Privacy Policy

Last updated: 7 July 2026

Synlinker ("we", "us", "our") is a link-in-bio platform operated by Amsyncapital Sdn Bhd, a company registered in Malaysia. This policy explains what personal data we collect, how we use it, and the choices you have. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

Account data — name, email address, phone number, username and password (stored hashed) when you register.
Profile content — the photo, bio text, links, products and appointment settings you choose to publish on your bio page. This content is public by design.
Booking data — when a visitor books an appointment through a bio page, we collect the name, email and phone number they submit, and share it with the page owner to fulfil the booking.
Payment data — subscription payments are processed by our payment providers (e.g. Stripe). We receive the transaction status and a payment reference, never your full card number.
Usage data — page views, link clicks and basic device/browser information, used to power the analytics we show page owners and to keep the service secure.

2. How we use your data

To provide, maintain and improve the Synlinker service.
To process subscription billing and send transactional emails (receipts, booking confirmations, password resets).
To show page owners aggregated analytics about their own pages.
To prevent fraud, abuse and unauthorised access.
With your consent, to send product updates and offers. You can opt out at any time.

We do not sell your personal data. We share data only with:

Service providers that help us run Synlinker — hosting, cloud storage, payment processing and email delivery — under contractual confidentiality obligations.
Page owners, who receive the booking details submitted by their visitors.
Authorities, where disclosure is required by Malaysian law.

4. Cookies

We use cookies and similar technologies for:

Essential cookies — keeping you signed in and securing your session. The service cannot work without these.
Analytics cookies — counting page views and link clicks so page owners can see how their page performs.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in.

5. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must retain records to meet legal, tax or accounting obligations.

6. Your rights under the PDPA

You have the right to access and correct your personal data, withdraw consent to processing, and limit the processing of your data. To exercise these rights, contact us at the address below. We may need to verify your identity before acting on a request.

7. Security

We protect your data with industry-standard measures including encrypted connections (HTTPS), hashed passwords and access controls. No online service can guarantee absolute security, but we work continuously to protect your information.

8. Third-party links

Bio pages contain links chosen by their owners and may embed third-party content (YouTube, Instagram, TikTok, Facebook). Those services have their own privacy policies, and we are not responsible for their practices.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new "last updated" date.

10. Contact us

For privacy questions or PDPA requests, email [email protected].