1. Introduction & Scope
WEBKREATIONS.COM ("we", "us", "our") operates the Tapaubot platform. We respect the privacy of our merchants and their end-customers. This Privacy Policy explains what data we collect, how it is processed, and our strict safeguards to ensure complete compliance with the Personal Data Protection Act 2010 (PDPA) and e-commerce marketplace API data guidelines.
2. Information We Collect
We only collect data strictly necessary to operate fulfillment automation:
- Merchant Account Data: Email address, encrypted login credentials, and store profile identifiers.
- Payment Transaction Data: Handled securely via HitPay. We do not receive, process, or store credit card numbers or banking passwords. We only receive payment status references and transaction amounts to allocate merchant credits.
- Marketplace OAuth Tokens: Secure tokens provided by the Shopee Open Platform to read incoming digital orders and dispatch chat replies on your behalf.
- Order Fulfillment Metadata: Buyer Shopee usernames, order serial numbers, items purchased, and buyer email addresses (provided via Shopee chat or checkout note) used exclusively to dispatch digital goods.
3. Purpose of Data Processing
Data collected through Tapaubot is used exclusively to:
- Trigger instant digital goods delivery (vouchers, keys, access links) upon Shopee payment confirmation;
- Dispatch confirmation emails to buyers via the seller's configured email dispatch mechanism;
- Audit credit ledger movements and maintain seller store analytics;
- Send critical Telegram system notifications and low-stock alerts to the seller.
WE NEVER SELL, RENT, MONETIZE, OR SHARE SELLER DATA OR BUYER INFORMATION WITH THIRD PARTIES FOR MARKETING PURPOSES.
4. Data Security & Encryption Standards
We implement enterprise-grade security protocols to protect sensitive marketplace credentials and inventory payloads:
- At-Rest Encryption: Secret keys, passwords, and sensitive vouchers in our gift and deliverable pools are cryptographically encrypted;
- In-Transit Security: All data transmissions are secured using SSL/TLS 1.3 protocols with modern cipher suites;
- Token Isolation: Access tokens are isolated by tenant store ID, preventing cross-store data leakage.
5. Data Retention & Merchant Rights
Under the PDPA, merchants have the right to request access to their stored personal data, correct inaccurate information, or request full account deletion. Upon account termination, all stored marketplace access tokens, product mappings, and remaining inventory payloads will be permanently purged from our active databases.
6. Data Protection Officer (DPO) Contact
For privacy inquiries, data removal requests, or PDPA-related matters, please contact our Data Protection Officer at:
Data Protection Office • WEBKREATIONS.COM
Email: [email protected]
Malaysia