VSA Docs

Account & Settings

Privacy & PDPA

VSA operates under Malaysia's Personal Data Protection Act 2010 (PDPA). This page summarises what we store and your rights — see the full Privacy Policy for the formal version.

What we store

  • Your account details (email, name, phone)
  • Calculator history and saved leads
  • Biolink content (username, photo, links)
  • Payment records (amount + reference, never card numbers)
  • Audit logs of admin actions on your account

Where it lives

Data sits in Supabase's Singapore (ap-southeast-1) region. Files (banners, profile photos) are in Cloudflare R2. Payments are processed by Chip-In (Malaysia). Email goes through Resend.

Your rights

  • Access — request a copy of your data
  • Correction — fix anything inaccurate
  • Deletion — close your account (data wiped within 30 days)
  • Withdrawal of consent — stop all processing

Email support@verifiedsa.cc to exercise any of these. We respond within 21 days.

Your prospects' data

When you enter prospect details (name, phone, IC) into the leads pipeline, you are the data controller for that information under PDPA. Get consent before adding someone to your pipeline.
Next
FAQ