Privacy Policy

Last updated: 18 April 2026

XcelOps is a product of Cybrlestari Sdn. Bhd. (trading as “Cyberlestari”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, and protect your personal information when you access xcelops.cloud or use the XcelOps platform. We operate as a Data User under the Personal Data Protection Act 2010 (Malaysia) and process all personal data in accordance with the seven principles set out therein.

1. Information We Collect

  • Account information — name, email address, company name, and role when you register or request a demo.
  • Platform usage data — feature usage, session activity, and performance metrics to improve the product.
  • Communication records — support requests and correspondence.
  • Technical data — IP address, browser type, device information, and referring URLs.

2. How We Use Your Information

  • To provision and operate the XcelOps platform.
  • To respond to demo requests and support enquiries.
  • To improve product features and user experience.
  • To send product updates and relevant communications (you may opt out at any time).
  • To comply with legal obligations.

3. Salesforce Platform & Cross-Border Data Transfers

XcelOps is built on Salesforce. Data processed through the XcelOps platform may be stored on Salesforce infrastructure in data centres outside Malaysia (including the United States, European Union, and Asia-Pacific regions). Use of the underlying Salesforce platform is also subject to Salesforce’s own Privacy Policy and Terms. Such cross-border transfers are protected by Salesforce’s standard contractual clauses and data processing agreements, which provide an adequate level of protection in accordance with the Personal Data Protection Act 2010. We are an official member of the Salesforce Startup Partner Program.

4. Client Data — Data Processor Obligations

Where we process personal data on behalf of our business clients (for example, employee, project team, or customer data within the XcelOps platform), we act as a Data Processor. In such cases:

  • Client data remains the exclusive property of the client (the Data Controller).
  • We process client data only in accordance with the client’s instructions and the terms of the applicable service or data processing agreement.
  • We do not use client data for our own purposes beyond what is required to deliver the agreed services.
  • Enterprise and GLC clients wishing to establish formal data processing arrangements may contact us at hello@xcelops.cloud.

5. Cookies

We use cookies and analytics tools to understand how visitors interact with xcelops.cloud. You may disable cookies in your browser, though this may limit certain website functionality.

6. Data Sharing

We do not sell your personal data. We may share it with trusted service providers (such as Salesforce, email delivery services, and analytics platforms) under strict confidentiality obligations. We may disclose data where required by law.

7. Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, or resolve disputes. Account data is deleted upon request following account closure.

8. Security

We implement industry-standard security controls including encryption in transit and at rest, access controls, and regular security assessments. No system is completely impenetrable, and we cannot guarantee absolute security.

9. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and report to the relevant authorities as required under applicable law, including the Personal Data Protection Act 2010 as amended.

10. Your Rights

Under the Malaysian Personal Data Protection Act 2010 and applicable laws, you may:

  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data where permitted.
  • Withdraw marketing consent at any time.

Contact us at hello@xcelops.cloud to exercise these rights.

11. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email or a prominent website notice at least 14 days before the changes take effect. Updates will be posted on this page with a revised date.

12. Contact Us

  • Cybrlestari Sdn. Bhd. (operator of XcelOps, trading as Cyberlestari)
  • BO1-A 09, Menara 2, 3 Jalan Bangsar, KL Eco City
  • 59200 Kuala Lumpur, Malaysia
  • Email: hello@xcelops.cloud