DRAFT: this document is a general template and must be reviewed by a qualified Malaysian lawyer before publishing.

Privacy Policy

Last updated: 27 October 2026

This policy explains how Synn Media handles personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data we collect

2. Why we use it

To provide and bill the service, post content to your destinations, send service messages, prevent abuse (for example the one-free-test limit), and meet legal obligations.

3. Sharing

We share data only with service providers needed to run the service: Stripe (payments), Google Firebase (login), Buffer, WhatsApp/Meta and Telegram (posting), and our hosting provider (Cloudflare). We do not sell personal data.

4. Cross-border transfer

Some providers process data outside Malaysia. We use reputable providers with appropriate safeguards.

5. Retention

We keep data while your account is active and for up to 12 months after, or longer where required by law (for example tax records). Tokens are deleted when you disconnect or cancel.

6. Security

We use HTTPS, encryption at rest for tokens, access controls and rate limiting. No system is perfectly secure; tell us promptly if you suspect misuse.

7. Your rights

Under the PDPA you may request access to and correction of your personal data, and withdraw consent (which may end the service). Contact us to make a request.

8. Cookies and local storage

We use browser local storage for things like your tour progress, sound preference and free-test status. Login uses Firebase session storage.

9. Contact

WhatsApp +60 11-3955 3146 or via synnmlbb.com. Notice in Bahasa Melayu available on request.