Privacy Policy

1. Who we are

J ACADEMY NOETIC (202603095495 / JM1042814-A), operating as J Academy, is responsible for personal data collected through jacademy.pro. This notice explains our handling of that data with reference to Malaysia's Personal Data Protection Act 2010, as amended. Contact us at payment@jacademy.pro.

2. Data we collect

You provide information when you contact us, apply for a programme, request a login link, complete a questionnaire or register for an event. Depending on the form, this includes your name, email, phone or WhatsApp number, organisation, industry, referrer, course or cohort, enquiry topic, message, learning goals, work or business situation and registration preferences. Required fields are marked or validated on the form; other fields are optional. Without required information and consent, we cannot process the corresponding online request.

Mastery tools collect profile details, questionnaire answers, personal experiences, self-reported personality information, calculated MBTI tendencies, report content, corrections and review status. Some tools keep drafts on your device; authenticated tools can save drafts to the service. Please avoid including other people's private information or sensitive personal data that is not needed for the request.

Technical records may include submission and consent timestamps, account or session identifiers, request logs, browser information and security-related IP data. The Hydrogen event registration also supports campaign parameters, click and event identifiers, and Meta browser identifiers for advertising attribution.

3. Purposes

We use information to answer enquiries, arrange the next steps you request, manage applications and course access, save and review questionnaire responses, prepare personalised analysis and reports, administer events and requested reminders, and handle corrections, support and policy requests. Consent and operational records help us document submissions, prevent duplicates and protect access. Mastery analysis may use automated or AI processing and coach review; a questionnaire submission is not a guarantee of a particular result. Campaign attribution helps assess event advertising.

4. Legal basis and consent

We request your consent for collecting and using the information described in this notice. Where applicable under Malaysian law, processing may also be necessary to take steps you request before a contract, perform an agreed service or meet legal obligations. A form's privacy checkbox is not blanket permission for unrelated marketing. Event WhatsApp reminders have a separate opt-in. You can withdraw consent by emailing us; withdrawal may mean we can no longer provide a service that requires that information and does not undo processing already carried out lawfully.

5. Disclosure and service providers

Information is available to the J Academy staff and coaches who handle the relevant enquiry, programme or report, and to service providers involved in that workflow. Our website uses Vercel for hosting and delivery and Telegram for internal enquiry notifications. Mastery and event workflows are designed to use Supabase for database, authentication and file storage; email delivery uses Resend or the configured authentication mail service where those workflows are enabled. Automated report workflows may send questionnaire information to an AI processing provider. Event follow-up can use our internal contact-management system, Google Contacts where contact synchronisation is enabled, and WhatsApp; the Hydrogen campaign can use Meta Pixel and conversion services. Provider availability varies by workflow.

We may disclose information when required by law or to handle a lawful request. Links to WhatsApp and other external services take you to services with their own privacy terms. Please review those terms before sharing information there.

6. Retention

Retention depends on the service, enquiry history and any applicable legal obligations. The website does not apply a single automatic deletion period to all records. Mastery submission notices provide for retention until you request deletion or the course team removes the record. Contact notifications may remain in the team's notification history. You may ask us to review or delete records that are no longer needed; some records may need to be retained for legal obligations or resolving an ongoing matter. Device drafts remain in your browser until removed; clearing browser storage can remove those drafts.

7. Security

The website uses HTTPS. Private tools use authentication, access checks or restricted session links where implemented. Keep your login links, report links and device secure, especially on shared devices. No internet transmission or storage method is entirely secure, and this notice does not claim a security certification or an independently audited security standard.

8. Your rights

You may request access to your personal data, correction of inaccurate or incomplete data, and withdrawal of consent by emailing payment@jacademy.pro. You may also ask about limiting use, deletion or data portability where applicable under Malaysian law. Include enough information to identify the relevant enquiry or submission, but do not send passwords. We may need to verify your identity before disclosing or changing records. Requests are subject to applicable legal requirements and exceptions. You can raise concerns with Malaysia's Personal Data Protection Commissioner.

9. Cookies, local storage and analytics

Private questionnaire tools use session cookies and browser storage for access and draft continuity. The language selector uses the URL; the current locale routing does not set a language-preference cookie. The core marketing pages do not include a Google Analytics integration. The Hydrogen campaign supports Meta Pixel page views and registration events, Meta conversion reporting and attribution cookies when configured. These features are specific to that campaign, not a statement that every page runs advertising tracking. You can manage cookies and site storage through your browser; blocking them may prevent login or draft recovery.

10. Cross-border transfers

Hosting, database, email, messaging and AI providers may process information outside Malaysia. Using these services can therefore involve cross-border transfers. Such processing remains subject to applicable Malaysian personal data requirements. Contact us if you need information about a particular workflow or wish to discuss your choices before submitting.

11. Changes to this notice

We may update this notice when our services, processing or legal requirements change. The current version and effective date will be displayed on this page. Where a change requires fresh consent, it should be requested for the affected use.

12. Contact

For privacy questions, access or correction requests, or to withdraw consent, email payment@jacademy.pro and identify the J Academy service concerned.