Privacy Policy

1. Introduction

Wanzaisoft Technologies (AS0508836-W) operates caridancari.com. This policy explains what information we collect, how we use it and your rights, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Information we collect

• Account information: name, email address, password (stored in encrypted form by Supabase; we cannot see it) or your Google account if you sign in with Google.
• Listing information: company name, phone number, areas, services, website/Facebook links, SSM number, PIC name and any pictures or logo you provide.
• SSM documents you upload for Verified review (stored privately and not visible to the public).
• Chat messages between you and the admin, and any files attached.
• Reviews and likes you give.
• Payment history: plan, period, amount, order number and payment reference. We do not store your card number or bank account details; these are handled by ToyyibPay.
• Usage statistics: listing view counts and, for logged-in users, recent history of listings and pages viewed. This history can be seen only by the admin for support and improvement purposes.
• Live visitor count: an anonymous random code (no IP address) showing the pages being viewed, used only for the admin Live View and deleted automatically after 1 hour.
• Visit statistics: if we enable Google Analytics, Google processes anonymous visit data such as the pages you open, your device type and country.

3. How we use information

• Running your account and showing listings in the directory.
• Reviewing listings and Verified status.
• Processing payments and activating plans.
• Contacting you about your account, listing or payment.
• Preventing misuse and improving the site.

4. What is shown publicly

The listing information you fill in (company name, phone, areas, services and links) is shown publicly because that is the purpose of this directory. The PIC name is shown only if you choose to allow it. Your account email, SSM documents, Chat messages and payment history are not shown publicly.

5. Third parties that process data

• Supabase: database, login authentication and file storage (servers in Singapore).
• Google: sign-in with a Google account, if you choose it.
• ToyyibPay: processes online payments.
• Google AdSense: serves advertising on this site.
• We do not sell your personal information to anyone.

6. Cookies and browser storage

We use your browser's storage to keep you logged in and to remember simple settings such as language. This site shows Google AdSense ads. Google and its advertising partners may use cookies or similar identifiers to serve and measure ads, including ads based on your visits to this or other sites. You can manage ad personalisation at https://adssettings.google.com or disable cookies in your browser settings. Some banners or cards are sponsored by brands and marked "Sponsored"; we do not share your personal information with sponsors.

7. Retention and security

We keep information while your account is active or as needed for the purposes above and for legal requirements (for example payment records). We take reasonable steps to protect your data, including access controls and private file storage, but no online system is completely secure.

8. Your rights

You may ask to access, correct or delete your personal information, and withdraw consent, subject to legal requirements. Contact us at hello@caridancari.com. We will reply within a reasonable time.

9. Changes to this policy

We may update this policy. The latest update date is shown above.