Privacy Policy

1. Information Collection

We collect two types of information:

• Personal Information: name, email address, phone number, WhatsApp number, company name, billing address, and shipping address
• Non-Personal Information: IP address, browser type, device type, operating system, pages visited, visit time, and Cookies data

2. Information Usage

We use the collected information for the following purposes:

• Providing and maintaining Platform services
• Processing your subscriptions and transactions
• Improving and personalizing user experience
• Communicating with you regarding services
• Analyzing usage trends and optimizing Platform performance
• Ensuring Platform security and preventing fraud
• Complying with legal and regulatory requirements

3. Information Sharing

We do not sell your personal information. We may share your information with third parties in the following circumstances:

• Payment gateway providers (for processing transactions)
• Courier service providers (for shipping and logistics tracking)
• Cloud service providers (for data storage and Platform operations)
• AI service providers (for AI try-on, video generation, and copy generation)
• WhatsApp API providers (for sending notifications and verification codes)
• When required by law or lawful government requests
• To protect the legitimate interests of the Company or its users

4. Third-Party Services

To deliver the full service, the Platform integrates the following primary third-party services. Each service receives only the minimum data required to perform its function:

• Cloudflare R2: We use Cloudflare R2 to store uploaded images, videos, and AI try-on outputs. R2 data centers are globally distributed and your commercial data is not shared with third parties.
• Kling AI (kuaishou.com): AI try-on and video generation call the official Kling API from Kuaishou. Images/videos uploaded to Kling are migrated by us to R2 within 30 days after processing completes; Kling retains the original data for 30 days before deletion.
• Wassenger: Daily WhatsApp reports and 2FA verification codes are sent via the Wassenger API. Message content passes through Wassenger servers but is not stored.
• PaySeller: Payment data goes directly to the PaySeller gateway. We do not store credit card or e-Wallet credentials.
• AutoCount: Only invoice, payment, and customer data are synced, consistent with the scope you authorize.
• Claude / OpenAI: AI copy generation calls official APIs. Input content is handled under each provider's privacy policy and is not used for model training.

5. Data Protection

We implement appropriate technical and administrative measures to protect your information, including but not limited to:

• SSL/TLS encryption for data transmission
• Passwords stored using bcrypt hashing, never in plain text
• Access controls to limit data access permissions
• Regular security audits and vulnerability patching
• Regular data backups to prevent accidental loss

6. Cookies

The Platform uses Cookies to enhance your browsing experience. Cookies are used to remember your language preferences, login status, and other settings. You may disable Cookies through your browser settings, but this may affect the functionality of certain features.

7. Data Retention

We retain your personal information for as long as you use the Platform and for a reasonable period thereafter. If you request account deletion, we will remove your personal data within 30 business days, except for information required to be retained by law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Withdraw your consent to data processing
• Request export of your data

9. Protection of Minors

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected information from a minor, we will promptly delete the relevant data.

10. Policy Changes

The Company reserves the right to modify this Privacy Policy at any time. Updated policies will be published on this page with a revised effective date. Continued use of the Platform constitutes acceptance of the updated policy. Significant changes will be communicated to users via email or Platform notifications.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact support@netshop.my