Privacy Policy

1. Who we are

Gerai Digital (gerai.digital) is operated by Chelevenild Technologies (Business Reg. No. 202603131930), a business registered in Malaysia ("we", "us", "our"). This Privacy Policy is our notice under the Personal Data Protection Act 2010 (PDPA) of Malaysia. It explains what personal data we process, why, who we share it with, and the choices and rights you have.

It covers two groups of people:

• Merchants: businesses and individuals who sign up for Gerai Digital, create an organisation and run one or more online stores, plus any staff they invite.
• Shoppers: people who buy from a merchant's store on Gerai Digital, whether the store is at a gerai.digital address or on the merchant's own domain.

Part A applies to merchants, Part B applies to shoppers, and Part C applies to everyone.

By signing up, placing an order or otherwise giving us your personal data, you consent to us processing it as this policy describes. Where processing is needed to perform a contract with you or to meet a legal obligation, we may also process it on that basis.

Part A: Merchants

For merchant data, we are the data controller.

A1. Data we collect from merchants

• Account details: your name, email address, phone number and, if you set one, your password. We store passwords as a secure hash, never in readable form. You can also sign in with a one-time link sent to your email, or with Google. If you sign in with Google, we receive your Google account ID, name and email address.
• Organisation details: your company name, company type, business registration (SSM) number, business address and contact details.
• Business verification: to verify your business, you upload your SSM document and identification for the business owner, such as a MyKad or passport. Our authorised staff review these documents. We store them privately, and only you and our reviewing staff can open them. We also store the owner's name and IC number (the IC number is encrypted), and the result of the review.
• Store and catalogue data: store names, web addresses (including your own domain, if you connect one), products, prices, stock, warehouse addresses and other content you add.
• Staff accounts: the names, email addresses and roles of team members you invite.
• Billing details: we bill your plan, and any balance top-ups, through Stripe. Stripe holds your card details. We keep only the card brand, the last four digits, the expiry date, and your invoice, subscription and top-up records.
• Payment and courier connections: if you connect your own payment or courier account (currently CHIP, DelyvaNow or EasyParcel), we store the account IDs, API keys or access tokens needed to use it. We store them encrypted.
• Payout details (Payments by Gerai Digital only): your payout bank, account name and account number (the account number is encrypted), any document you upload to show the account is yours, such as a bank statement header, and a record of each payout, including proof of transfer. Our authorised finance staff review and use these.
• Balance records (Payments or Shipping by Gerai Digital only): a record of each sale, processing fee, refund, shipping charge, top-up and payout between you and us.
• Activity and device data: when you or your staff make changes in the dashboard, we record what changed, who changed it, and the IP address and browser used. You can see this in your Activity log.
• Support messages: anything you include when you contact us, for example by email.

A2. Where we get merchant data

Most of it comes from you. Staff details come from the team member who invites them. If you sign in with Google, some details come from Google. Payment, courier and bank records also come from the providers who handle them, such as Stripe, CHIP, DelyvaNow, EasyParcel and your bank.

A3. How we use merchant data

• To create and run your account, organisation and stores.
• To verify your business and show shoppers that your store is verified.
• To bill you for your plan and top-ups and send billing notices.
• To connect your stores to the payment and courier accounts you choose, or to ours if you use Payments or Shipping by Gerai Digital.
• To hold, account for and pay out your sales if you use Payments by Gerai Digital, and to check that payouts go to the right account.
• To send service emails, such as sign-in links, verification status, billing, payouts, team invites and store reviews.
• To provide support, keep the platform secure, prevent fraud and comply with Malaysian law.
• To send product news, but only if you turn it on. It is off by default, and you can turn it off at any time.

Part B: Shoppers

B1. Our role

When you buy from a store on Gerai Digital, the merchant who runs that store sells to you and is the data controller for your order data. We provide the platform the merchant uses and process your data on the merchant's behalf, as their data processor.

Some merchants use Payments by Gerai Digital. Then you pay through Gerai Digital's own payment account, and we pass the money to the merchant. Your contract of sale is still with the merchant. We are the data controller for the payment and refund records of that order, which we keep as the law requires.

For questions about an order, or about how a merchant uses your data, please contact the merchant first. You can also contact us using the details in C13.

B2. Data collected about your order

• Your name, email address and phone number.
• Your delivery address, or your collection details if you choose self pickup.
• Your answers to any extra questions the merchant asks at checkout.
• Your order details: the items, quantities, prices, delivery method and order status.
• Payment status and reference. If you pay online, you enter your card or bank details on the payment gateway's own page, and neither Gerai Digital nor the merchant stores them. If you pay by bank transfer or DuitNow, the merchant may upload your proof of payment.
• Shipment details, such as the courier, tracking number and delivery status.
• The IP address and browser information of the device you used to place the order, which we record for security and fraud prevention.
• Anything you include if you contact us about an order.

