Privacy Policy
Last updated: July 2026
At Swaplah, we respect your privacy and are committed to protecting your personal data in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA).
1. Information We Collect
We collect information necessary to provide and improve our marketplace:
- Account Details: Name, email address, profile photo, and login credentials.
- Community Data: The circles you join, listings you post, and messages sent via the app.
- Verification Data: Verification details provided when joining specific circles (visible only to that circle's admins).
- Transaction Data: Details regarding listing boosts or packages purchased (payments are processed securely via third parties; we do not store your banking or card credentials).
- Technical Data: IP address, device information, and usage logs collected automatically for system security and performance.
2. How We Use Your Data
We use your data to:
- Facilitate buying, selling, and swapping within open and private circles.
- Process transactions and deliver paid promotional features.
- Protect our platform against fraud, spam, and unauthorized access.
- Communicate account updates, safety notices, and customer support responses.
3. Data Sharing & Visibility
- Public/Member Visibility: Your public profile shows limited information (typically your display name, active listings, and joined circles).
- Circle Admins: Verification info for private circles is restricted to authorized admins of that specific circle.
- Service Providers: We share necessary data with trusted third-party partners who help us run Swaplah (e.g., Supabase for database hosting, Billplz for payment processing).
- We NEVER sell your personal data to third parties or advertisers.
4. Your Rights (Access, Correction & Deletion)
Under the PDPA, you have the right to access and review your data, request corrections, or request account deletion by emailing hello@swaplah.com (subject to legally required accounting retention periods).
5. Data Security & Storage
We employ industry-standard technical measures (including secure cloud database infrastructure and encryption) to safeguard your personal information against unauthorized access or disclosure.
6. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be reflected on this page with an updated revision date.
Questions or Data Requests?
Contact our Data Protection lead at hello@swaplah.com.