Privacy policy
This notice explains how EggVenture Technology ("EggVenture", "we", "us", "our") handles personal data in the EggVenture dashboard and in the equipment monitoring that supports it. It is published so that we meet the requirements of Malaysia's Personal Data Protection Act 2010, Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022) and the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173). It applies to everyone who uses the dashboard, in whichever of those countries you work.
For the account data described below, EggVenture is the data controller. For the production records and any camera imagery held on your employer's equipment, your employer is responsible for that data and we process it on their instructions as a service provider. If your employer gave you your login, please also read their internal privacy notice, because they decide how your account is used.
We publish this notice in English and in Bahasa Malaysia, and also in Bahasa Indonesia and Filipino for our users in those countries. You can read it at any time from the link in the footer of every page of the dashboard, or directly at https://ai.eggventuretechnology.com/privacy. Where the laws named above require notice in more than one language, the language versions are equal in status and you may rely on the one you read.
Who we are
The service is operated by EggVenture Technology, a company established in Malaysia.
You can reach us about anything in this notice, including our data protection contact, at eggventuretechnology@gmail.com. You can also telephone us on +60 12-255 6718.
If you are not sure whether we or your employer holds a particular item of your data, write to us and we will tell you which of us is responsible.
What this notice covers
This notice covers the EggVenture web dashboard and the account, sign-in, service log and support data that goes with it. It does not cover your employer's own systems, payroll, or records that the farm keeps outside the dashboard.
The dashboard shows production data collected by the counting and tray stacking equipment installed on the farm. That equipment is owned, installed and physically controlled by the farm. Where the equipment stores or transmits images, the farm decides what is kept and for how long.
This notice is a notification. It is not a consent form, and reading it does not mean you have agreed to anything beyond the ordinary use of the service. Where the law requires your consent for something in particular, we ask for it separately, we record it, and you can withdraw it afterwards.
Personal data we collect
We do not collect production counts or equipment details as personal data, because they describe eggs and machines rather than people. The dashboard has no advertising or analytics trackers, and we do not build profiles of how you browse.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account and profile data | Your work email address, your name, your company, your role in the dashboard (company user or administrator) and your interface language | You, or an administrator at your employer who created your account |
| Sign-in and session data | Authentication session records and the session cookie that keeps you signed in, together with the time of each sign-in | Generated when you log in |
| Service logs | The address of the page you requested, the time of the request, the IP address the request came from and the browser user agent, kept for security and fault diagnosis | Generated when you use the dashboard |
| Support correspondence | Messages you send to us, including the email address you write from | You |
| Data stored on your own device | Thumbnails of tray captures, a copy of your device list, cached report summaries and the dashboard preferences you set (which counters feed the Total eggs card, conveyor direction, export options), kept in your browser's IndexedDB and local storage so the dashboard still shows something useful when the farm's connection is weak | Generated in your browser as you use the dashboard |
Whether you must give us your data
Providing your account details is necessary for us to create and run your account. If your employer's administrator does not give us your work email address and the role you hold, we cannot create the account and you cannot sign in to the dashboard. The same goes for the company record your account is attached to.
Everything else in the table above is a by-product of using the service rather than something we ask you for. You are not obliged to write to us for support, and the language cookie and the local caches on your phone are set by the application so that it works; you can clear them at any time through your browser's settings or the control in Settings inside the dashboard.
Why we use it, and on what basis
Where local law requires your consent for something, we ask for it separately and you can withdraw it at any time by writing to us. Withdrawing consent does not affect processing we carried out before you withdrew it, or processing we can lawfully do on another basis.
