Dasar Privasi

Tentang dasar ini

Dasar ini menerangkan data peribadi yang dikumpul oleh UrusPost (https://www.uruspost.com), sebab ia dikumpul, dengan siapa ia dikongsi, dan hak anda di bawah Akta Perlindungan Data Peribadi 2010 (PDPA). UrusPost dikendalikan oleh Alghazaly Technology.

Data yang kami kumpul

• Akaun anda: nama, alamat e-mel, dan sama ada kata laluan yang dicincang (bukan kata laluan asal) atau ID akaun Google jika anda log masuk dengan Google.
• Token log masuk bagi setiap sesi, disimpan dalam bentuk dicincang.
• Akaun sosial yang anda sambungkan: ID akaun platform, nama paparan, gambar profil, token akses yang disulitkan dan tarikh luputnya.
• Kandungan anda: teks post, jadual, status penerbitan dan sebarang mesej ralat daripada platform.
• Gambar yang anda muat naik bersama post. Sebelum disimpan, gambar diproses semula dan data lokasi dikeluarkan daripadanya.
• Statistik yang dilaporkan oleh Threads bagi post yang diterbitkan melalui UrusPost: bilangan tontonan, suka, balasan, kongsi semula dan petikan, diambil beberapa kali dalam tujuh hari selepas post diterbitkan. Kami menyimpan hanya bilangan, bukan maklumat tentang orang yang menyukai atau membalas post anda, dan statistik itu dipadam bersama rekod post tersebut.
• Rekod penggunaan: bilangan post dan penjanaan caption, dengan waktunya dan model AI yang digunakan, untuk menguatkuasakan had pelan.
• Jika anda menyertai senarai menunggu sebelum mendaftar: alamat e-mel anda, bila anda menyertainya dan bila kami menjemput anda. Ia digunakan hanya untuk menjemput anda mendaftar.
• Alamat IP, yang dihantar oleh laman web kami dan disimpan untuk tempoh singkat bagi mengehadkan kadar cubaan log masuk dan permintaan seumpamanya.

Data yang tidak kami simpan

• Idea caption dan caption yang dijana. Ia dihantar untuk diproses, tetapi tidak disimpan oleh kami. Caption yang anda pilih menjadi sebahagian daripada post anda hanya apabila anda menyimpan post itu.
• Butiran kad atau akaun bank. Pembayaran, apabila dibuka, dikendalikan oleh gerbang pembayaran.

Tujuan kami menggunakan data anda

• Menyediakan perkhidmatan dan menyelenggara akaun anda.
• Menerbitkan post ke akaun sosial yang anda sambungkan, pada waktu yang anda jadualkan.
• Menjana caption apabila anda memintanya.
• Menghantar e-mel transaksi: pengesahan e-mel, set semula kata laluan, notis post gagal dan notis akaun yang perlu disambung semula.
• Menguatkuasakan had pelan.
• Keselamatan dan pencegahan penyalahgunaan.
• Pengebilan, apabila pelan berbayar dibuka.

Pihak yang memproses data anda

Kami tidak menjual data anda. Kami berkongsi data hanya dengan pemproses yang diperlukan untuk menjalankan perkhidmatan:

• Meta: menyambungkan akaun anda dan menerbitkan post.
• Google: log masuk dengan Google.
• Resend: menghantar e-mel.
• Vercel: mengehos laman web.
• Cloudflare: rangkaian antara laman web dan pelayan kami, dan menyimpan gambar yang anda muat naik.
• OpenRouter dan Anthropic: menerima idea, nada dan bahasa caption anda, serta nama paparan akaun yang disambungkan, apabila anda meminta caption.
• CHIP: memproses pembayaran, apabila pelan berbayar dibuka.

Di mana data anda disimpan

Gambar yang anda muat naik disimpan pada Cloudflare, dan dihidangkan dari alamat awam supaya Meta boleh mengambilnya untuk menerbitkan post anda. Sesiapa yang memiliki alamat penuh gambar itu boleh melihatnya, jadi alamat itu dijana secara rawak dan tidak boleh diteka.

Data aplikasi disimpan pada pelayan di Malaysia. Sebahagian pemproses di atas beroperasi di luar Malaysia, termasuk di Amerika Syarikat, dan data yang mereka proses mungkin dipindahkan ke sana. Kami hanya menggunakan pemproses yang diperlukan untuk menyediakan perkhidmatan.

Berapa lama kami menyimpannya

• Data akaun dan kandungan anda disimpan selagi akaun anda wujud.
• Apabila anda memutuskan sambungan akaun sosial, token aksesnya dipadam serta-merta.
• Apabila anda membuang atau menggantikan gambar pada satu post, atau membatalkan post itu, gambarnya dipadam daripada storan kami serta-merta. Gambar pada post yang sudah diterbitkan disimpan selagi post itu ada.
• Gambar yang anda muat naik tetapi tidak pernah digunakan pada mana-mana post dipadam dalam masa 48 jam.
• E-mel dalam senarai menunggu dipadam sebaik sahaja anda mendaftar, apabila anda meminta ia dibuang, atau 90 hari selepas jemputan dihantar jika anda tidak mendaftar.
• Apabila anda meminta akaun anda dipadam, data anda dibuang dalam masa 30 hari, kecuali rekod yang wajib disimpan oleh undang-undang.

