Privacy notice
How VYROX AI Sdn Bhd handles personal data on this website and inside the LawServa software, under the Personal Data Protection Act 2010 as amended in 2024.
Last updated 15 September 2026
Who this notice is from
VYROX AI Sdn Bhd, Level 16, The Vertical Business Suite Tower A, Bangsar South, 59200 Kuala Lumpur. LawServa is a product of that company. Questions about this notice go to Patrick on +60 19-688 3338.
This website
There is no contact form, no newsletter sign up, no account, and no advertising or analytics tracker on lawserva.com. We do not set cookies for tracking, profiling or advertising.
This site stores nothing at all on your device. There is no cookie, no local storage and no saved preference of any kind, so there is nothing here for you to clear and nothing for us to read on a later visit.
The interactive demonstrations on this site run entirely in your browser. Everything you type into them stays there. Nothing from a demo is transmitted to us or to anybody else, and the data in them is invented.
Our web server keeps ordinary request logs, which include IP addresses, for security and diagnostics. They are kept for a short period and are not used to build a profile of you.
If you press a WhatsApp button, you leave this site and your message is handled under WhatsApp's own terms and privacy policy, which we do not control. We keep the conversation so we can answer you and remember what was discussed.
The LawServa software
This is the important distinction. When a law firm uses LawServa, that firm is the data user in respect of its clients' personal data. We process it on the firm's instructions in order to provide the software, and for no other purpose.
Specifically, we do not sell client data, do not share it with third parties, do not use it for marketing, and do not use it to train any model. Each firm's records are isolated so that no other firm can reach them, and our own operator role cannot read matter content.
Where a firm chooses to run the AI model on its own hardware, the documents and matter text read by that model do not leave the firm's premises at all. Where a firm chooses the hosted option, that processing happens on a machine we operate, and we state in writing where it sits and who can reach it before the firm signs. The tiers are set for the firm at installation rather than switched in the application.
Retention
A law firm's own retention obligations under the Solicitors' Account Rules 1990 and the anti money laundering legislation run to at least six years. LawServa is built to honour that: there is deliberately no facility to delete a ledger entry, a receipt, an audit record or a filed document, and removal takes a document off the working file while keeping it.
If a firm ends its subscription, it can export everything at any time and at no charge. We return or delete what remains on the firm's written instruction, subject to anything we are separately required to keep.
Your rights
Under the Act you may ask for access to personal data we hold about you, ask us to correct it, limit how it is processed, or withdraw a consent you gave. If you are a client of a law firm that uses LawServa, please make that request to the firm, because the firm is the data user and we act on its instructions. If you are a user at a firm, or you contacted us directly, message Patrick on +60 19-688 3338.
Security and breach notification
The technical measures protecting the software are described in detail in the security section. If a personal data breach occurs we will notify the Commissioner within seventy two hours and affected data subjects within seven days, as the Act as amended requires, and we will tell the affected firm as soon as we know, not when we have finished investigating.
Changes
If this notice changes materially we will update the date at the top and tell existing firms directly rather than relying on you to re-read the page.
Questions about this notice, or about a request under the Act, go to Patrick on +60 19-688 3338.
Ask Us on WhatsApp