FlipyOrder

Privacy Policy

Last updated: 24 October 2026 · Bahasa Melayu di bawah

1. Who is responsible

Underpixel Studio, Selangor, Malaysia runs FlipyOrder and is responsible for the personal data described here. Contact: hello@underpixelstudio.my. This notice is given under Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Sellers (people with a FlipyOrder account)

What we collect

• Email address and password (the password is stored only in a scrambled, one-way form).
• Shop name, shop link, logo, catalogue pages, product names, codes, prices and notes.
• The WhatsApp number(s) and greeting you set for your catalogues. These are shown to buyers so they can contact you.
• Numbers about your catalogues: views, products added, orders sent. These are counts, not people.
• For Pro: Freemius tells us your email, plan, licence and payment status. Freemius handles your card or PayPal details; we never see them.

Why we use it

• To run your account and show your catalogues to buyers.
• To send account emails: confirm your email, reset your password, and important service notices.
• To handle Pro payments, refunds and support.
• To keep FlipyOrder safe (stopping spam, abuse and password guessing) and to improve it.

We need this information to give you the service. Without it, we cannot open an account for you.

3. Buyers (people who open a catalogue link)

• You do not need an account, and we do not ask for your name, phone number or address.
• Your order list is kept only in your own browser, on your device.
• We count views, products added and orders sent, without knowing who you are.
• Your internet (IP) address is used briefly to stop abuse. It is stored only in scrambled form, for up to 15 minutes. Our hosting provider also keeps standard server logs for a short time.
• When you press the WhatsApp button, WhatsApp (Meta) sends your message. The seller then receives your WhatsApp number and your message. From that point, the seller is responsible for how they use your details. Please contact the seller about their own privacy practices.

4. Who we share data with

• Hostinger: hosts the website, database and email.
• Freemius: sells Pro for us and processes payments. Freemius may store and process data outside Malaysia, under its own privacy policy.
• Authorities: only when the law requires it.

We do not sell personal data and we do not use advertising or tracking tools. Fonts and scripts are served from our own server.

5. Cookies and browser storage

• Sellers: one sign-in cookie that keeps you signed in for up to 30 days.
• Buyers: no cookies. The order list is saved in your browser's storage so it is still there when you come back. You can clear it with "Start a new list" or your browser settings.

6. How long we keep it

• Account data: as long as your account exists.
• When you delete your account, your catalogues, pages, products, stats and account details are removed from FlipyOrder straight away. Copies may stay in our host's backups for a limited time until they are replaced.
• Payment records: kept by Freemius as tax law requires.

7. Security

We use HTTPS, scrambled passwords, limited access and regular updates. No online service can be 100% secure; if a data breach affects you, we will tell you as the law requires.

8. Your rights

You can ask to see, correct or delete your personal data, or withdraw your consent, by emailing hello@underpixelstudio.my. Sellers can also delete their account themselves on the Plan page. We answer requests within 21 days. If you are not happy with our answer, you may complain to the Personal Data Protection Department (JPDP) of Malaysia.

9. Children

FlipyOrder is not meant for children under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. The date at the top shows the latest version. For important changes we will email account holders.