This policy explains what personal data we collect when you use MacroWA or visit this website, why we collect it, who we share it with and the choices you have. We keep it short and plain. If anything is unclear, ask us.

1. Who we are

MacroWA is a software-as-a-service WhatsApp marketing, automation and AI platform. It is run by Sitehandy Solutions (registration number 201603060232 (NS0159990-H)), F-7 Tingkat 1, Bangunan Arked MARA, 71000 Port Dickson, Negeri Sembilan, Malaysia.

For the personal data described in this policy, we are the data user responsible for it under Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended. In this policy, “we”, “us” and “our” mean Sitehandy Solutions.

2. What this policy covers, and what it does not

It covers personal data about:

people who sign up for and use a MacroWA account, including team members invited to an account;
visitors to macrowa.com and to the dashboard at dash.macrowa.com;
people who contact us, ask for support or join our affiliate program.

It does not cover the data our customers put into MacroWA. That includes their contacts, contact fields, tags, message content, media, chat history, AI agent knowledge and webhook targets. For that data, the customer is the data user and decides how it is used. We process it only on the customer’s instructions, under our Data Processing Terms.

If you received a WhatsApp message from a business that uses MacroWA, that business is responsible for your data. Please contact the business directly about it.

3. Data we collect

When you create an account. Your name, email address, phone number, company name and sign-in details. If you invite team members, we collect their name and email address so they can sign in.

When you use the dashboard. Login and security logs, such as sign-in times and the IP address used. We also keep an activity log that shows who in your team did what, and when. We store the details of the WhatsApp numbers you connect. Secrets such as API keys and connection tokens are encrypted.

When you buy a plan. Your billing details, such as your billing name, company, address and email address, the plan you chose and your payment records. Card and bank details are handled by our payment providers (Stripe, BayarCash and CHIP) and stay with them. We do not store them.

When you ask for support. Your support tickets and what you tell us in them. If you ask us to look into a problem in your account, we may see the data involved. We only look at what is needed to help you, and only while working on your request.

When you join the affiliate program. Your affiliate details, the businesses you refer and the commission you earn.

When you contact us. The contact form on this website does not send anything to us or store anything. It opens WhatsApp or your email app with your message filled in. We receive only what you choose to send, usually your name, email address or phone number, and your message. WhatsApp is run by Meta under its own privacy policy.

When you visit this website. Your theme choice (light or dark), language choice and cookie choice are saved in your own browser. Analytics (Google Analytics 4, loaded through Google Tag Manager) and marketing (Meta Pixel) run only if you accept them in the cookie banner. Until you accept, they are not loaded. Our Cookie Policy has the details.

When you sign in to the dashboard. We use cookies that are needed to keep you signed in and to protect your account. We also use Google reCAPTCHA on sign-in to stop automated attempts. Google processes data from your browser to tell people from bots.

4. Why we use it

We use personal data:

to create and run your account and provide MacroWA;
to process payments and issue invoices and receipts;
to keep accounts secure and to prevent fraud, spam and misuse of MacroWA, in line with our Terms of Service and Acceptable Use Policy;
to give support and answer your questions;
to send important notices about your account, billing, security or these policies;
to run the affiliate program and pay commission;
with your consent, to understand how visitors use this website and to measure our advertising;
to meet our legal, tax and accounting obligations.

We do not sell personal data. We do not use the data you put into MacroWA for our own purposes. If we send you product news, you can stop it at any time.

We share personal data only with:

service providers who help us run MacroWA, and only for that purpose:
- Stripe, BayarCash and CHIP, to take payments;
- Google, for reCAPTCHA on sign-in and, only if you accept, Google Analytics 4 and Google Tag Manager on this website;
- Meta, for the Meta Pixel on this website, only if you accept;
- our hosting, email and backup providers;
professional advisers, such as accountants and lawyers, under a duty of confidentiality;
authorities, when the law requires it.

The providers that process the data you put into MacroWA, such as Meta, WhatsApp, OpenAI and Z.ai, are listed in our Data Processing Terms. If you connect your own AI key, your own agreement with that AI provider applies to that use.

6. Transfers outside Malaysia

Some of our providers process data in other countries. When that happens, we use providers that protect the data in line with the PDPA.

7. How long we keep it

We keep personal data only as long as we need it for the purposes above.

Account data is kept while your account is active, and after that for as long as we need it to meet legal, tax and accounting obligations.
Billing records are kept for as long as Malaysian tax and business law requires.
The data you put into MacroWA is deleted after your account is closed, following our backup rotation. You can export your data before you close your account.
Messages you send us that do not lead to an account are deleted when we no longer need them.

8. How we protect it

We use encrypted connections (HTTPS) and offer two-factor authentication for accounts. Sign-in is protected by CAPTCHA. Secrets such as API keys and connection tokens are encrypted, and backups run daily. Team roles and permissions, and the activity log, help you control and review who does what in your account.

Our Security page explains these measures and how to report a security issue.

9. Your rights

Under the PDPA you can:

ask for access to the personal data we hold about you, and a copy of it;
ask us to correct data that is inaccurate, incomplete or out of date;
withdraw your consent, or ask us to limit how we use your data, including for marketing.

Email [email protected] with your request. We may ask you to confirm your identity first. If you withdraw consent for data we need to provide MacroWA, we may not be able to continue providing it.

You can change your cookie choices at any time with the “Cookie settings” link in the website footer.

If your request is about data a MacroWA customer holds about you, such as a WhatsApp conversation with a business, please send it to that business. They control that data.

10. Children

MacroWA is a business product. It is not meant for children, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy. The date at the top of this page shows when it last changed. If a change materially affects how we use your data, we will tell account holders by email.

12. Language

This policy is available in English and Bahasa Melayu. If the two versions differ, the English version applies.

13. Contact

Questions about this policy or your data:

Email: [email protected]
WhatsApp: +6011-3803 8022
Post: Sitehandy Solutions, F-7 Tingkat 1, Bangunan Arked MARA, 71000 Port Dickson, Negeri Sembilan, Malaysia

To report misuse of MacroWA, such as spam, email [email protected].