Privacy Policy

Version v1.0-2026-08 — Last updated 3 August 2026

Infloowo ("we", "us", "our") operates a platform that connects content creators (inflooencers) with brands for collaboration opportunities. This Privacy Policy explains what personal data we collect, why, how we protect it, and what rights you have, in accordance with Malaysia's Personal Data Protection Act 2010 and its subsequent amendments ("PDPA").

1. What personal data we collect

We only collect data that supports the purposes described below.

If you sign up as a...We collect
Inflooencer (Content Creator) Name, email, phone (optional), password (stored encrypted), content niche(s), social media platforms and handles, approximate follower range, content language(s), state/location, portfolio link (optional), rate expectations (optional), availability
Brand / Brand Owner Company name, contact person name, business email, phone (optional), password (stored encrypted), website, industry, company size, collaboration types of interest, budget range (optional), target creator niches

We do not collect more than we need. For example, we record follower counts as a range rather than requiring account verification at signup, and we do not track your IP address or device information when you sign up.

If you use the opportunity marketplace, we also collect: from brands, the details of each opportunity posted (title, description, target niches/ platforms, budget, deliverables, location, deadline); from inflooencers, which opportunities you've expressed interest in.

2. Why we collect it (purpose and notice)

  • To create and manage your account
  • To build your inflooencer or brand profile
  • To let brands post collaboration opportunities and let inflooencers browse and express interest in them
  • To communicate with you about your account and relevant opportunities
  • To comply with our legal obligations

We do not use your data for purposes beyond these without asking for your separate consent first.

3. Consent

By checking the consent box on our signup forms, you give explicit, informed consent for us to collect and process the data described above. We keep a timestamped record of when you gave consent and to which version of this policy. You may withdraw consent at any time (see Section 7); withdrawing consent may limit or end your ability to use the platform.

4. Who we share your data with (disclosure)

We do not sell your personal data. We currently share data only with:

  • Our infrastructure providers (database hosting and website hosting), who process data on our behalf under confidentiality obligations, strictly to operate the platform
  • Malaysian regulators or authorities, where required by law

When an inflooencer expresses interest in a brand's posted opportunity, we share only a limited set of that inflooencer's profile with that specific brand: name, content niches, platforms, portfolio link, and availability. We do not share phone number, rate expectations, or any other profile field, and this information is only ever visible to the brand behind the specific opportunity applied to — never sold, never shared in bulk, and never visible to any other brand. Full contact details are only exchanged once both sides agree to move forward, which today happens directly between the inflooencer and brand.

5. How we protect your data (security)

  • Data is stored in an access-controlled database with row-level security, meaning each user's profile data can only be read or edited by that user or authorised system processes — not by other users
  • Passwords are never stored in plain text
  • All data in transit is encrypted (HTTPS/TLS)
  • Access to our database by staff is limited and logged

6. How long we keep your data (retention)

We keep your data for as long as your account is active. If you delete your account, we delete your profile data, except for the minimum consent record we are required to keep for audit purposes, which is retained for up to 2 years. If your account is inactive for an extended period, we may contact you to check whether you'd like to keep it active before considering deletion.

7. Your rights

Under the PDPA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or outdated data
  • Withdraw consent for further processing
  • Request a copy of your data in a structured, commonly used format (data portability)
  • Request deletion of your account and associated data

To exercise any of these rights, email us at privacy@infloowo.my. We aim to respond within 21 days, at no charge for reasonable requests.

8. Cross-border data transfers

Where our infrastructure providers process or store data outside Malaysia, we take steps to only do so where the destination has comparable data protection standards, or with appropriate contractual safeguards in place, consistent with PDPA requirements.

9. Data breach notification

In the event of a personal data breach likely to result in significant harm, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with PDPA timelines and requirements.

10. Children's data

Infloowo is intended for users aged 18 and above. We do not knowingly collect data from individuals under 18.

11. Changes to this policy

We may update this policy as the platform evolves (for example, when task matching or payments launch). We will update the version number and date above, and where changes are material, we will notify users and may seek renewed consent.

12. Contact us

Questions about this policy or how your data is handled can be sent to privacy@infloowo.my.