Legal

Privacy Policy

This placeholder draft explains the intended data practices and must be reviewed for Malaysia’s PDPA and other applicable requirements before launch.

1. Information we collect

We collect account details such as name, email and phone number; submitted articles and images; consent records; transaction references; and service activity.

2. Payment data

Payments are handled by configured processors such as Stripe. We receive transaction identifiers, amounts and status, but do not store raw card or online-banking credentials.

3. How information is used

We use information to operate accounts, review and manage submissions, process payments and refunds, send transactional emails, protect the service and meet legal obligations.

4. Sharing with outlets

The article, image, author details and necessary context are shared with the outlet selected for consideration. Private journalist or editor contact details are not disclosed to customers.

5. Vendors and processors

Hosting, database, storage, authentication, payment and email vendors process limited data under appropriate agreements. Production vendor details should be inserted after configuration.

6. Cookies and analytics

Essential cookies maintain secure sessions. Optional analytics track funnel events without article content or private customer details. The service works if no analytics provider is configured.

7. Transactional emails

We send account and order-status emails. Complete submitted articles are not included in email.

8. Retention and security

Data is retained for the service, disputes, accounting and legal requirements, then deleted or anonymised. Controls include private storage, access policies, encryption in transit and audit logs.

9. Access, correction and deletion

You may request access, correction or deletion, subject to legal retention obligations. Production request procedures and identity verification steps must be finalised.

10. Contact

Insert the production privacy contact, registered entity address and applicable data-protection contact after legal review.