Last updated: November 14, 2026
Effective date: 14 November 2026
These Terms of Service (“Terms”) govern your use of Email Managed Services (“EMS”, the “Service”), a managed email-threat protection service provided by Noopy Enterprise (the “Company”, “we”, “us”), built on the Company’s MailScan engine. These Terms are prepared to align with the laws of Malaysia, including the Personal Data Protection Act 2010 as amended by the Personal Data Protection (Amendment) Act 2024 (“PDPA”), the Electronic Commerce Act 2006, and the Contract Act 1950.
Please read these Terms carefully. They are a sample document prepared for this site and should be reviewed and executed with qualified Malaysian counsel before commercial use. Nothing in this document is legal advice.
1.1. By registering an account, subscribing to a plan, or otherwise using the Service, you agree to these Terms and form a binding agreement with the Company. Your electronic acceptance has the same force as a signed document under the Electronic Commerce Act 2006.
1.2. If you accept these Terms on behalf of a company, firm, association or other organisation, you represent that you are authorised to bind that organisation, and “you” refers to that organisation.
1.3. If you and the Company sign a separate written contract for the Service (for example a signed proposal or a data-processing agreement), that contract prevails over these Terms to the extent of any conflict.
2.1. The Service screens email for malware, ransomware, phishing, business email compromise (“BEC”) and spam, takes action on detected messages (including quarantine and delivery to junk), and delivers threat alerts to communication channels configured by you (for example WhatsApp or Telegram groups), subject to the delivery models described below.
2.2. Model 1 — On-Premise. The scanning engine is deployed on a virtual machine within your infrastructure and connects to your mail server over IMAP. Email content remains in your environment; only SHA-256 attachment fingerprints may be transmitted to external reputation services. Custom scanning rules written for your business are available under this model.
2.3. Model 2 — Hosted. Mail is processed in the Company’s data centre in Malaysia under a data-processing agreement. A standard rule set shared across customers applies; custom rules are not available under this model.
2.4. New accounts and subscriptions are created and administered through this website, including workspace administration, billing management and audit history.
3.1. Threat alerts are targeted for delivery within five (5) minutes of detection. This is a service target, not a guarantee.
3.2. The Service applies multiple detection layers, including seventy-five (75) antivirus engines, self-learning classifiers and sender-reputation data. No email security service can detect every threat. The Company does not warrant that the Service will detect all threats, filter all spam, or achieve uninterrupted operation, and the Service must not be treated as the sole protection for your business.
3.3. Monthly executive reports in English and Bahasa Malaysia are provided to subscribers.
4.1. You are responsible for the accuracy of the information in your account, for keeping your credentials and session access secure, and for all activity carried out under your account. You must notify the Company immediately of unauthorised access.
4.2. Within a workspace you may assign Owner, Admin and Member roles, invite members subject to your plan’s seat limits, and manage billing. You are responsible for the actions of members of your workspace as if they were your own.
4.3. You are responsible for the configuration of the domains, mailboxes and mail servers you connect to the Service, and for the accuracy of the allow and block lists you maintain under Model 1.
You must not use the Service, or allow it to be used:
The Company may suspend or terminate accounts that breach this section, in accordance with Section 12.
6.1. Your use of the Service is governed by our Privacy Policy. For hosted customers the Company processes personal data and email content on your instructions as a data processor under a data-processing agreement.
6.2. Model 1: email content never leaves your environment. Model 2: email content is hosted in Malaysia and does not undergo cross-border transfer outside Malaysia.
7.1. 30-day pilot. A pilot may be commissioned on one domain. At the end of the pilot period you receive the pilot report and a fixed quote. Unless otherwise agreed in writing, the pilot creates no obligation to subscribe and does not automatically convert into a paid subscription.
7.2. Billing basis. Model 1 is priced per domain; Model 2 is priced per mailbox. Indicative pricing is confirmed at contract. Prices are quoted exclusive of SST unless stated otherwise.
