Privacy Policy

Last updated: 4 September 2026

Synlinker ("we", "us", "our") is a link-in-bio platform operated by Amsyncapital Sdn Bhd, a company registered in Malaysia. This policy explains what personal data we collect, how we use it, and the choices you have. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

Account data — name, email address, phone number, username and password (stored hashed) when you register.
Profile content — the photo, bio text, links, products and appointment settings you choose to publish on your bio page. This content is public by design.
Booking and order data — when a visitor books an appointment or places an order through a bio page, we collect the name, email and phone number they submit, and share it with the page owner so they can fulfil it. For these transactions the page owner decides what to do with that data and is responsible for it; we handle it on their behalf. See section 5 of our Terms of Service.
Seller records — where a page owner sells goods or services through Synlinker, we keep a record of their name, contact details, business registration details and their transactions, because marketplace operators are required to under the Consumer Protection (Electronic Trade Transaction) Regulations 2024.
Payment data — subscription payments are processed by our payment providers (e.g. Stripe). We receive the transaction status and a payment reference, never your full card number.
Usage data — page views, link clicks and basic device/browser information, used to power the analytics we show page owners and to keep the service secure.

2. How we use your data

To provide, maintain and improve the Synlinker service.
To process subscription billing and send transactional emails (receipts, booking confirmations, password resets).
To show page owners aggregated analytics about their own pages.
To prevent fraud, abuse and unauthorised access.
With your consent, to send product updates and offers. You can opt out at any time.

We do not sell your personal data. We share data only with:

Service providers that help us run Synlinker — hosting, cloud storage, payment processing and email delivery — under contractual confidentiality obligations.
Page owners, who receive the booking details submitted by their visitors.
An AI provider, but only for the Synlinker AI writing assistant and only when you choose to use it. See the next paragraph.
Authorities, where disclosure is required by Malaysian law.

3.1 Synlinker AI

Business plan members can use Synlinker AI to suggest wording for their page and to make changes to it by chat or voice — for example adding a link or updating their bio. It is optional and only runs when you use it.

What is sent: your message, the last few messages of that conversation, and a snapshot of your own page: your display name, bio, link titles and addresses (all already public on your page), your plan, and whether your shop and booking slots are set up. When you use "Write it for me", only the text in that field is sent.
What is never sent: your customers' bookings and contact submissions, your email address, payment details, login credentials, and any other member's data.
Where it goes: our AI provider is DeepSeek, whose servers are located in China. Your text therefore leaves Malaysia for the moment it takes to generate a reply.
Voice: if you tap the microphone, speech-to-text is done by your own browser's speech service (for example Google in Chrome, Apple in Safari), under that company's privacy terms. Synlinker receives only the resulting text.
Nothing changes without you: the AI can only propose a change. Your page is updated only after you tap Confirm on it.

If you would rather no text of yours left the country, simply do not use the feature — every part of Synlinker works without it.

4. Cookies

We use cookies and similar technologies for:

Essential cookies — keeping you signed in and securing your session. The service cannot work without these.
Analytics cookies — counting page views and link clicks so page owners can see how their page performs.
Advertising cookies — on our own marketing pages (not on members' bio pages) we use Meta Pixel, TikTok Pixel and Google Analytics to measure whether our advertising works and to show relevant ads on those platforms. These providers may set their own cookies; see their respective privacy policies.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in.

5. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must retain records to meet legal, tax or accounting obligations.

One exception is worth naming: if you sold goods or services through your page, the seller records described in section 1 are kept for three years, as the Consumer Protection (Electronic Trade Transaction) Regulations 2024 require of marketplace operators. Deleting your account does not shorten that period.

6. Your rights under the PDPA

You have the right to access and correct your personal data, withdraw consent to processing, and limit the processing of your data. To exercise these rights, contact us at the address below. We may need to verify your identity before acting on a request.

7. Security

We protect your data with industry-standard measures including encrypted connections (HTTPS), hashed passwords and access controls. No online service can guarantee absolute security, but we work continuously to protect your information.

8. Third-party links

Bio pages contain links chosen by their owners and may embed third-party content (YouTube, Instagram, TikTok, Facebook). Those services have their own privacy policies, and we are not responsible for their practices.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new "last updated" date.

10. Contact us

For privacy questions or PDPA requests, email [email protected].