1. Who we are
RepairFlow is operated by PMY Digital (PG0496234-W), Malaysia. This notice explains how we handle personal data through repairflow.com.my, our repair-shop software and support channels. Contact help@repairflow.com.my or WhatsApp +60 16-8306415 for privacy questions.
2. Our role and your repair shop
We manage account, subscription, security and support information for our own service. When a shop enters its customer, device and repair records, the shop decides why those records are collected and how they are used. We process them to provide the software on the shop’s instructions. A shop’s customers should first contact that shop about repair records; we can help route a request where appropriate.
3. Information we collect
Account holders provide their name, email, shop details and a password, which is stored as a hash. Shops may enter customer names, contact details, device identifiers, repair notes, prices, invoices, payment records, stock records and acknowledgments. Optional fields depend on the workflow and plan. Support enquiries contain the details you choose to send. Technical records may include IP addresses, browser information, access times, authentication events and audit logs. Do not submit device unlock passwords, card details or unrelated sensitive information.
4. Why we use information and your choices
We use information to create and secure accounts, deliver repair-management features, maintain records, verify subscriptions, answer requests, prevent abuse and meet applicable legal obligations. Required signup and checkout fields are necessary to provide those functions; without them we may be unable to create an account or process a subscription. Contact-form information is voluntary, but a reply address and message are needed to answer. You can limit optional information and ask us about limiting processing or withdrawing consent; this may affect the relevant service. We do not sell personal data or use shop records for advertising.
5. Who may receive information
Authorized members of a shop can access records according to their role. Our hosting provider DigitalOcean processes infrastructure data. Mailjet processes outgoing support email; enquiries and replies are also stored in our support mailbox. When subscription checkout is enabled, toyyibPay receives the payer’s name, email, phone, payment amount and order reference and handles payment information under its own terms. We retain payment references and status, not banking passwords or complete card numbers. We may disclose necessary information to professional advisers or authorities where required by law, or to protect rights and investigate abuse. A corporate transfer would require appropriate confidentiality safeguards and notice where required.
6. Hosting, international processing and security
The application and mailbox are hosted on a DigitalOcean server in Singapore. Email and payment providers may process information in other countries. We assess applicable transfer requirements and safeguards when using providers. We use HTTPS, access controls, password hashing and protected server credentials, and restrict access to people who need it to operate or support the service. No system can guarantee absolute security. We investigate incidents and provide notices where required by applicable law.
7. Cookies and tracking links
Essential session cookies keep you signed in and protect authentication. A preference cookie remembers your language. These are used for service functionality; we do not currently operate advertising cookies on the website. Browser settings can block or delete cookies, but login and preferences may stop working. Repair tracking links expose a limited status view to anyone holding the link. Shops should share them privately and revoke or replace links when needed.
8. Retention and account closure
We keep service records while needed to operate the account, provide support, prevent abuse or meet applicable record-keeping and dispute obligations. We do not promise automatic deletion after a fixed period of inactivity. A shop owner can request account closure, export assistance or deletion through support. We verify authority and review records that must be retained before confirming the scope and timing. Routine server backups rotate on a seven-day schedule; retained legal records and separately secured recovery copies may require a different retention period. Access to retained copies is restricted.
9. Access, correction and other requests
Contact help@repairflow.com.my to request access, correction, applicable portability, deletion, a limit on processing or withdrawal of consent. Identify the account or shop and the request without sending passwords. We may need proportionate identity or authority checks, and will explain any legal restriction, applicable fee or additional information needed. Shop-customer requests may need the shop’s instructions. You may also complain to Malaysia’s Personal Data Protection Commissioner at pdp.gov.my. The service is intended for business users aged 18 or above.
10. Updates to this notice
We publish changes here with an updated effective date. Material changes affecting existing users will be communicated through the service or a suitable contact channel. This notice is available in English and Bahasa Malaysia. Contact us if you need clarification.
RepairFlow HelpDesk · help@repairflow.com.my
Contact →