Privacy Policy
Last updated: 17 October 2026
OnLaris is an AI social media manager operated by Revindustri Services (003236320-A) ("we", "us"). This policy explains what personal data we collect when you use the OnLaris app and website, how we use it, and the choices you have. It is written to meet Malaysia's Personal Data Protection Act 2010 (PDPA) and Meta's Platform Terms.
1. Data we collect
From you:
• Account details: your email address and sign-in information.
• Business information you give us in chat: what you sell, products, prices, photos, delivery areas, how to order, and things the AI must never say.
• Chat messages and photos you send to the AI, and edits you make to drafts.
• Your settings, such as search words, focus, and whether auto reply is on.
• Your device's push notification token, so we can notify you.
From Threads, only after you connect your account through Meta's permission screen:
• Your Threads profile ID, username and whether the profile is public.
• Your posts, replies and their insights (views, likes, replies, reposts, quotes, new followers).
• An access token that lets us act for you within the permissions you granted.
• Public Threads posts that match your search words, including the author's username and post text, so the AI can find people asking to buy what you sell.
Automatically: basic technical logs (such as request times and errors) and AI usage counts per profile.
2. How we use it
• To draft, schedule and publish posts on your Threads account when you approve them.
• To find public posts from people looking to buy, suggest replies, and publish replies you approve, or that auto reply sends if you turned it on.
• To show your insights and rank your posts.
• To keep your business information up to date and learn your writing style.
• To send you notifications, keep the service secure, fix problems and measure cost.
We do not sell your data, use it for advertising, or use Threads data for any purpose other than providing the service to you.
3. AI processing
We use Claude, an AI model provided by Anthropic, through Anthropic's commercial API. To draft posts and replies, we send Anthropic the relevant business information, chat messages, photos and Threads post text. Anthropic processes this data to return a response and does not use it to train its models under its commercial terms. AI output can be wrong; nothing important is published without your approval unless you turn on auto reply.
4. Who we share it with
We share data only with providers that help us run the service:
• Cloudflare: hosting, databases and file storage.
• Anthropic: AI processing, as described above.
• Meta: to read from and publish to Threads on your behalf.
• Expo: to deliver push notifications.
We may also disclose data if required by law. These providers may store or process data outside Malaysia; we use them only for the purposes in this policy.
5. How long we keep it
We keep your data while your account or Threads profile is connected. When you remove a profile, we delete that profile's data, including its token, posts, drafts, replies, business information and photos. When you delete your account, we delete all of your data. Backups and logs are removed within 30 days.
6. Deleting your data
You can delete your data at any time. Step-by-step instructions are at onlaris.com/data-deletion.
• In the app, open Profil and tap "Buang profil dan datanya" to remove a Threads profile and all of its data.
• Email hello@onlaris.com from your account email and ask us to delete your account. We will confirm within 30 days.
• Remove OnLaris from your Threads settings under Website permissions. Meta notifies us and we delete the data for that profile.
7. Your rights
Under the PDPA you may ask to access or correct your personal data, or withdraw your consent, by emailing hello@onlaris.com. Withdrawing consent may mean we can no longer provide the service. You can also revoke our access to Threads at any time in your Threads settings.
8. Security
Access tokens are encrypted at rest, photos are stored privately, and access to systems is restricted. No service is completely secure, but we work to protect your data and will tell you about a breach that affects you as required by law.
9. Children
OnLaris is for businesses and is not meant for anyone under 18.
10. Changes
We may update this policy. We will change the date above and tell you in the app or by email about important changes.
11. Contact
Revindustri Services (003236320-A), Malaysia. Email: hello@onlaris.com