These terms apply when we process personal data on your behalf as part of MacroWA. They form part of our Terms of Service. “We” means Sitehandy Solutions (registration number 201603060232 (NS0159990-H)). “You” means the customer who holds the MacroWA account.

1. Roles

For the data you put into MacroWA, you are the data user under Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended. You decide what data goes in and how it is used. We are your data processor: we process that data only to provide MacroWA to you.

For your own account data, such as your name, email address and billing details, we are the data user. Our Privacy Policy covers that data, not these terms.

2. Data covered

These terms cover the personal data you or your team put into MacroWA, or that MacroWA receives for you, including:

your contacts, contact fields, tags and groups;
message content, media and chat history;
AI agent knowledge, such as products, prices, FAQs, files and links;
webhook targets and the data sent to them.

This data is usually about your own customers, leads and staff.

3. Your instructions

We process the data only on your instructions. You give instructions by using MacroWA and its settings, by accepting these terms and our Terms of Service, and by written requests that we agree to. We do not use the data for our own purposes.

If we believe an instruction breaks the law, we will tell you.

4. Confidentiality

Staff who can access customer data are bound to keep it confidential. They access it only when needed to run MacroWA, keep it secure or help you with a request you made.

5. Security

We protect the data with the measures described on our Security page. These include encrypted connections, encrypted secrets, two-factor authentication, team roles and permissions, an activity log and daily backups.

6. Sub-processors

We use the following service providers (sub-processors) to provide MacroWA:

Meta Platforms: the WhatsApp Business Platform, for customers who connect the official API.
WhatsApp: messages sent through the QR-code connection pass through WhatsApp’s own service.
OpenAI and Z.ai: AI replies and AI Studio, when you use the platform’s AI. If you connect your own AI key, your own agreement with that provider applies to that use.
Stripe, BayarCash and CHIP: payments. Card details stay with them.
Google: reCAPTCHA on sign-in.
Our hosting, email and backup providers.

Google (Google Analytics 4 and Google Tag Manager) and Meta (Meta Pixel) are also used on our marketing website, only when a visitor accepts them. They do not receive the data you put into MacroWA.

If we change this list, we will update it on this page and change the date at the top. If you object to a change, you may close your account.

7. International transfers

Some sub-processors process data outside Malaysia. When that happens, we use providers that protect the data in line with the PDPA.

8. Help with requests from your contacts

Your contacts may ask you to access, correct or stop using their data. MacroWA lets you view, edit, export and delete contacts, and it handles opt-out keywords. If you need more help to answer a request, contact us and we will help where we reasonably can.

If one of your contacts contacts us directly about data in your account, we will refer them to you.

9. Personal data breach

If we become aware of a personal data breach affecting your data, we will tell you without undue delay. We will share the information we have at that time and update you as we learn more. We will help you meet your own duties to notify the authorities or the people affected.

10. End of service

You can export your data at any time before you close your account. After your account is closed, we delete your data following our backup rotation, unless the law requires us to keep it.

11. Your responsibilities

You are responsible for:

having a lawful basis, such as consent, to collect your contacts’ data and to message them;
honouring opt-outs, and not messaging people who have asked you to stop;
not putting sensitive personal data into MacroWA, such as data about health, religious beliefs or political opinions, unless you are allowed to by law;
giving your contacts any privacy notice the law requires;
following our Acceptable Use Policy and WhatsApp’s own rules;
keeping your account, API keys and team access secure.

12. Audits and information

Once a year, we will answer a reasonable written security questionnaire from you. Send it to [email protected]. We do not offer on-site audits.

13. Liability

Each party’s liability under these terms is subject to the limits in our Terms of Service.

14. Changes to these terms

We may update these terms. The date at the top of this page shows when they last changed. If a change materially affects how we process your data, we will tell account holders by email.

15. Language

These terms are available in English and Bahasa Melayu. If the two versions differ, the English version applies.

16. Contact

Questions about these terms: [email protected], or write to Sitehandy Solutions, F-7 Tingkat 1, Bangunan Arked MARA, 71000 Port Dickson, Negeri Sembilan, Malaysia.