B3. Where we get shopper data

Most of it comes from you when you check out. If you order through a merchant directly, for example by message or phone, the merchant may enter your order for you. Payment and delivery updates come from the payment gateway and the courier.

B4. How shopper data is used and shared

• To take your payment. Your name, email, phone and the items you bought are sent to the payment gateway (currently CHIP) to create your payment. The payment goes to the merchant's own gateway account, or to Gerai Digital's if the merchant uses Payments by Gerai Digital.
• To deliver your order. Your name, phone, email, delivery address and the items in your order are sent to the courier service (currently DelyvaNow or EasyParcel, and the courier they book). The booking is made on the merchant's own courier account, or on Gerai Digital's if the merchant uses Shipping by Gerai Digital.
• To send you order emails, such as order placed, payment received, shipped, ready for pickup and refunds. These come from Gerai Digital's email address and carry the store's name and logo. If the store has a contact email, your replies go to the store.
• To let the merchant manage your order and handle returns, refunds and support.
• To keep the platform secure and prevent fraud.

We do not use shopper data to market Gerai Digital to you, and we do not sell it.

Part C: Everyone

C1. Who we share data with

We do not sell personal data. We share it only with these classes of third parties, and only as needed to run the service:

• Merchants: with the merchant you bought from, who receives your order data.
• Payment providers: CHIP for store payments, on the merchant's account or on ours for Payments by Gerai Digital, and Stripe for plan billing and top-ups.
• Banks: the merchant's payout bank details, when we pay out sales.
• Courier providers: DelyvaNow, EasyParcel and the couriers they book, on the merchant's account or on ours for Shipping by Gerai Digital.
• Sign-in provider: Google, if you choose to sign in with Google.
• AI providers: OpenRouter and the AI model providers it routes to, when an AI feature is used (see C2).
• Maps: Google Maps, for address lookup in the merchant dashboard.
• Hosting, email and infrastructure: our hosting, server and email delivery providers, including Cloudflare.
• Professional advisers: our lawyers, accountants and auditors, under a duty of confidentiality.
• Authorities: when Malaysian law, a court order or a regulator requires it, or to protect our legal rights.
• Business transfers: if our business is merged or sold, with equivalent privacy protection.

Our service providers may only use the data to provide their service, and must keep it secure.

C2. AI features

Gerai Digital uses artificial intelligence (AI) models from third-party providers to power features in the service, and we will keep adding more. Today, for example, AI can read your SSM document to fill in the verification form, create a product listing from your photos, and write product descriptions. Future features may help merchants with tasks such as answering customer questions, managing orders or understanding their sales, and may let shoppers ask a store's assistant about its products.

How we handle data in AI features:

• Only what the feature needs. When you use an AI feature, we send the AI provider only the data needed for that task, such as the document, photo, text or store data the feature works on. If an AI feature works with order or customer data, we process it on the merchant's behalf, in the same way as the rest of the store's data.
• Not used to train AI models. We use AI providers only on terms or settings under which they do not use your data to train their models. We do not use your data to train AI models of our own.
• Not kept by the AI provider. The provider processes the data to produce the result and does not keep it beyond what its terms allow for security and abuse monitoring. We keep the result only where you save it, for example as a product description.
• People make the decisions that matter. AI helps fill in forms and draft content. Decisions about you, such as whether your business is verified or a payout is approved, are made by our staff, not by AI.
• Check what AI produces. AI can make mistakes. Please check anything AI fills in or writes before you save or publish it.
• Clearly marked. We label features that use AI. If a store offers an AI assistant to shoppers, it will say so, and what you type into it is sent to the AI provider to answer you.
• Outside Malaysia. Our AI providers, currently OpenRouter and the model providers it routes to, may process data outside Malaysia (see C9).

Merchants can choose not to use AI features and do the task themselves. If we want to use personal data with AI for a purpose this policy does not describe, we will update this policy first.

C3. Cookies and browser storage

We do not use analytics or advertising trackers. We keep you signed in and remember your cart using your browser's local storage, and we use one cookie to remember your language choice. This is the same on a store at a gerai.digital address and on a merchant's own domain. In the merchant dashboard, Stripe (on billing and top-up pages) and Google Maps may set their own cookies, for example for fraud prevention. Our hosting provider, Cloudflare, may set security cookies. If you clear your browser storage, you will be signed out and your cart will be emptied.

C4. Data retention

We keep personal data only as long as we need it for the purposes in this policy, or as the law requires.

