Privacy Policy

NewLaunch MY (operating at newlaunch.com.my) is a self-serve advertising platform that lets Malaysian real estate negotiators (RENs) build campaign landing pages, run Meta and Google Ads, and receive enquiries on WhatsApp. This policy explains how we handle data for two groups: agents (our customers) and buyers (visitors to agent-created landing pages).

1. Who we are

NewLaunch MY is operated by an independent business based in Malaysia. Contact: support@newlaunch.com.my.

2. Data we collect from agents

When you sign up as an agent we collect:

• Email address (for sign-in and notifications)
• Full name, REN number, agency name (for APDL compliance and buyer-facing identity)
• WhatsApp number (for receiving leads)
• Profile photo, if you upload one
• Optional: WhatsApp Business API credentials, Meta Business connection, Google Ads conversion ID
• Billing details handled by Stripe — we never store your full card number

We use this data to operate the platform, send you transactional notifications, and display your APDL-required identity on landing pages.

3. Data we collect from buyers

When a buyer submits an enquiry on an agent's landing page, we collect: name, phone, optional email, preferred contact method, and any message they provide.

We also automatically log: IP address, user agent, referrer, and clicks on Call / WhatsApp / form buttons so the agent can see contact attempts in their dashboard. These click logs are stored separately from form submissions and do not contain personal identifiers.

Each agent's landing page also has its own privacy policy naming the appointed agent and tracking technologies enabled on that specific page.

4. How we use the data

• Lead delivery: forward buyer enquiries to the appointed agent via WhatsApp, email, and the agent dashboard
• Service operation: run authentication, host landing pages, deliver email, send WhatsApp messages, process payments
• Analytics: count page views and contact attempts so agents can measure campaign performance
• Ad attribution (optional): if the agent has set a Pixel or Google Ads Conversion ID, we forward conversion events to those platforms so the agent's ads can optimise
• Legal compliance: meet PDPA, APDL, tax, and other Malaysian regulatory obligations

5. Who we share data with

Buyer enquiries are shared with:

• The appointed agent for that landing page (always)
• Meta and Google — only if the agent has configured a Pixel ID, Google Tag, or Google Ads Conversion ID on their landing page (these are the agent's own ad accounts)

We use the following service providers (sub-processors):

• Supabase — database, authentication, file storage
• Vercel — website hosting and edge network
• Cloudflare R2 — image storage
• Resend — transactional email delivery
• Meta (WhatsApp Cloud API) — buyer auto-reply and agent alerts
• Stripe — billing for agent subscriptions

We do not sell, rent, or share personal data with third parties for their own marketing purposes.

6. Data retention

Agent accounts and their landing-page content are retained while the account is active and for 90 days after closure. Buyer enquiry data is retained for as long as the receiving agent's account is active, after which it is deleted with the agent's data.

7. Your rights under the PDPA 2010

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Withdraw consent for data processing
• Object to direct marketing

To exercise any of these rights, email support@newlaunch.com.my. We will respond within 21 days.

Buyers:if you submitted an enquiry to a specific agent and want to be removed from their follow-ups, contact the agent directly using the details on the landing-page's privacy policy.

8. Security

All traffic is encrypted in transit over HTTPS. Database access is governed by row-level security so each agent can only access their own data. Passwords are stored as bcrypt hashes — no one (including us) can read them. WhatsApp tokens and other secrets are stored encrypted at rest.

9. Cookies

We use a small number of essential cookies for authentication (Supabase session) and A/B testing (visitor bucketing). We do not use third-party advertising cookies on the marketing site. Agent-created landing pages may use Meta Pixel and Google tags if the agent has configured them — those are governed by Meta and Google's own policies.

10. International transfers

Some service providers (Vercel, Stripe, Meta, Google) host infrastructure outside Malaysia. By using NewLaunch MY, you consent to data being processed in those regions under the providers' respective security and privacy frameworks.

11. Changes to this policy

We may update this policy. Material changes will be announced via email to all agents and posted on this page with a new “last updated” date. Continued use after a change constitutes acceptance.

12. Contact

Questions, complaints, or data-rights requests: support@newlaunch.com.my.