| Purpose | What it involves | Basis |
|---|---|---|
| Providing the dashboard | Creating and maintaining your account, showing your company's devices and reports, keeping your language choice | Performance of our contract with your employer and you |
| Signing you in and keeping the service secure | Checking your credentials, issuing and validating session cookies, scoping every request to your company so you cannot see another company's data, blocking abuse | Contract, and our legitimate interest in keeping the service secure |
| Running and fixing the service | Server logs, error diagnosis, capacity planning | Our legitimate interest in operating a working, reliable service, balanced against your rights |
| Support and record keeping | Answering your questions, keeping the records we are required to keep for accounting and tax | Contract, and our legal obligations |
| Meeting lawful requests | Responding to a valid request from a regulator or a court | Legal obligation |
Cameras, farm workers and production imagery
The cameras connected to the equipment point at egg trays and machines. They are there to count eggs and to check that trays are stacked correctly. The dashboard does not perform facial recognition, biometric identification, or any analysis of who is in a frame, and we do not use imagery to monitor how individual workers perform.
Because the cameras are installed on a working farm, a person walking past the equipment may appear in a capture. Those images stay on the farm's own hardware and are retrieved for display when you open a capture in the dashboard. The farm decides who may see them and for how long they are kept.
If you work at a farm whose equipment captures you in passing, your questions about that imagery are properly answered by your employer, who is responsible for it. If you think a capture has been misused, you can also tell us at eggventuretechnology@gmail.com and we will help you raise it with the right party.
If you use the dashboard's record control, the video is assembled in your browser and saved to your own device; we do not keep a copy of it.
Where your data is held, including transfers abroad
Our cloud providers keep data in data centres that may be outside your country. Our application hosting is delivered from data centres in the United States, and our database provider stores data in the region configured for the service, which is also likely to be outside Malaysia, Indonesia and the Philippines. That means your account data may be transferred to and stored in another country.
When we transfer personal data across borders we rely on the safeguards each of the laws named above requires. In Malaysia we rely on section 129(2) of the PDPA, which permits a transfer to a place whose law gives protection at least equivalent to the Act, supported by contractual protections agreed with our providers and by a transfer impact assessment. In Indonesia we rely on the conditions in Articles 55 and 56 of UU No. 27 Tahun 2022, as detailed by the implementing regulation PP No. 33 Tahun 2026 when it takes effect on 16 January 2027. In the Philippines we put contractual protections in place of the kind the National Privacy Commission describes in its guidance on cross-border transfers, and we remain accountable for the data.
You can ask us which countries your data is held in and for details of the safeguards that apply to it at eggventuretechnology@gmail.com.
How long we keep it
- Account and profile data: for as long as your employer's subscription is active and your account exists, and for a further period of up to twelve months after the account is closed so that we can answer questions about work already done. Your employer can ask us to delete an account sooner.
- Session and sign-in records: for as long as the session is live, and briefly afterwards for security.
- Service logs: for up to thirty days, unless they are needed to investigate a security incident.
- Support correspondence: for up to three years after the matter is closed.
- Data in your browser's IndexedDB and local storage: until you clear it in the dashboard (Settings has a control for the capture cache), clear your browser data, or uninstall. It is never the only copy of anything.
- Production and camera data on the farm's equipment: kept by the farm, not by us, on the farm's retention rules.
How we protect it, and what happens if something goes wrong
- Traffic between your browser, the dashboard and the equipment is encrypted in transit.
- Every request is scoped to your account and your company, so one company cannot see another's devices, reports or captures.
- Access to production data by our own staff is limited to named individual accounts for the people who need it to run the service.
- Account credentials are stored by our authentication provider in hashed form; our staff cannot read your password.
- If a personal data breach occurs, we tell the affected users and the regulator within the timeframes each country requires: in Malaysia, as soon as practicable and no later than 72 hours after we become aware of it, with notice to affected users no later than 7 days after that notification where the breach is likely to cause significant harm; in Indonesia, within 3x24 hours (72 hours) to those affected and to the supervisory body; in the Philippines, within 72 hours to the National Privacy Commission and to affected users where the breach is likely to give rise to a real risk of serious harm. Our notice tells you what happened, what data was involved, and what you can do about it.
