Privacy notice
Updated · Baca dalam Bahasa Malaysia
This notice explains what Lucky Bag AI collects, why, and for how long, as Malaysia’s Personal Data Protection Act 2010 (PDPA) requires. The data user is NICASIA DIGITAL SOLUTIONS (SSM 202603028341), which runs this site.
The short version
- Your files stay on your device. The tools process photos and documents in your browser and never send them to us.
- We count visits without cookies. We do not store IP addresses or the name and version of your browser.
- We store your email address only if you type it in.
What we collect, why, and for how long
All of it comes from your browser while you use this site. We do not buy or receive data about you from anyone else.
| What | Details | Why | Kept for |
|---|---|---|---|
| Page visits | The page address without any query, the domain of the site that sent you here (not the full link), your country as reported by our host, whether your browser describes itself as a bot, and the time. | To see which pages people use and where visitors come from. | 13 months, then deleted |
| Tool events | The event name (for example tool_start), the page address, a few short values such as a tool name or a count, your country and the time. Never a file name or anything from inside a file. | To see whether the tools work and where people stop. | 13 months, then deleted |
| Email address (only if you give it) | Your email address, the tool you asked about, the language of the page, the time, and a random code used to unsubscribe you. | To email you when a tool you asked about opens. | Until you unsubscribe or ask us to delete it |
| Price choices (only if you make one) | The tool, the price shown, the price you picked, your country and the time, plus your email address if you add it. | To set prices that people are willing to pay. | 13 months, then deleted |
What we do not collect
- Your photos, PDFs or any other file you open in a tool.
- IP addresses. Our host sees your IP address in order to deliver the page, and we do not store it.
- User-agent strings, the text your browser sends to say what it is. We only note whether it calls itself a bot.
- Cookies, advertising IDs or device fingerprints.
- Anything through third-party analytics or ad networks. The site loads no scripts, fonts or images from other companies.
Who handles the data
The site and its database run on Cloudflare. When your browser connects, Cloudflare receives your IP address so it can deliver pages and protect the site; Cloudflare’s own privacy policy covers that. The records listed above may be stored in Cloudflare data centres outside Malaysia.
We do not sell this data or share it with anyone else. We will disclose it only if the law requires us to.
Giving your email is your choice
You can use the whole site without giving an email address. If you do not give one, we cannot tell you when a tool opens. Page visits and tool events are counted for everyone, and they contain nothing that identifies you.
Your rights and how to ask for deletion
Under the PDPA you can ask to see the personal data we hold about you, ask us to correct it or delete it, and withdraw your consent at any time. Write to hello@luckybagai.com from the email address concerned and say what you would like us to do. We reply within 21 days.
We have not sent any email yet. Every email we send will include a link to unsubscribe.
Keeping it safe
Only we can read the database. We collect only the fields listed above, so there is almost nothing in it that could identify you.
Changes to this notice
If this notice changes, we will update this page, the Malay version and the date at the top.
Contact
NICASIA DIGITAL SOLUTIONS (SSM 202603028341) · hello@luckybagai.com