Privacy Policy

This Privacy Policy describes how KOBARAN TEGUH SDN. BHD. ("we", "us", "our"), operating the WasapFlow Partner Partner platform, collects, uses, and protects your personal information when you use our services.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, company name, and password when you register as a partner.
• Billing Information: Payment method details processed and stored securely by Stripe. We do not store full card numbers.
• API Usage Data: API call logs, WABA registrations, message delivery statistics, and webhook delivery records.
• Technical Data: IP address, browser type, device information, and access timestamps for security and audit purposes.
• Communications: Any messages or support requests you send to us.

2. How We Use Your Information

• To provide, maintain, and improve our platform services
• To process billing and subscription payments via Stripe
• To send service-related notifications (billing alerts, API downtime, security notices)
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations and enforce our terms
• To analyze platform usage and improve our service offering

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: For payment processing. Stripe's privacy policy applies to payment data.
• Meta (Facebook): When you register WABAs, relevant credentials are shared with Meta's WhatsApp Business API.
• Service Providers: Hosting, infrastructure, and monitoring providers who process data on our behalf under confidentiality agreements.
• Legal Authorities: When required by Malaysian law or valid legal process.

4. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law or for billing dispute purposes (up to 7 years for financial records).

5. Security

We implement industry-standard security measures including:

• AES-256 encryption for stored API tokens and credentials
• HTTPS/TLS encryption for all data in transit
• Access controls and authentication for all admin operations
• Regular security audits and log monitoring

6. Your Rights

As a user, you have the right to:

• Access and export your account data
• Correct inaccurate personal information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise these rights, contact us at the details below.

7. Cookies

We use session cookies for authentication and preference storage. We do not use third-party tracking cookies or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance.

9. Contact Us

For privacy-related inquiries:

• Company: KOBARAN TEGUH SDN. BHD.
• Registration: 202601001919 (1664016-P)
• Address: No. 49, Jalan SILC 2/16, Taman Perindustrian SILC, Iskandar Puteri, Johor 79200, Malaysia
• Email: [email protected]