Privacy Policy

1Who this policy is for

This policy covers three groups of people:

• Merchants: businesses and their staff who sign up for Bverr and run a workspace.
• Merchants’ customers: people who order, buy or book through a Bverr-powered workspace.
• Visitors: anyone who visits our websites or contacts our support team.

When a merchant runs a workspace, the merchant decides what information is collected from its customers and how it is used. We process that information on the merchant’s behalf so we can provide the Services. If you are a customer of a Bverr-powered business, please read that business’s own privacy policy and contact the business first about your information. If you contact us instead, we will pass your request to the business and help it respond.

2Our values

Your information belongs to you. We only collect what we need to provide and improve the Services, and we delete it when we no longer need it.

We protect your information from others. We do not sell personal data. If someone asks us for your information, we will refuse unless you agree or we are legally required to share it.

We help merchants look after their customers. We build the Services so merchants can handle their customers’ data responsibly, and we support them when their customers have questions about their data.

3What information we collect

From merchants

• Account details: name, email address, phone number, business name and login details.
• Billing details: billing address, plan, invoices and payment history. Card and online banking details are entered directly with our payment partners. We do not store full card numbers.
• Workspace details: your chosen subdomain and custom domain, workspace settings, the staff users you add, and the content you upload.
• Usage information: how you use your account and workspace, such as logins, features used, and usage against your plan limits.
• Communications: emails, support requests, feedback and anything else you send us.

From merchants’ customers (on the merchant’s behalf)

• Name, contact details, delivery address, order or booking details and payment status, as submitted to a workspace.

From visitors and everyone using the Services

• Device and technical information: IP address, browser and device type, operating system, pages visited, referring website, and dates and times of access.
• Cookie data: see Section 9.

From other sources

• Payment confirmations and statuses from our payment partners.
• Information from apps and outside services a merchant connects to their workspace, such as payment, delivery or marketing services.

4Why we use your information

We use personal data to:

• create and manage accounts and set up workspaces;
• process free trials, subscriptions, renewals and invoices;
• provide, maintain, update, secure and support the Services;
• apply plan limits and enforce our Terms of Service;
• contact merchants about their account, billing, service changes and support requests;
• detect and prevent fraud, abuse, security incidents and technical problems;
• understand how the Services are used so we can improve them;
• send news, offers and product updates to merchants who have agreed to receive them (you can unsubscribe at any time);
• meet our legal, tax and accounting obligations and respond to lawful requests.

We use merchants’ customer data only to provide the Services to that merchant. We do not use it for our own marketing, and we do not sell it.

5Your choices and rights

We believe you should be able to see and control your personal data. Subject to some legal limits, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct information that is wrong or out of date;
• delete your information;
• stop or limit how we use your information, including for marketing;
• give you your information in a format you can take to another service.

To make a request, contact us using the details in Section 10. We may need to verify your identity before acting on a request. We will not charge you more or give you a lower level of service for making a request.

If you are a customer of a Bverr-powered business, please send your request to that business, as it decides how your data is used.

Some requests may affect our ability to provide the Services. For example, if you ask us to delete your account information, we can no longer run your workspace.

6Who we share your information with

We do not sell personal data. We share it only as needed with:

• Service providers who help us run the Services, such as cloud hosting and server management, email delivery, payment processing, and customer support tools. They may only use the data to provide services to us.
• Apps and outside services a merchant switches on, such as payment gateways, delivery providers or marketing platforms. Data is shared only as needed for the integration to work, and the provider’s own privacy policy applies.
• The merchant, where you are a customer of a Bverr-powered business.
• Professional advisers, such as accountants, auditors and lawyers, where needed.
• Authorities, where required by law or a valid legal order, or to protect the rights, property or safety of Bverr, our users or others. Where we are allowed to, we will tell you before sharing.
• A buyer or successor, if our business is reorganised, merged or sold. Your information will remain protected under this policy.

7Where we send your information

We are based in Malaysia and serve businesses in Malaysia, Singapore and Brunei. Some of our service providers may store or process data in other countries. When we send personal data outside your country, we take reasonable steps to make sure it stays protected, for example by working with reputable providers and putting appropriate contractual safeguards in place.

8How long we keep your information

We keep personal data only as long as we need it for the purposes in this policy, to meet legal requirements, to resolve disputes, and to enforce our agreements.

• Account and workspace data: while your account is active, and for 30 days after your subscription ends so you can reactivate or request an export. After that, your workspace and its content are deleted.
• Billing and transaction records: for as long as tax and accounting laws require (generally 7 years).
• Support communications: for up to 2 years after the matter is closed.
• Backups: we back up the Services daily and keep each backup for 14 days. Deleted data may remain in backups for up to 14 days before it is overwritten.

For data we process for merchants, the merchant decides how long its customers’ data is kept while the workspace is active.

When we no longer need information, we delete it or keep it only in an anonymised form that no longer identifies anyone.

9How we protect your information and use cookies

Security. We use technical and organisational measures to protect personal data. These include encrypted (HTTPS) connections, access controls that limit staff access to those who need it, separation between workspaces, daily backups, monitoring and security updates. No method of sending or storing data over the internet is 100% secure, so we cannot guarantee absolute security. If a security incident affects your personal data, we will let you know where appropriate. If it affects a workspace, we will tell the merchant promptly so they can inform their customers.

Cookies. We use cookies and similar technologies to keep you signed in, remember your preferences, protect the Services, and understand how our websites are used. Essential cookies are needed for the Services to work. Where we use analytics or marketing cookies, we will ask for your consent where required. You can manage cookies in your browser settings, but blocking essential cookies may stop parts of the Services from working.

Workspaces also use cookies, for example for shopping carts and checkout. The merchant running the workspace is responsible for telling its customers about these.

Children. The Services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

10How you can reach us

If you have a question, request or complaint about how we handle personal data, please contact us:

If you have a question about how a Bverr-powered business handles your data, please contact that business directly or read its privacy policy.