Your rights
Your rights depend on which of the three countries you are in. In every case you can write to eggventuretechnology@gmail.com and we will deal with your request under the law that applies to you.
| Country | Your rights |
|---|---|
| Malaysia (PDPA 2010, as amended in 2024 and 2025) | To be told why we process your data and who receives it; to access the personal data we hold about you and to be told the source of anything we did not collect from you; to correct anything inaccurate or incomplete; to withdraw consent to processing that rests on consent; to ask us to stop or limit processing that is causing you damage or distress; to have your data provided to you or another controller in a usable electronic form (data portability); and not to be subject to a decision based solely on automated processing that has a significant effect on you. |
| Indonesia (UU No. 27 Tahun 2022) | To be informed of the purposes and the legal basis for processing and who we share data with; to have your data completed or corrected; to access and obtain a copy of your data; to ask us to stop processing, erase, or destroy data held about you; to withdraw consent to processing based on consent; to object to processing that is not necessary for the service; to have your data transferred to another controller in a format we can read; to be told about a breach affecting your data within 3x24 hours; to complain to the supervisory authority; and to claim compensation for unlawful processing. |
| Philippines (RA 10173 and its Implementing Rules) | To be informed whether your personal data is being processed and for what; to object to processing, including processing for direct marketing; to access your data; to dispute its accuracy and have it corrected; to ask us to erase or block data that is no longer needed or unlawfully held; to claim damages for unlawful processing; to data portability; to be notified of a breach within 72 hours where it is likely to lead to serious harm; and to complain to the National Privacy Commission. |
Some rights are not absolute. We may refuse a request where the law allows us to, for example where we must keep data for a legal claim or where giving you another person's data would breach their privacy. If we refuse, we tell you why and how to complain.
Making a request, and how long we take
- Write to eggventuretechnology@gmail.com from the email address on your account, or tell your employer's administrator and ask them to pass the request to us. We may ask you to confirm your identity so that we do not hand your data to someone else.
- There is no charge for a request. We may charge a reasonable fee only where a request is clearly unfounded or repeated, and we will tell you before we do.
- We answer access and correction requests within 21 days in Malaysia, as sections 31 and 35 of the PDPA require.
- In Indonesia we respond to a request to exercise your rights, and to any refusal of it, within 3x24 hours (72 hours) of receiving it, as Article 32 of UU No. 27 Tahun 2022 requires.
- In the Philippines we act without undue delay and in any case within thirty (30) working days of receiving a complete request, extended by up to fifteen (15) more working days where the request is complex, following the National Privacy Commission's guidance on data subject rights.
- If we cannot meet a deadline because your request is unusually complex, we tell you why before the deadline passes and we tell you when to expect our answer.
- If you are a farm employee, remember that your employer controls the farm's records. If your request concerns production data rather than your account, we may have to pass the request to them and will tell you when we do.
Children
The dashboard is a workplace tool for farm staff and administrators. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child's data has reached us, write to us and we will delete it.
Automated processing and decisions
The counting and tray stacking features are automated image processing: they look at eggs and trays and produce counts and verdicts. They do not evaluate people, and we do not use them to make decisions with legal or similarly significant effects on you. If that ever changes, this notice and your employer's notice will be updated before the change takes effect.
Changes to this notice
If we change how we handle personal data, we publish the updated notice here with a new date at the top. For a material change we also tell you in the dashboard, and where the law requires it we ask for your consent again. Continuing to use the dashboard after an update means you accept the updated notice, unless the law says otherwise.
Complaints
Please tell us first at eggventuretechnology@gmail.com, because most problems are quick to fix. If you are not satisfied with our answer, you may complain to the authority in your country:
- Malaysia: the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Ministry of Digital, at aduan@pdp.gov.my or through www.pdp.gov.my.
- Indonesia: the supervisory body established under UU No. 27 Tahun 2022, the Lembaga Pelindungan Data Pribadi. Until its complaints channel is in operation you can reach the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital), which supervises the law, through www.komdigi.go.id.
- Philippines: the National Privacy Commission, at complaints@privacy.gov.ph or through www.privacy.gov.ph. A complaint to the Commission can be given due course once we have had the chance to answer you directly.