Keselamatan

Token akses disulitkan semasa disimpan, kata laluan dicincang, dan trafik dihantar melalui HTTPS.

Kuki dan storan pelayar

Kami menetapkan satu kuki sesi httpOnly supaya anda kekal log masuk, dan menyimpan pilihan bahasa caption anda dalam storan pelayar (localStorage). Kami tidak menggunakan kuki pengiklanan atau penjejakan analitik.

Hak anda

Di bawah Akta Perlindungan Data Peribadi 2010, anda boleh meminta akses kepada data peribadi anda, meminta pembetulan, atau menarik balik persetujuan anda. Hantar e-mel ke support@uruspost.com daripada alamat e-mel akaun anda. Jika anda menarik balik persetujuan, kami tidak lagi dapat menyediakan perkhidmatan kepada anda. Untuk memadam akaun anda, lihat https://www.uruspost.com/data-deletion.

Perubahan pada dasar ini

Apabila dasar ini berubah, tarikh "Kemas kini terakhir" di atas turut dikemas kini.

Hubungi kami

• Alghazaly Technology (SSM 202603080102 (IP0623100-M))
• A11, Lorong 11, Bandar Baru Jaya Gading, 26070 Kuantan, Pahang
• E-mel: support@uruspost.com
• Telefon: +6016-9212092

About this policy

This policy explains what personal data UrusPost (https://www.uruspost.com) collects, why it is collected, who it is shared with, and your rights under the Personal Data Protection Act 2010 (PDPA). UrusPost is operated by Alghazaly Technology.

Data we collect

• Your account: name, email address, and either a hashed password (never the password itself) or your Google account ID if you sign in with Google.
• A sign-in token for each session, stored hashed.
• Social accounts you connect: the platform's account ID, display name, profile picture, an encrypted access token and its expiry date.
• Your content: post text, schedules, publishing status and any error message returned by the platform.
• Images you upload with a post. Before an image is stored it is re-encoded, and its location data is removed.
• The statistics Threads reports for posts published through UrusPost: view, like, reply, repost and quote counts, read several times in the seven days after a post goes out. We keep counts only, never anything about the people who liked or replied to your post, and the statistics are deleted along with that post's record.
• Usage records: counts of posts and caption generations, with the time and the AI model used, to enforce plan limits.
• If you join the waitlist before signing up: your email address, when you joined and when we invited you. It is used only to invite you to sign up.
• IP addresses, forwarded by our website and held briefly to rate-limit sign-in attempts and similar requests.

Data we do not keep

• Caption ideas and generated captions. They are sent for processing but not stored by us. A caption you pick becomes part of your post only when you save that post.
• Card or bank details. Payments, once available, are handled by the payment gateway.

Why we use it

• Providing the service and maintaining your account.
• Publishing posts to the social accounts you connect, at the time you schedule.
• Generating captions when you ask for them.
• Sending transactional email: email verification, password resets, publish-failure notices and reconnect notices.
• Enforcing plan limits.
• Security and abuse prevention.
• Billing, once paid plans open.

Who processes your data

We do not sell your data. We share it only with the processors needed to run the service:

• Meta: connecting your accounts and publishing posts.
• Google: signing in with Google.
• Resend: sending email.
• Vercel: hosting the website.
• Cloudflare: the network between the website and our server, and storage for the images you upload.
• OpenRouter and Anthropic: they receive your caption idea, tone and language, and the connected account's display name, when you ask for captions.
• CHIP: processing payments, once paid plans open.

Where your data is stored

Images you upload are stored with Cloudflare and served from a public address, so that Meta can fetch them in order to publish your post. Anyone holding an image's full address can view it, so those addresses are randomly generated and cannot be guessed.

Application data is stored on a server in Malaysia. Some of the processors above operate outside Malaysia, including in the United States, and data they process may be transferred there. We use only the processors needed to provide the service.

How long we keep it

• Your account data and content are kept while your account exists.
• When you disconnect a social account, that account's access token is deleted immediately.
• When you remove or replace the image on a post, or cancel that post, its image is deleted from our storage immediately. An image on a post that has already been published is kept for as long as that post is kept.
• An image you upload but never use on any post is deleted within 48 hours.
• A waitlist email is deleted as soon as you sign up, when you ask for it to be removed, or 90 days after the invitation is sent if you never sign up.
• When you ask for your account to be deleted, your data is removed within 30 days, except records the law requires us to keep.

Security

Access tokens are encrypted at rest, passwords are hashed, and traffic travels over HTTPS.

Cookies and browser storage

We set one httpOnly session cookie to keep you signed in, and keep your caption-language choice in browser storage (localStorage). We use no advertising cookies and no analytics tracking.

Your rights

Under the Personal Data Protection Act 2010 you may ask to access your personal data, ask for it to be corrected, or withdraw your consent. Email support@uruspost.com from your account's email address. If you withdraw consent we can no longer provide the service to you. To delete your account, see https://www.uruspost.com/data-deletion.

Changes to this policy

When this policy changes, the "Last updated" date above changes with it.

Contact us

• Alghazaly Technology (SSM 202603080102 (IP0623100-M))
• A11, Lorong 11, Bandar Baru Jaya Gading, 26070 Kuantan, Pahang
• Email: support@uruspost.com
• Phone: +6016-9212092