Privacy Policy

At Aka.my URL Shortener, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and services, in compliance with applicable data protection laws, including the Malaysian Personal Data Protection Act (PDPA).

1. Information We Collect

We collect information to provide, manage, and protect our Service. This includes:

  • Account Information: When you register for an account, we collect your email address, password (stored securely as a hash), and any other profile data you choose to provide.
  • Usage Data: We collect analytics regarding how you interact with our service. This includes URLs created, click statistics, IP addresses, referring websites, and device/browser types.
  • Payment Information: If you purchase a premium plan, your payment data is handled securely by our third-party provider, Stripe. We do not store or process your sensitive card details directly on our servers.
  • Cookies: We use cookies for session management and analytics. Please review our Cookies Policy for detailed information.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To operate, maintain, and provide the features of the Service.
  • To process payments and manage premium account upgrades.
  • To provide customer support and respond to your enquiries.
  • To monitor usage trends and improve the user experience.
  • To detect, prevent, and address technical issues, spam, fraud, and abuse.
  • To comply with legal and regulatory obligations.

3. Data Retention

We retain your personal data only for as long as is strictly necessary to fulfil the purposes outlined in this policy:

  • Active Accounts: We keep your account information as long as your account is active.
  • Inactive Accounts: Accounts that have not been logged into for 24 consecutive months may be permanently deleted, along with their associated personal data.
  • Analytics Data: IP addresses and raw click data associated with shortened URLs are routinely anonymised or deleted after 12 months.

You may request the deletion of your account at any time, which will result in the removal of your personal data from our active databases.

4. Data Sharing and International Transfers

We do not sell or rent your personal data. We may share limited information with trusted third parties strictly for the purpose of operating our Service:

  • Service Providers: We use third-party vendors (such as Stripe for payments, Cloudflare for security, and cloud hosting providers) who are bound by confidentiality agreements to protect your data.
  • International Transfers: Our servers and third-party service providers may be located outside of Malaysia. By using our Service, you consent to the transfer, storage, and processing of your data in these jurisdictions, which may have different data protection laws.
  • Legal Compliance: We may disclose your data to law enforcement, government agencies, or authorised third parties if required to do so by law, court order, or legal process.

5. Handling of Malicious Links and Abuse

URL shorteners are occasionally misused to distribute malware, phishing campaigns, or illegal content. To maintain a safe environment:

  • We actively monitor links created on our Service.
  • If we detect that an account is generating malicious links, we reserve the right to share the offending user’s IP address, email, and usage data with cybersecurity organisations, hosting providers, or law enforcement agencies to assist in mitigating cyber threats.

6. Security and Data Breaches

We implement robust, industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Despite our best efforts, no method of transmission over the Internet is completely secure. In the unlikely event of a data breach that compromises your personal data, we will notify affected users via email and post a notice on our website within a reasonable timeframe, in accordance with applicable laws.

7. Your Rights

Subject to applicable data protection laws, you have the following rights regarding your personal data:

  • Access and Review: You may request a copy of the personal data we hold about you.
  • Correction: You can update or correct inaccuracies in your account information.
  • Deletion: You may request the erasure of your personal data ("Right to be Forgotten").
  • Withdrawal of Consent: You can withdraw your consent for data processing at any time by deleting your account.

To exercise any of these rights, please contact us using the information provided below.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by posting a prominent notice on the site or via email prior to the changes taking effect.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us via our contact page at https://aka.my/contact.