption, and render short-form videos as instructed by you.
- Learning from your past video performance to improve future ideas, hooks, pacing, and formats.
- Displaying content calendars, performance analytics, and project history.
- Managing user profiles, subscription plans, connected accounts, and settings.
- Detecting, preventing, and combating abuse, malicious activities, and violations of our Acceptable Use Policy.
- Complying with statutory requirements, fraud audits, and court orders.
Training Disclaimer: We do not sell your content or personal data to third parties. Your uploaded footage, brand materials, and project data remain isolated in your account. We do not use your private content to train public AI foundation models.
5. Robust Liability Disclaimers & User Responsibility
Because Blue1.my functions as a technical platform for AI-assisted video production, we enforce strict liability caps to protect our company from legal claims:
A. Content Rights and Platform Risks
You are solely responsible for ensuring you own or are licensed to use everything you upload — including footage of identifiable people, music, logos, and third-party materials — and for complying with the content rules of any platform where you publish (e.g., Instagram, YouTube, TikTok).
We make absolutely no warranties that your videos will receive views, followers, engagement, or revenue, or that they will avoid copyright claims, strikes, bans, or demonetization. We are not legally or civilly liable for any damages, penalties, account actions, or regulatory fines arising from content you create or publish.
B. AI Generation Disclaimer
The AI features are intended to assist in generating ideas, edits, captions, graphics, and video elements. They do not represent legal, financial, or professional advice. The user is strictly required to review, correct, and approve all content before publishing. ECOTEN HARDWARE TRADING assumes no responsibility or liability for any errors, misleading claims, copyright infractions, or offensive content generated by the AI models.
C. Complete Indemnification & Limitation of Liability
You agree to fully indemnify, defend, and hold harmless ECOTEN HARDWARE TRADING, its directors, officers, employees, and subcontractors from any and all third-party claims, liabilities, lawsuits, losses, regulatory actions, and expenses (including reasonable attorney fees) arising from your content, your published videos, your violation of platform or intellectual-property rules, or breach of these terms. In no event shall our total aggregate liability for all claims exceed the total subscription fees paid by you to us during the three (3) months preceding the event giving rise to liability.
6. Data Sharing and Third-Party Subprocessors
We do not trade, sell, or rent your personal data. To deliver the platform's features, we share data with the following trusted service providers, acting under strict data-protection agreements:
- Cloud Infrastructure: Supabase / PostgreSQL (for hosting databases and secure server functions). Data may be stored on secure nodes located outside Malaysia where applicable.
- Payment Gateways: Stripe (for billing, invoicing, and subscription renewals).
- AI API Providers: Secure AI media API partners used solely to process your content-production requests. Under API terms, these requests are encrypted in transit and are not used to train public models.
- Search & Stock Providers: Pixabay, Serper (Google search APIs), and similar services queried at your request to source stock media. Queries you type may be shared with these providers to return results.
- Social Platforms: Instagram, YouTube, and similar platforms you choose to connect, governed by their own terms and privacy policies for data retrieved through their official APIs.
By registering on the platform, you explicitly consent to the secure transfer and processing of your data globally where our subprocessors maintain nodes.
7. Data Retention
We retain user profiles and project data for as long as your account remains active. Uploaded footage, rendered videos, and page view logs are retained for **up to 12 months** from their initial entry date, or until you explicitly delete them or close your account, whichever occurs first.
Upon account termination or explicit request, we will securely purge or anonymize your data from active production servers, subject to any lingering statutory retention requirements (e.g., billing audits).
Deletion removes data from our servers only. It cannot recall copies of videos you already published, shared, or downloaded outside the platform — removing published copies is your responsibility.
8. Security Measures
We implement reasonable administrative, technical, and physical safeguards to prevent accidental loss, unauthorized access, altering, or disclosure of your data. This includes secure HTTPS encryption in transit, row-level database security, and sandboxed tenant isolation.
You are responsible for reviewing and revoking third-party connections and access tokens (e.g., Instagram, YouTube) that you no longer use, including after closing your account. We are not liable for breaches, policy changes, or data practices of connected platforms themselves.
Note: No transmission method over the internet or database storage is absolutely secure. While we strive to employ commercial-grade safety tools, you acknowledge that electronic transactions carry inherent security risks.
9. Your Global Data Rights & Access
Depending on your jurisdiction (e.g., under PDPA, GDPR, or CCPA), you have specific rights over personal data:
- Right to Access: Request details of the specific records we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete details.
- Right to Erasure ("Right to Be Forgotten"): Request that we purge personal records from our databases.
- Right to Object or Restrict Processing: Opt-out of analytics or AI-learning flows tied to your account.
To exercise any of these statutory rights, please submit a written request to: blue1aicompany@gmail.com. We will review and respond to valid requests within the statutory timeline.
10. Changes to this Privacy Policy
We reserve the right to modify or replace this Privacy Policy at any time. Any changes will be published directly on this page with an updated "Effective Date". We encourage you to review this policy periodically to stay informed about how we safeguard your data.
11. Contact Us
If you have any questions, regulatory concerns, or complaints regarding this Privacy Policy or our PDPA compliance, please contact our support desk:
Email: blue1aicompany@gmail.com
Address: 7465, Jalan Tanjung Indah, Pusat Perniagaan Seri Tanjung, 13400 Butterworth, Penang, Malaysia.