Privacy Policy
Last updated 25 October 2026
This policy explains what personal data Sorable Sdn Bhd collects when you use Tapmivo, why, and the choices you have. We follow Malaysia's Personal Data Protection Act 2010 and apply the same care to users elsewhere.
What we collect
- Account: name, email, password (stored only as a secure hash) or Google sign-in, timezone.
- Your pages: the content, links, images, services and business details you add.
- Billing: plan and subscription status. Card details are handled by Stripe, not us.
- Enquiries: when a visitor sends an enquiry to a business, we store their name, chosen contact method, message and consent time for that business.
- Analytics: page views and clicks with device type, country and traffic source. We don't use analytics cookies and don't store IP addresses; visitors are counted with a hash that changes daily.
- Safety: link scan results, abuse reports (the reporter's identity is never shown to the reported user) and an audit log of security-relevant actions.
Why we use it
To run and secure the service, publish your pages, process payments, send service emails (verification, receipts, enquiry and safety notices), prevent abuse, and improve Tapmivo. We don't sell personal data or use it for advertising.
Cookies
We use only necessary cookies: your sign-in session and your selected page in the dashboard. Public pages set no cookies.
Service providers
We use trusted providers to run Tapmivo: Vercel (hosting and file storage), Neon (database), Stripe (payments), Resend (email), Google (sign-in and link safety checks) and Cloudflare (spam protection on forms). Data is stored mainly in Singapore and may be processed in other countries by these providers under contracts that protect it.
AI visibility
AI visibility is off by default. If you turn it on, the fields you choose from your published page are shared with AI tools that request them. Drafts and anything you don't select are never shared.
How long we keep it
- Raw analytics events: 90 days (daily totals are kept while your account exists).
- Account and page data: until you delete your account.
- Billing records and the security audit log: as long as the law and security require, even after deletion.
Your rights
You can access, correct and export your data, and delete your account, from Settings. You can also ask us about your data or object to how we use it by emailing support@tapmivo.com. If you sent an enquiry to a business, contact that business about it, or contact us and we'll help.
Security
We use encryption in transit, hashed passwords and tokens, access controls, rate limits and a tamper-evident audit log. No system is perfectly secure; we'll notify you and the authorities of a breach as the law requires.
Children
Tapmivo isn't for children under 13, and accounts require users to be adults.
Changes and contact
We'll post changes here and tell you about material ones. Questions: Sorable Sdn Bhd, support@tapmivo.com.