Legal

Privacy Policy

Effective date: 13 November 2026

1. Who we are

Acacia Dreams provides construction, maintenance, fabrication, supply, quotation and related business services in Malaysia. This Privacy Policy explains how we handle personal information submitted through our website, WhatsApp business messaging, quotation tools and related customer-support systems.

2. Information we may collect

Depending on how you contact us, we may collect your name, company name, telephone or WhatsApp number, email address, address or location, quotation and order details, product or project requirements, measurements, messages, photographs, documents and other attachments you choose to send us.

Our systems may also record technical information needed to operate and secure the service, such as timestamps, session identifiers, request identifiers, delivery or message status, browser or device information, IP-related security logs and system audit records.

3. How we use information

We use information to respond to enquiries, prepare quotations, process orders, provide installation or support, maintain customer records, prevent abuse, secure our systems, comply with legal obligations and improve our services.

Where automation, AI assistance or calculation tools are enabled, message content and customer-supplied information may be processed to classify requests, prepare draft replies, extract quotation inputs or assist staff. Final business rules, pricing and approvals remain subject to Acacia Dreams' operational controls.

4. WhatsApp and other service providers

If you communicate with us through WhatsApp, information is transmitted using the WhatsApp Business Platform and is also subject to the terms and privacy practices of Meta and WhatsApp. We may use hosting, security, storage, messaging, analytics or AI-processing service providers strictly to operate our services.

We do not sell personal information. We disclose information only where necessary to provide the requested service, to authorized service providers acting on our behalf, to professional advisers, or where required by law.

5. MarketingPlus, Google OAuth and YouTube API Services

MarketingPlus is a Windows desktop content-scheduling application operated by Acacia Dreams. An authorized business user may choose to connect a YouTube channel through the Google OAuth consent process. MarketingPlus uses YouTube API Services solely to confirm the connected channel and upload videos selected and scheduled by the authorized user.

The youtube.readonly permission is used with channels.list?mine=true to obtain the connected channel's ID and basic identity so that the application can verify which account will receive an upload. The youtube.upload permission is used with videos.insert to upload an authorized MP4 video together with its title, description and selected privacy setting. MarketingPlus is not designed to use these permissions to read private videos, subscribers, comments or channel analytics.

The application may store the connected channel identifier, limited connection metadata, scheduled video details, publishing status, provider video IDs and error/audit records needed to prevent duplicate publication and support the service. OAuth access and refresh tokens are kept encrypted in the authorized operator's Windows environment and separated by company. Access is limited to the selected publishing workflow; Acacia Dreams does not sell Google user data or use it for targeted advertising or unrelated AI model training. Data is shared with Google/YouTube only to perform authorized API operations, or with an authorized technical provider when necessary to operate or secure the service.

Users control access to their Google data. You can withdraw MarketingPlus access from your Google Account's third-party connections and permissions and contact [email protected] to request deletion of authorization records or related locally stored data, subject to applicable legal and audit obligations. We retain data only for the operational, security and legal periods reasonably necessary for the purposes described here. Revocation prevents future authorized access; it does not automatically remove a video already published to YouTube, which remains subject to the channel owner's own controls.

MarketingPlus users should also review the Google Privacy Policy and YouTube Terms of Service. By using MarketingPlus features that connect to YouTube API Services, users agree to be bound by the YouTube Terms of Service. Google and YouTube apply their own policies to information processed on their services.

6. Retention and security

We retain personal information only for as long as reasonably necessary for the purposes described above, including customer service, quotation, warranty, accounting, tax, legal and security requirements. We use reasonable administrative and technical controls to protect information, but no internet-based system can be guaranteed to be completely secure.

7. Your choices and requests

You may request access, correction or deletion of personal information that we control, subject to applicable legal and record-keeping requirements. For deletion instructions, see Data Deletion Instructions.

8. Contact

Privacy and data requests may be sent to [email protected].

9. Updates

We may update this Privacy Policy when our services, technology or legal obligations change. The latest version will be published at this URL with its effective date.