Privacy Policy
Effective date: 29 May 2026
Compliant with Malaysia's Personal Data Protection Act 2010 (PDPA)
1. Data Controller
MY-INFLUENCE ("we", "us", "the Platform") is the data controller responsible for the personal data you provide when using our services at myinfluencekl.com.
Contact: support@myinfluencekl.com
2. Personal Data We Collect
We collect the following categories of personal data:
Account Data (all users)
- Full name (collected at registration for account identification)
- Email address
- Password (stored as a bcrypt hash — never in plain text)
- Phone number
- State/Region (Malaysian state)
- Preferred language
Creator Profile Data (KOL/KOC accounts)
- Social media handles (TikTok, Instagram, Facebook, Xiaohongshu)
- Publicly available follower counts and engagement metrics (scraped from public profiles)
- Profile photo (uploaded voluntarily)
- Portfolio URLs (uploaded voluntarily)
- Service pricing
- Category and skill tags
Brand Profile Data
- Company or brand name
- Brand logo (uploaded voluntarily)
Transaction & Financial Data
- Order amounts and payment history
- Wallet balances (pending and available)
- Cashout requests: bank name, account number, account holder name
- Payout and refund records
Usage Data
- Login timestamps
- Profile view counts
- Platform activity logs (for fraud detection purposes)
3. How We Use Your Data
- Platform operation: To create and manage your account, match Creators with Brands, and facilitate campaigns.
- Payment processing: To manage escrow funds, process payouts to Creators, and handle refunds to Brands.
- Transactional notifications: To send emails about order status changes, payment confirmations, dispute updates, and cashout approvals.
- Fraud detection: To monitor follower growth patterns and detect artificial inflation (e.g., sudden spikes >300% within 7 days).
- Platform analytics: Aggregated, non-identifiable analytics are used by platform administrators to improve the service.
- Legal compliance: To comply with Malaysian law, including tax obligations and lawful requests from authorities.
4. Third-Party Data Processors
We share your data with the following trusted third-party processors who operate under contractual data protection obligations:
We do not sell your personal data to third parties for advertising or marketing purposes.
5. Data Retention
- Account data: Retained while your account is active. Upon account deletion request, personal data is removed within 30 days, subject to the exceptions below.
- Transaction records: Retained for 7 years after the transaction date to comply with Malaysian tax and financial record-keeping requirements under the Income Tax Act 1967.
- Bank/cashout details: Retained for 7 years for financial record-keeping purposes.
- Dispute records: Retained for 3 years after resolution.
6. Your Rights Under the PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right of correction: Request correction of inaccurate or incomplete personal data.
- Right to withdraw consent: Withdraw consent to the processing of your personal data. Note that withdrawal may affect your ability to use certain platform features.
- Right to limit processing: Request that we limit how we use your data in certain circumstances.
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements (Section 5).
To exercise any of these rights, contact us at support@myinfluencekl.com. We will respond within 21 days of receiving your request.
7. Cookies
- We use session cookies only — these are required for authentication and keeping you logged in.
- We do not use advertising cookies, third-party tracking pixels, or behavioural analytics cookies.
- Vercel Analytics (used for platform performance monitoring) does not use cookies and collects only anonymised, aggregate data.
8. Security
- All data is transmitted over HTTPS/TLS encryption.
- Database access is protected by Row-Level Security (RLS) — users can only access their own data; admin access is controlled by server-side role verification.
- Passwords are hashed using industry-standard bcrypt and are never stored or transmitted in plain text.
- Bank details provided for cashout requests are accessible only to platform administrators.
- We conduct periodic security reviews and take prompt action to address vulnerabilities.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to all registered users at least 14 days before the new policy takes effect. Continued use of the Platform after the effective date constitutes acceptance.
10. Contact Us
For privacy-related enquiries, data access requests, or to exercise your PDPA rights, contact our data team at: support@myinfluencekl.com
MY-INFLUENCE — myinfluencekl.com