7.3. Custom rules. Scanning rules customised for your business are available on Model 1 and carry a separate customisation fee, quoted and agreed before the work is carried out.
7.4. Trials and subscriptions. Where a trial is provided through this website, one trial per organisation is allowed. Paid subscriptions are billed through the checkout made available on this website (facilitated by a third-party payment provider), per your selected plan and cycle. Fees are payable in advance and are non-refundable except where required by law.
7.5. Overdue amounts. If renewal billing fails, a grace period (currently seven days) applies, after which product access reverts to your fallback plan until payment is resolved. If access to your hosted data is lost due to non-payment, the Company will use reasonable efforts to preserve data for thirty (30) days before deletion, subject to legal retention requirements.
7.6. Price changes. The Company may adjust plan prices on renewal with at least thirty (30) days’ notice. Current subscriptions at the then-current rates are not changed mid-cycle except as required by law.
8.1. The MailScan engine, the Service, and all related software, documentation and materials are owned by the Company and protected by law. These Terms grant you no rights in them except the right to use the Service as described.
8.2. Model 1: you grant the Company’s engine the licence it needs to connect to your mail server and scan mail as configured, in order to provide the Service. You retain all rights in your mail and your data. Model 2: you grant the Company the licence needed to process mail routed to your domain through the Service.
8.3. Aggregated, anonymised statistics derived from Service operation may be used by the Company to improve the Service, including training of self-learning classifiers, without identifying you or your customers.
9.1. The Service is provided “as is” and “as available”, except as expressly stated in a signed contract. To the fullest extent permitted by law, the Company disclaims all other conditions, warranties and representations, express or implied, including fitness for a particular purpose and non-infringement.
9.2. Any statement in marketing materials about protection capabilities is a description of intended function and not a warranty of outcome.
10.1. To the fullest extent permitted by law, the Company is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, data, goodwill or business opportunity.
10.2. The Company’s total aggregate liability arising out of or relating to these Terms is limited to the fees paid by you for the Service in the twelve (12) months immediately preceding the event giving rise to liability (or, for a pilot or free plan, the fees paid in the preceding twelve months up to a maximum of one month’s plan fee).
10.3. Nothing in these Terms limits liability that cannot lawfully be limited, including for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation.
10.4. You remain responsible for maintaining your own backups of email retained in your mail environment, consistent with the reversible nature of quarantining described in these Terms.
11.1. Custom rules are written in consultation with you and tailored to your mail pattern. Rule changes are typically live within five (5) working days, and urgent rules may be actioned on the same day through your alert group. Every rule change is logged, auditable and reversible.
11.2. Custom rules are bespoke to your organisation and are not transferable to other customers.
12.1. You may stop using the Service and close your account at any time. Subscription fees already paid for the current cycle are not refunded.
12.2. The Company may suspend or terminate access where: you breach these Terms and do not cure the breach within the notice period given; access is used in a way that endangers the Service or other customers; or required by law. Suspension is proportionate and, where reasonable, notice is given.
12.3. On termination: hosted data is handled as described in Section 7.5; the Company returns or deletes hosted personal data on your instruction, subject to legal retention; audit history relevant to the termination is retained as required by law.
13.1. The Company may amend these Terms and will publish the amended version on this page. Material changes affecting your rights, including in relation to personal data, are notified by email or in-Service notice at least thirty (30) days before taking effect (unless earlier required by law). Continued use after the notice period constitutes acceptance.
14.1. These Terms are governed by the laws of Malaysia, and the parties submit to the exclusive jurisdiction of the courts of Kuala Lumpur, Malaysia.
14.2. Before commencing proceedings, the parties will attempt in good faith to resolve any dispute by negotiation for thirty (30) days from written notice of the dispute.
Noopy Enterprise
Company registration number: [Company No.]
Registered address: [Registered address, Malaysia]
General enquiries: [support email]
Data protection enquiries: [DPO email]
Related documents: Privacy Policy · Cookie Policy