Openminds Lab — Privacy Policy
Last updated: 30 June 2026
Effective: 30 June 2026
1. About this Policy
This Privacy Policy explains how OM Connect Sdn Bhd (Company No. 1017397-U) (“Openminds Lab“, “we“, “us“, or “our“) collects, uses, discloses, and protects personal data when you use https://labs.openminds.my and related lab applications (the “Service“).
We are the data user under Malaysia’s Personal Data Protection Act 2010 (PDPA) and, where applicable, act as a data controller for personal data we process about you.
This Policy should be read with our Terms of Service.
2. What personal data we collect
2.1 Information you give us
- Contact and enquiry data: name, email, company, phone number, and message content when you contact us or submit forms.
- Account data: if you sign in, we may store your name, email address, profile picture, and a unique account identifier.
- Demo and test data: prompts, files, messages, or other content you submit when using lab demos or integrated applications.
2.2 Information from Google Sign-In
If you choose Sign in with Google, we receive information from your Google account based on the permissions you approve. This typically includes:
- your name;
- your email address;
- your Google profile picture;
- a unique Google user identifier.
We do not receive your Google account password. The information we receive is used only as described in this Policy.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2.3 Information collected automatically
When you visit the Site, we may automatically collect:
- Usage data: pages viewed, links clicked, time on page, referring URL.
- Device and technical data: IP address, browser type, operating system, device type, language settings.
- Cookies and similar technologies: see Section 9.
2.4 Information from third parties
- Google Analytics (via Google Site Kit): aggregated usage statistics.
- Authentication providers: basic profile data as authorised by you.
- Integrated platforms used by specific lab projects (e.g. messaging or cloud services), only where you connect or use those features.
3. How we use your personal data
| Purpose | Lawful basis |
|---|---|
| Provide and operate the Service | Performance of contract; legitimate interest |
| Authenticate you via Google or other providers | Performance of contract; your consent |
| Respond to enquiries and support requests | Legitimate interest; performance of contract |
| Operate, secure, and improve lab demos and the Site | Legitimate interest |
| Monitor usage through analytics | Legitimate interest |
| Send service-related notices | Performance of contract |
| Comply with law and prevent abuse | Legal obligation; legitimate interest |
| Enforce our Terms | Legitimate interest |
We do not sell your personal data.
4. Google user data — specific commitments
If you sign in with Google, we use Google user data only to:
(a) authenticate you and maintain your session;
(b) display your name and profile picture within the Service where relevant;
(c) communicate with you about your account or enquiries;
(d) secure the Service and prevent fraud or abuse.
We do not use Google user data for:
- serving advertisements;
- selling to data brokers;
- determining creditworthiness; or
- any purpose unrelated to providing and improving the Service.
We do not allow humans to read your Google user data except:
- with your explicit consent;
- for security or abuse investigations;
- to comply with applicable law; or
- where the data has been aggregated and anonymised.
You may revoke our access to your Google account at any time via your Google Account permissions.
5. Who we share personal data with
We may share personal data with:
5.1 Service providers
- Google LLC — authentication (Google Sign-In) and analytics (Google Analytics / Site Kit).
- Hosting and infrastructure providers — to run the Site and related applications.
- AI and cloud providers — where a lab demo processes your inputs to generate outputs (only for that demo’s operation).
- Email and support tools — to respond to your requests.
All processors are required to handle data only on our instructions and with appropriate safeguards.
5.2 OpenMinds Group
We may share data with subsidiaries, affiliates, and team members of OM Connect Sdn Bhd and the OpenMinds Group who need access to operate the Service, subject to confidentiality obligations.
5.3 Legal and safety
We may disclose data when required by law, to protect rights and safety, or to investigate violations of our Terms.
5.4 Business transfers
If we are involved in a merger, acquisition, or asset sale, personal data may transfer subject to continued protection under this Policy.
6. Cross-border transfers
Your data may be processed in Malaysia and other countries where our providers operate (including the United States and Singapore). Where data is transferred outside Malaysia, we take reasonable steps to ensure recipients protect it in line with the PDPA.
7. How long we retain personal data
| Data category | Retention period |
|---|---|
| Google sign-in profile data | While your account is active, plus up to 90 days after deletion request |
| Contact and enquiry records | Up to 2 years after the enquiry is resolved |
| Demo/test submissions | Up to 30 days after the demo session, unless you delete earlier or we need longer for support |
| Analytics data | As configured in Google Analytics (typically 14–26 months) |
| Security and abuse logs | Up to 2 years |
| Legal and compliance records | As required by law |
After the retention period, we delete or anonymise data unless we must keep it by law.
8. How we protect your personal data
We use technical and organisational measures including:
- encryption in transit (TLS);
- access controls for staff and systems;
- secure hosting environments;
- processor agreements with third-party providers.
No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and regulators as required by law.
9. Cookies and tracking
We use cookies and similar technologies for:
(a) strictly necessary operation (sessions, security);
(b) analytics (Google Analytics via Site Kit) to understand how the Site is used;
(c) functional preferences where applicable.
You can control cookies through your browser settings. Disabling necessary cookies may affect sign-in and site functionality.
For more on how Google uses data, see How Google uses information from sites or apps that use their services.
10. Your rights under the PDPA
You have the right to:
| Right | What it means |
|---|---|
| Access | Request a copy of personal data we hold about you |
| Correction | Ask us to correct inaccurate or incomplete data |
| Withdraw consent | Withdraw consent for processing based on consent |
| Limit processing | Request limits on certain processing, including direct marketing |
| Deletion | Request deletion, subject to legal retention requirements |
| Complain | Lodge a complaint with the Personal Data Protection Department (JPDP) at www.pdp.gov.my |
To exercise your rights, contact ihsanberahim@openmindsresources.com. We will respond within 21 days as required by the PDPA. We may ask you to verify your identity.
11. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Third-party links and demos
The Site links to third-party websites and hosts demos that may connect to external services (e.g. WhatsApp, cloud AI platforms, client systems). Those services have their own privacy policies. We are not responsible for their practices.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Where appropriate, we will provide additional notice.
14. Contact us
Privacy and data requests:
Email: ihsanberahim@openmindsresources.com
Postal address:
OM Connect Sdn Bhd
C-1-05, Centum @ Oasis Corporate Park
No. 2, Jalan PJU 1A/2, Ara Damansara
47301 Petaling Jaya, Selangor, Malaysia
General enquiries:
https://www.openmindsresources.com/contact-us/
End of Privacy Policy