English
Privacy Notice
This notice explains how XENRO ENTERPRISE, trading through LinkBiz, collects, uses, discloses, stores, and protects personal data when you use LinkBiz websites, merchant tools, storefronts, and the WhatsApp assistant.
1. Who we are and scope
LinkBiz is operated by XENRO ENTERPRISE in Malaysia ("LinkBiz", "we", "us", or "our"). This notice applies to linkbiz.page, merchant accounts, LinkBiz-hosted storefronts, support, billing, and the LinkBiz WhatsApp Business integration.
For merchant account and platform administration data, XENRO ENTERPRISE determines why and how the data is processed. For customer data that a merchant collects through its storefront or connected WhatsApp number, the merchant determines the business purpose and LinkBiz processes that data to provide the merchant's requested services.
2. What we collect
- Account and contact data: name, email address, phone number, password hash, account role, and support communications.
- Business and website data: business profile, location, hours, products, prices, images, social links, published content, domain and configuration choices.
- Customer and transaction data: customer contact details, carts, orders, delivery information, bookings, payment method, payment references or proof, fulfilment and support history. LinkBiz does not store full card numbers.
- WhatsApp data: connected WhatsApp Business Account and phone identifiers, encrypted access token, sender phone number, display name when Meta supplies it, message text, replies, delivery status, and usage totals.
- Technical and usage data: session identifiers, cookie choices, IP address where needed for security or rate limiting, device/browser information collected by optional analytics, page and product events, referral attribution, and timestamps.
- Information received from integrations you choose, including Meta/WhatsApp, Google business or map services, Stripe, payment providers, and email services.
3. Sources, purposes, and required information
We receive data directly from you; from merchants and their customers; automatically when the service is used; and from connected providers. We use it to create and host websites, authenticate users, fulfil orders and bookings, operate WhatsApp replies, provide support, process subscriptions, prevent abuse, measure service performance, comply with law, and improve LinkBiz.
Fields marked as required are needed to create an account or deliver the requested feature. If they are not provided, that part of the service may not work. Optional fields, integrations, and analytics can be declined without losing the core free website service.
4. WhatsApp and artificial intelligence
When a merchant connects WhatsApp, LinkBiz receives messages sent to that merchant's number and uses relevant merchant information and recent conversation context to prepare a reply. Message content may be sent through OpenRouter and the selected AI model provider solely to generate that reply. The merchant remains responsible for its customer relationship and for reviewing its business information and automation settings.
LinkBiz does not sell WhatsApp data, use it for behavioural advertising, or send unsolicited marketing through the assistant. LinkBiz does not use customer messages to train its own models. OpenRouter states that prompt retention is opt-in; a downstream model provider may apply its own disclosed processing and retention terms.
Do not send highly sensitive information, passwords, payment card details, medical emergencies, or instructions requiring professional judgment to the AI assistant. Automated replies can be incomplete or incorrect and do not have legal or similarly significant effects by themselves.
5. Cookies and analytics
- Necessary cookies keep merchant and customer sessions secure, remember carts and coupons, protect forms, and attribute referrals. Merchant and customer login sessions normally expire after 14 days; cart cookies after 7 days; coupon cookies after 1 day; and referral cookies after 30 days.
- Google Analytics is optional. It loads only after a visitor chooses "Allow analytics" and may collect device, browser, approximate location, page interaction, and cookie identifiers under Google's terms. Choosing "Necessary only" does not prevent use of the core service.
- You can reopen Cookie settings at any time on LinkBiz pages to change the choice for that browser.
6. Who receives data
We disclose only what is reasonably needed to operate the service, follow your instructions, protect users, complete a transaction, or comply with law. Recipients may include:
- OVHcloud Singapore for infrastructure hosting and storage.
- Meta and WhatsApp for WhatsApp Business onboarding, message delivery, and webhook events.
- OpenRouter and selected AI model providers for requested content generation and WhatsApp replies.
- Google for optional Analytics, business listing import, maps, and related services.
- Stripe and any merchant-selected payment provider for billing or payment processing.
- Cloudflare for optional Turnstile anti-abuse checks, and configured email delivery providers for transactional messages.
- Professional advisers, authorities, or a successor to the business where legally required or necessary to protect rights, users, or the service.
7. International transfers
Some providers process data in Singapore, the United States, or other countries. Where personal data leaves Malaysia, we use the provider and transfer safeguards reasonably available to us, limit the data sent, and take steps intended to ensure protection comparable to applicable Malaysian requirements.
8. Retention and deletion
We keep personal data only while it is needed for the purposes above, while an account or merchant relationship remains active, and for a reasonable period needed for security, disputes, backups, accounting, tax, fraud prevention, or legal obligations. Different records therefore have different retention periods.
When deletion is approved, we delete or de-identify data from active systems and allow protected backup copies to expire through the normal backup cycle, unless retention is required by law or needed to establish, exercise, or defend legal claims. See our Data Deletion Instructions for the request process.
9. Security
We use measures appropriate to the service, including password hashing, encrypted WhatsApp access tokens, HTTPS, signed webhook verification, tenant access controls, restricted operator access, rate limiting, and backups. No internet service is completely secure, so please use a unique password and notify us promptly if you suspect misuse.
10. Your choices and rights
Subject to the Malaysian Personal Data Protection Act 2010 and applicable exceptions, you may ask whether we process your data; request access or correction; withdraw consent; object to direct marketing; ask us to limit processing likely to cause damage or distress; or request deletion where applicable. Withdrawing consent does not affect prior lawful processing and may prevent us from providing a requested feature.
A storefront customer should normally contact the merchant first because the merchant controls that customer relationship. You may also contact LinkBiz and we will route or assist with the request after verifying identity.
11. Children, updates, and contact
LinkBiz is intended for business users and is not directed to children. We may update this notice when our services or legal duties change; the date above identifies the latest version.
For privacy questions or requests, email hello@linkbiz.page. Please do not include passwords, full payment card details, or unrelated sensitive information.