Privacy Policy

1. Information we collect

Account details: name, email, mobile number, password (stored only as a hash), company name and SSM number.

Verification documents you upload: identity documents (MyKad, passport, i-KAD or work permit), CIDB and NIOSH cards, certificates, licences, and for owners bank statements and utility bills, with their numbers and expiry dates.

Work data: profiles, trades, jobs you post or apply to, applications, ratings, messages, team members, and for the Pro suite projects, schedules, photos, time entries, invoices and finance records.

Payment data: the amounts held, released and refunded, and your subscription status. Card and bank details are collected and kept by our payment partner Stripe, not by ICP.

Technical data: sign-in times, IP address, device and browser, and basic usage of pages.

2. How we use information

To run the job board and the project tools; verify members; show profiles and jobs; process held payments, payouts, refunds and subscriptions; send notifications and emails you need; keep the service secure and prevent fraud; and meet legal duties.

3. AI features

Some Pro suite features (job summaries, proposals, estimates, risk checks) send the relevant project details to our AI provider, Anthropic, to draft text. We do not send identity documents. AI output is a draft for you to check.

Public: a verified worker’s or contractor’s profile (name, trades, state, ratings, which certificates were checked and their expiry month). Never the documents themselves, ID numbers, phone or email.

Owners with an active subscription and company contractors: a worker’s phone, email and messages. After a hire, the owner and the hired worker or contractor see each other’s contact details.

ICP staff: your documents, to verify them, and job records when deciding a payment split.

Service providers who process data for us: Stripe (payments), our email provider, our cloud hosting, database and file storage, and Anthropic (AI features). They may only use it to provide their service to us.

Authorities, when the law requires it. We do not sell personal data.

5. Cookies and analytics

We use a sign-in cookie to keep you signed in and privacy-friendly page analytics that do not track you across other sites.

6. How long we keep it

Account and work data for as long as your account is open. Payment and invoice records for 7 years, as Malaysian tax law requires. When you close your account we delete or anonymise the rest within 90 days of your request, unless the law needs us to keep it.

7. Your rights and choices

Under the PDPA you may ask to see the personal data we hold about you, have it corrected, or withdraw consent (which may mean we can no longer provide the service). You can update most details yourself in your profile. Email us to make a request; we reply within 21 days.

8. Security

Data is encrypted in transit; documents are stored privately and only shown to you and ICP reviewers; passwords are hashed; accounts lock after repeated failed sign-ins. If you think your account was accessed without permission, change your password and contact us straight away.

9. Data outside Malaysia

Some of our providers store or process data outside Malaysia. We use providers with strong security and contractual protections for your data.

10. Children

ICP TechHub is not for anyone under 18. If we learn we hold a child’s data, we delete it.

11. Changes to this policy

We will tell you about important changes by email or in the app before they apply.

12. Contact

Privacy questions and requests: support@icpglobal.com.my.