Packory

Packory · Legal

Privacy Policy

Effective 3 September 2026

1. Introduction

This Privacy Policy explains how Packory (a Malaysian business registered under the Registration of Businesses Act 1956; full SSM/company details to be updated as the business grows, "Packory", "we", "us", "our") collects, uses, stores and protects your personal data when you visit packory.app, use the Packory console (console.packory.app), the Packory mobile/terminal app, or otherwise interact with our services (together, the "Services").

We process personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and applicable data protection law. We are committed to protecting your privacy.

2. Who this policy applies to

  • Sellers / Merchants who use Packory to record and verify their packing process;
  • Buyers / Recipients who receive a verification link (e.g. via WhatsApp) from a seller;
  • Visitors to our website.

3. What data we collect

3.1 Data you give us

  • Account data: name, business name, email, phone number, password (hashed), marketplace/platform details.
  • Lead data: phone number + source (e.g. fb:<group>, blog:<slug>, social:<ig>, direct) when you submit our WhatsApp lead form.
  • Billing data: plan/order allowance, payment records. Card details are processed by our payment gateway (), we do not store full card numbers.
  • Support data: messages and files you send when contacting support.

3.2 Data we collect when you use the Services

  • Order & session metadata: AWB/tracking numbers, timestamps, station/device identifiers, order references, session status (e.g. COMPLETE, VERIFIED).
  • Evidence records: video recordings of packing, capture metadata (timestamp, integrity hash, device/geo fingerprint where enabled, audit trail), see Section 5 for how this is stored.
  • Device & usage data: browser type, app version, approximate location where legally permitted, diagnostic logs.

3.3 Analytics data (website)

We use Google Analytics 4 (GA4) to understand how visitors use our site. This uses cookies to collect aggregated usage data (pages visited, referrer, approximate geography, device type). See Section 7.

4. How we use your data

We use personal data to:

  1. Create and manage your account, and provide the Services;
  2. Record, hash, store and make available your packing evidence so you can share proof with buyers/marketplaces;
  3. Process payments and enforce plan limits/overage;
  4. Contact you about your setup on WhatsApp only when you provide your number (lead form or signup);
  5. Improve the product, including measuring signup → checkout funnel;
  6. Detect, prevent and investigate fraud, abuse or security incidents;
  7. Comply with legal obligations.

We do not sell your personal data.

5. How your packing evidence is stored (your own Google Drive)

Packory's design puts you in control of your video evidence:

  • Packing videos are recorded on your device/station and uploaded to your own Google Drive account, which you connect via OAuth.
  • We only request the permission needed to upload evidence into a Packory-managed folder on your Drive. We do not scan, read or delete other files in your Drive.
  • Your evidence stays in your Drive. If you disconnect or revoke Google access, we can no longer upload or manage evidence for you.
  • A temporary processing buffer may hold evidence briefly during upload; it is purged after successful transfer.
  • If you stop using Packory, your videos remain in your Google Drive, you keep full ownership and control.

Because evidence lives in your Google account, you are responsible for your own Drive storage capacity, backup and Google account security.

6. Who we share data with

We only share data where necessary to run the Services, with:

  • Google (Google Drive), to upload your evidence to your own Drive (you authorise this).
  • Cloud infrastructure & hosting providers, databases, website/app hosting and temporary evidence processing.
  • Email delivery provider, to send transactional emails about your account.
  • Payment gateway, to process payments.
  • Google Analytics, website analytics (aggregated, cookie-based).
  • Buyers / marketplaces, only when you (the merchant) choose to share a verification link or evidence file (e.g. to resolve a dispute).

Where we share data with third-party processors, we rely on their data protection and security commitments and, where required, appropriate transfer safeguards.

7. Cookies & analytics consent

  • Our website uses a consent banner on first visit. You can choose Accept or Decline.
  • Accepting enables GA4 analytics cookies. Declining disables them (core site functionality still works).
  • Your choice is remembered on your device (packory_consent in local storage) and can be changed by clearing site data/cookies.
  • We do not use cookies for advertising on our site at this time.

8. Legal bases (PDPA)

We process personal data on the following bases:

  • Consent, where you opt in (e.g. WhatsApp contact, analytics);
  • Contract, processing needed to provide the Services you signed up for;
  • Legal obligation / legitimate interest, security, fraud prevention, compliance.

You may withdraw consent at any time (see Section 12), subject to legal or contractual restrictions.

9. Data retention

  • Account & metadata: kept while your account is active, and for a reasonable period afterwards to comply with legal/tax obligations (e.g. billing records).
  • Evidence videos: retained on your Google Drive per your own settings, not on our servers (see Section 5).
  • Analytics: aggregated per GA4 retention settings.
  • We delete or anonymise personal data when it is no longer needed for the purposes above.

10. Your rights (PDPA)

You have the right to:

  1. Access, request a copy of your personal data we hold;
  2. Correct, request correction of inaccurate data;
  3. Withdraw consent, stop specific processing (e.g. WhatsApp contact, analytics);
  4. Complain, lodge a complaint with the Personal Data Protection Commissioner (Malaysia) if you believe we have breached the PDPA.

To exercise any right, contact us at support@packory.app. We will respond within the timeframe required by law. We may need to verify your identity first.

11. Security

We apply appropriate technical and organisational measures, including: encryption in transit, integrity hashing for evidence, access controls, rate limiting and audit logging. No method of transmission or storage is 100% secure, we aim for industry-standard protection but cannot guarantee absolute security.

12. Children

Our Services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from children.

13. International transfers

Your data may be processed by our cloud providers in Malaysia and/or other countries (e.g. Google for the Drive you connect, and our cloud infrastructure providers). Where data is transferred outside Malaysia, we rely on appropriate safeguards and contractual protections.

14. Changes to this policy

We may update this policy from time to time. Material changes will be notified on this page with an updated effective date. Continued use of the Services after changes means you accept the updated policy.

15. Contact & complaints

Packory, a Malaysian business. Questions, access requests or complaints: support@packory.app.

If you are unhappy with how we handle your data, contact us first and we will do our best to resolve it. You may also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, Malaysia).