Privacy Policy
Last updated: March 2026
1. Introduction
Reviewla ("we", "us", "our") operates the reviewla.my website and platform. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By using our platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the service.
2. Data We Collect
We collect the following categories of personal data:
Account Information
- Email address
- Password (encrypted)
- Full name (if provided)
Business Information
- Business name and type
- Google Place ID and Google Review URL
- Business slug (unique identifier)
Customer Data
- Customer phone numbers (for WhatsApp messaging)
- Customer names (if provided)
- Review ratings and feedback text
Usage Data
- Review request counts and statuses
- WhatsApp message delivery statuses
- Platform usage analytics
3. How We Use Data
We use your personal data for the following purposes:
- To provide and maintain the Reviewla service
- To send WhatsApp review request messages to your customers on your behalf
- To process subscription payments via Billplz
- To display review analytics and dashboard data
- To communicate service updates, billing notifications, and support responses
- To improve the platform and develop new features
- To comply with legal obligations
4. Data Storage
Your data is stored in Supabase (PostgreSQL database) hosted on Amazon Web Services (AWS) in the Singapore region (ap-southeast-1). All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.
We implement Row Level Security (RLS) policies on all database tables to ensure that users can only access their own data.
5. Third-Party Services
We share data with the following third-party service providers, strictly for the purpose of operating our service:
- Meta / WhatsApp — Customer phone numbers and message content are sent via the Meta Cloud API to deliver WhatsApp review request messages.
- Billplz — Email address and billing information are shared for payment processing. Billplz is a licensed Malaysian payment gateway.
- Vercel — Our application is hosted on Vercel infrastructure in the Singapore region.
We do not sell, rent, or trade your personal data to any third parties for marketing or advertising purposes.
6. Data Retention
We retain your personal data for as long as your account is active and as needed to provide the service. If you delete your account, all associated personal data will be permanently deleted within 30 days, except where retention is required by law.
Anonymised, aggregated data (such as total review counts) may be retained for analytics purposes and cannot be linked back to individuals.
7. Your Rights Under PDPA
Under the Personal Data Protection Act 2010, you have the following rights:
- Right of Access — You may request a copy of the personal data we hold about you.
- Right of Correction — You may request correction of any inaccurate or incomplete data.
- Right of Deletion — You may request deletion of your personal data by deleting your account.
- Right to Withdraw Consent — You may withdraw consent for data processing at any time by contacting us.
- Right to Lodge a Complaint — You may lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.
To exercise any of these rights, please contact us at support@reviewla.my.
8. Cookies
We use essential cookies only to maintain your authentication session and store minimal preferences. For full details, please see our Cookie Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via the email address associated with your account. The "Last updated" date at the top of this page indicates when this policy was last revised.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: