PEOPLEWORKS.AI
Privacy Policy
Operated by Go Foxir Agency
Effective Date: 1 January 2025 | Last Updated: March 2026
PeopleWorks.ai is operated by Go Foxir Agency, a company incorporated in Malaysia. We are committed to protecting the personal data of all individuals who interact with our platform, services, and website in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy explains how we collect, use, store, and disclose your personal data when you use our website at peopleworks.ai, our AI Hiring Assistant (AIHA), HR Operating System (HROS), and any related services (collectively, the "Services").
By using our Services, you consent to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of our Services.
1. Data Controller
The data controller responsible for your personal data is:
Go Foxir Agency
Operating as: PeopleWorks.ai
Address: Suite 33-01, 33rd Floor, Menara Keck Seng, 203, Jln Bukit Bintang, Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Website: https://peopleworks.ai
2. Personal Data We Collect
We collect personal data in the following categories depending on how you interact with our Services:
2.1 Data You Provide Directly
• Name, email address, phone number, and company details when you contact us or register for our Services
• Resume, work history, psychometric assessment responses, and video interview recordings when you apply for positions through our AI Hiring Assistant
• Employee data including identification numbers, payroll information, attendance records, and work schedules when your employer engages PeopleWorks.ai for HR services
• Feedback, communications, and support requests you send to us
2.2 Data Collected Automatically
• IP address, browser type, device information, and usage logs when you visit our website or use our platform
• Cookies and similar tracking technologies for session management and analytics (see Section 8)
• Time and duration of system access for security and audit purposes
2.3 Data Received from Third Parties
• Employer or client-submitted data about employees for the purposes of HR outsourcing services
• Data from integrated third-party platforms including HerdHR, payroll systems, and communication tools
3. Purposes of Processing
We process your personal data for the following purposes:
• To provide, maintain, and improve our HR outsourcing, payroll, and AI-assisted recruitment services
• To screen, assess, and evaluate candidates on behalf of our client employers
• To process payroll, manage attendance, and administer employment-related functions
• To communicate with you regarding your enquiries, service updates, and support requests
• To comply with Malaysian employment law, tax obligations, and regulatory requirements
• To develop and train our AI models and improve the accuracy of our assessment tools (using anonymised or aggregated data only)
• To prevent fraud, ensure platform security, and protect the rights of all users
• To send marketing communications where you have provided consent (you may opt out at any time)
4. Legal Basis for Processing
Under the PDPA 2010 and applicable Malaysian law, we process your personal data on the following grounds:
• Contractual necessity: to fulfil our obligations to you or your employer under a service agreement
• Legal compliance: to meet our obligations under Malaysian employment, tax, and data protection laws
• Legitimate interests: to operate, secure, and improve our business operations, provided such interests do not override your rights
• Consent: for marketing communications and any optional processing activities where we have sought your explicit consent
5. Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Retention periods include:
• Employee payroll and attendance records: Minimum 7 years in accordance with Malaysian tax and employment regulations
• Recruitment and assessment data: Up to 2 years from the date of application, unless you are employed or consent to longer retention
• Client contact and business records: Duration of the client relationship plus 7 years
• Website and platform usage logs: Up to 12 months
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.
6. Disclosure of Personal Data
We do not sell your personal data. We may share it with:
• Client employers who have engaged PeopleWorks.ai for recruitment or HR services, to the extent necessary to fulfil those services
• Third-party service providers and technology vendors (including cloud hosting, payroll software, and communication platforms) who process data on our behalf under appropriate data processing agreements
• Regulatory authorities, government bodies, and law enforcement where required by law or court order
• Professional advisers including legal counsel and auditors under obligations of confidentiality
All third-party vendors are contractually bound to handle your data in accordance with applicable data protection laws and our instructions.
7. Cross-Border Data Transfer
Our services may involve the processing or storage of data on servers located outside of Malaysia, including within the European Economic Area and other jurisdictions. Where such transfers occur, we implement appropriate safeguards including contractual protections to ensure your data receives equivalent protection to that required under Malaysian law.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
• Maintain your session and remember your preferences
• Analyse website traffic and improve user experience
• Support security and fraud prevention functions
You may configure your browser to refuse cookies. Note that disabling cookies may affect the functionality of certain parts of our website. We do not use cookies to track your activity across unrelated third-party websites.
9. Your Rights Under the PDPA
As a data subject under the Personal Data Protection Act 2010, you have the right to:
• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Withdrawal of Consent: Withdraw consent for processing activities based on consent, at any time
• Complaint: Lodge a complaint with the relevant data protection authority in Malaysia
To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 21 days. Note that certain data may be exempt from access or correction where required by law or where it would prejudice a third party's rights.
10. Security of Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, role-based permissions, and regular security reviews of our systems.
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to take steps to protect your own account credentials.
11. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take prompt steps to delete such data.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where appropriate, by direct communication. We encourage you to review this Policy periodically.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact:
Data Protection Officer
PeopleWorks.ai | Go Foxir Agency
Email: [email protected]
Website: https://peopleworks.ai
This Privacy Policy is governed by and construed in accordance with the laws of Malaysia.