Privacy Policy

Account data: When you register, we collect your email address, full name, and phone number.

Usage data: Loan calculations, car model selections, WhatsApp message templates, calculator preferences, and banner settings you configure.

Lead data: When you use the sales pipeline, you may enter prospect information including name, phone number, email address, and IC number. This data belongs to you and is stored solely for your use.

Payment data: When you subscribe to Pro, we collect the transaction amount, payment status, and a payment reference. We do not store full card numbers — card processing is handled by Chip-In.

Technical data: IP address, browser type, and access logs collected automatically by our hosting provider (Cloudflare).

• To provide and operate the VerifiedSA platform
• To process subscription payments via Chip-In
• To send transactional emails (account confirmation, password reset) via Resend
• To enforce subscription tier limits and feature access
• To maintain security audit logs for fraud prevention
• To improve the platform based on usage patterns (aggregated, not individual)

We do not sell your personal data to third parties. We do not use your data for advertising.

We use the following sub-processors to operate the platform:

As a sales advisor, you may enter your prospects' personal data (name, phone, email, IC number) into the leads pipeline. You are the data controller for this information. VerifiedSA acts as a data processor on your behalf.

You are responsible for obtaining your prospects' consent before entering their data into the platform, in accordance with PDPA. IC numbers are particularly sensitive — only collect them when necessary for your sales process.

Prospect data is stored securely and is only accessible to you. It is never shared with other users or third parties.

We retain your data for as long as your account is active. Specifically:

• Account data: Retained until you delete your account
• Lead & calculation data: Retained until you delete it or your account
• Payment records: Retained for 7 years for financial compliance
• Audit logs: Retained for 12 months

When you delete your account, all personal data is permanently removed within 30 days, except payment records required by law.

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Withdrawal of consent — withdraw consent for data processing (this may affect your ability to use the platform)
• Erasure — request deletion of your account and associated data

To exercise any of these rights, email us at support@verifiedsa.cc. We will respond within 21 days.

We implement industry-standard security measures including encrypted data storage, row-level security on all database tables, HTTPS-only access, and regular security audits. Payment data is processed by Chip-In and never stored on our servers in full.

To report a security vulnerability, email security@verifiedsa.cc.

We may update this policy from time to time. We will notify you of significant changes via email or an in-app announcement. Continued use of the platform after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests: