Who is responsible
Malink is operated by Chesira, based in Indonesia. Chesira is the data controller for the personal data described here, under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022). We don’t sell your data and we don’t show ads.
What we collect
When you create an account
- Your name, username and email address.
- Your password, which we store only as an Argon2 hash. We can’t read it, and nobody at Malink can.
- If you sign in with Google: the name, email address and profile picture Google shares with us, your Google account ID, and the sign-in tokens Google issues.
What you put on your page
- Your tagline, links, chosen template and text, and the images you upload. This is shown publicly on your page.
When someone visits a page
- The visitor’s IP address and the time, each time they open a Malink page or click one of its links. We use these to count visits and clicks for the page owner’s statistics. Page owners see the totals, not visitors’ IP addresses.
When you pay for a plan
- The plan, the amount, the order and transaction IDs, the payment status and its times. Card, bank and e-wallet details are entered on Midtrans and never reach us.
How we use it
- To run your account and publish your page.
- To show page owners how many visits and clicks their page gets.
- To process payments, apply plans, and answer payment and refund questions.
- To keep Malink secure, and to find and stop abuse of the service.
- To meet our legal obligations, such as keeping financial records.
We process this data to provide the service you signed up for, to meet legal obligations, and for our legitimate interest in keeping Malink safe.
How long we keep it
- Account and page data: until you delete your account.
- Visit and click records: for as long as the page they belong to exists.
- Order and payment records: for as long as Indonesian law requires us to keep financial records, even after an account is deleted.
Your rights
You can ask us to give you a copy of your personal data, correct it, or delete it, and you can withdraw consent you have given or object to how we process your data. Most of your details can be changed in your dashboard, and under Account settings you can download a copy of your data or delete your account. For anything else, email support@malink.my.id from the address on your account and we will respond within the time Indonesian law requires.
Security
Every connection to Malink uses HTTPS, passwords are hashed, and access to the database and storage is limited to the people who run the service. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as Indonesian law requires.
Children
Malink is not meant for children under 13, and we don’t knowingly collect their data. If you think a child under 13 has an account, email us and we will delete it.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change affects how we use data you have already given us, we will let you know before it takes effect.
Contact
Privacy questions and requests: support@malink.my.id. The rules for using Malink are in the Terms of Service.