Privacy Policy

1 Introduction

Welcome to Servify ("we", "our", or "us"). Servify Exclusive (SSM No: 202603135762 (003854282-V)) operates the website servifymy.com — a digital marketplace connecting Malaysian customers with trusted local service providers.

We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

By using Servify, you consent to the collection and use of your personal data as described in this policy.

2 Data We Collect

We collect the following personal data when you use Servify:

For all users (seekers and providers):

• Full name
• Email address
• Password (stored in encrypted form — we cannot see your password)
• Account creation date and last login

For service providers additionally:

• Business name and description
• WhatsApp phone number
• Service category and location
• Business photos and gallery images
• Pricing information
• Business hours

Automatically collected data:

• IP address and browser type
• Pages visited and time spent on the platform
• Device type and operating system
• Listing view counts (anonymous)

3 How We Use Your Data

We use your personal data solely for the following purposes:

• To create and manage your Servify account
• To display your business profile to potential customers (providers only)
• To process subscription payments via ToyyibPay
• To send transactional emails (account confirmation, payment receipts, trial reminders)
• To respond to your support enquiries
• To improve the platform and user experience
• To detect and prevent fraudulent or abusive activity
• To comply with Malaysian legal obligations

4 Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL database with Row Level Security). We implement the following security measures:

• AES-256-GCM encryption for sensitive stored data
• HTTPS/SSL encryption for all data transmission
• Row Level Security (RLS) — users can only access their own data
• HTTP security headers (HSTS, CSP, X-Frame-Options)
• Rate limiting on all authentication endpoints
• Input sanitisation to prevent SQL injection

Our servers and databases are hosted on infrastructure that complies with international security standards.

5 Third-Party Services

Servify uses the following third-party services which may process your data:

• Supabase — database, authentication and file storage
• ToyyibPay — payment processing for provider subscriptions
• Resend — transactional email delivery
• Vercel — website hosting and content delivery
• Google Fonts — font delivery (no personal data shared)

Each of these services has their own Privacy Policy. We encourage you to review them. We only share the minimum data necessary with these providers to operate the platform.

6 Cookies

Servify uses minimal cookies and local storage for essential platform functionality:

• Session cookies — to keep you logged in
• Preference storage — to remember your saved listings and settings

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7 Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right to Access — request a copy of the personal data we hold about you
• Right to Correction — request correction of inaccurate personal data
• Right to Withdraw Consent — withdraw consent to data processing at any time
• Right to Deletion — request deletion of your account and all associated data
• Right to Limit Processing — request that we limit how we use your data

To exercise any of these rights, contact us at servify.my@gmail.com. We will respond within 14 business days.

8 Data Retention

We retain your personal data for as long as your account is active. Upon account deletion:

• Your profile and personal data are deleted within 30 days
• Payment records may be retained for up to 7 years as required by Malaysian tax law
• Anonymised, aggregated usage data may be retained indefinitely

9 Children's Privacy

Servify is not intended for use by individuals under the age of 18 as registered service providers. Service seekers under 18 may use the platform to browse listings with parental consent. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of Servify after changes constitutes acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us:

• 📧 Email: servify.my@gmail.com
• 🌐 Website: servifymy.com