Privacy Policy

This policy explains how FaezLabs handles personal data across all of its products. It is written to meet the Personal Data Protection Act 2010 (PDPA) in Malaysia.

The data user for the purposes of the PDPA is FAEZ MURSHIDI BIN ADNAN, a sole proprietorship registered with the Companies Commission of Malaysia (SSM) under registration number 202403148374 (003608911-X), trading as FaezLabs and registered at 31, Jalan DC 1/19, Desa Coalfields, 47000 Sungai Buloh, Selangor, Malaysia.

1. What we collect

• Account data — email address, name where you give one, and authentication identifiers.
• Transaction data — what you bought, when, and the amount. Card numbers are handled by HitPay and never reach our systems.
• Content you submit — images and video (BetterPicture), product files and storefront copy (DigitalPasar), campaign briefs (Heboh), goals and progress (GoalSpace), delivery addresses (LampuKita).
• Usage data — pages visited, features used, and error reports, used to fix problems and decide what to build.

2. Why we use it

To provide the product you signed up for, to take payment and issue receipts, to provide support, to prevent fraud and abuse, and to meet our legal and tax obligations. We do not sell personal data.

3. Who we share it with

Only with processors needed to run the products, each under contract and only for the purpose we engage them for:

• HitPay — payment processing (Singapore/Malaysia)
• Supabase — database and authentication hosting
• Vercel and Cloudflare — application hosting and content delivery
• Trigger.dev — background job processing
• Anthropic and other model providers — where a product uses AI to process content you submit
• Resend — transactional email

Some of these process data outside Malaysia. Where they do, we rely on the contractual protections in our agreements with them.

4. Sharing between our own products

Each product keeps its own accounts and its own data. We do not merge your BetterPicture account with your DigitalPasar account, and signing up for one does not create an account in another. Data moves between products only where a feature explicitly says so and you have asked for it.

5. Retention

We keep account and content data while your account is open. When you delete your account we delete your content within 30 days, except transaction records, which we retain for seven years as required by Malaysian tax and accounting law.

6. Your rights

Under the PDPA you can request access to your personal data, ask us to correct it, withdraw consent, or ask us to stop processing it for a given purpose. Email faezmurshidiadnan@gmail.com and we will respond within 21 days.

7. Security

Data is encrypted in transit and at rest, access to production systems is limited to those who need it, and payment credentials are held by our payment processor rather than by us. No system is perfectly secure; if a breach affects your data we will tell you.

8. Children

Our products are not intended for children under 18. We do not knowingly collect their data, and will delete it if we learn we have.

9. Changes and contact

We will post any change to this policy here and notify you of material changes. Questions or complaints: faezmurshidiadnan@gmail.com.