• Closed accounts: an owner can close an organisation, and anyone can close their own login, from the dashboard. A closed organisation's stores go offline straight away. For ninety (90) days, any owner can reopen the organisation, and you can reopen your login by signing in again. After that, we delete the account, organisation and store data, except for the records below that the law requires us to keep. Once a login is deleted, you can sign up again with the same email address as a new account.
• Inactive accounts: if an organisation has had no sign-in, no paid plan, no orders and no balance owed to anyone for six (6) months, or a login that belongs to no organisation has had no sign-in for six (6) months, we close it. We will email you at least thirty (30) days before, and signing in keeps it open. We then delete it in the same way as a closed account.
• Orders, invoices, payments, refunds, payouts and balance records: kept for seven (7) years after the year they relate to, to meet Malaysian tax and accounting rules. After that, shopper details on orders are anonymised and the rest is deleted.
• Verification documents and IC numbers: kept while the account is active and deleted with the account. Documents from a rejected verification are deleted once they are replaced, or with the account. If the merchant used Payments by Gerai Digital, they are kept for seven (7) years after the account closes, together with the payout records, so that we can show who we paid.
• Activity log: IP address and browser details are kept for no longer than twenty-four (24) months. Shopper details in the log are removed when the order they belong to is anonymised.

C5. Security

We protect personal data with encryption in transit (TLS), encrypted storage for sensitive fields such as IC numbers, bank account numbers and API keys, access controls that limit staff access to what their role needs, and regular reviews. Payouts need two members of our staff, one to approve and one to pay. No system is completely secure, so we cannot guarantee absolute security.

Please keep your password and sign-in links to yourself, and tell us straight away at hello@chelevenild.my if you think your account has been used without your permission. Do not send identity documents, bank details or passwords to us or to a merchant by ordinary email or chat. Use the upload forms in the dashboard instead.

If we have reason to believe a personal data breach has happened, we will notify the Personal Data Protection Commissioner as soon as practicable. If the breach is likely to cause you significant harm, we will also tell you without unnecessary delay.

C6. Keeping your data accurate

Please keep your details up to date. Merchants can update their account, organisation and store details in the dashboard at any time. Shoppers can ask the merchant, or us, to correct their details.

C7. Your rights under the PDPA

You can:

• ask to see the personal data we hold about you;
• ask us to correct data that is inaccurate, incomplete, misleading or out of date;
• ask us to send your personal data directly to another organisation of your choice, where this is technically feasible;
• withdraw your consent to us processing your data, by written notice to us;
• ask us to stop using your data for direct marketing;
• ask us to delete your data, subject to the retention rules in C4.

To make a request or a complaint, email our Data Protection Officer at hello@chelevenild.my. We will reply within twenty-one (21) days, as the PDPA requires. We may need to confirm your identity first. For access requests, we may charge a fee where the PDPA allows it.

If you withdraw your consent or ask us to delete data we need to provide the service, we may not be able to keep your account open or complete your order.

Shoppers should contact the merchant first for order-related requests, and we will help the merchant respond. If you are not satisfied with our reply, you can complain to the Personal Data Protection Commissioner (www.pdp.gov.my).

C8. Your choices

• Marketing: product news emails are off unless you turn them on, and you can turn them off at any time in your profile.
• Sign-in: you can sign up with an email address instead of Google.
• AI features: you can fill in forms yourself instead of using the AI helpers.
• Optional details: you can leave out any information not marked as required.
• Your account: owners can close their organisation, and anyone can close their own login, at any time from the dashboard.

C9. Data outside Malaysia

Some of our providers store or process data outside Malaysia, including our hosting, payment, AI and map providers. We only transfer personal data outside Malaysia where the PDPA allows it: where it is needed to provide the service you asked for, with your consent, or where we have taken reasonable steps to make sure the data is protected to the standard the PDPA requires.

C10. What you must give us

• Merchants must give their name, email address, and the organisation details marked as required, to open an account. To publish a store, the business must be verified. To use Payments by Gerai Digital, a verified payout bank account is also needed. Without these, we cannot open the account, publish the store or pay out sales.
• Shoppers must give their name, contact details and, for delivery, an address, so that the merchant can take payment and deliver the order. Without these, the order cannot be placed.
• Everything else is voluntary.

C11. Children

Merchant accounts are for people aged 18 and over. Shoppers under 18 should only buy with the permission of a parent or guardian. If you are a parent or guardian and believe your child has given us personal data without your permission, contact us and we will delete it, subject to the retention rules in C4.

C12. Other websites

Stores may link to other websites and apps, such as a merchant's social media pages, WhatsApp, or a payment or courier page. Those sites have their own privacy policies, and we are not responsible for how they handle your data.

C13. Changes and contact

We may update this policy. If we make significant changes, we will tell merchants by email or in the dashboard, and we will update the effective date above. This policy is available in Bahasa Melayu and English. If the two versions differ, the English version applies.

Chelevenild Technologies
No 32, Jalan SP 10/12, Bandar Saujana Putra, 42610 Jenjarom, Selangor, Malaysia
Email: hello@chelevenild.my
Data Protection Officer: hello@chelevenild.my