Privacy Policy

1. Who We Are

LeadZap is a marketing automation service operated by Digital Vibe Resources (003589301-V), a company registered in Malaysia. We provide a service that connects TikTok Lead Generation Ad form submissions to a subscriber's WhatsApp number and Google Sheets account.

For data protection matters, you may contact us at: hello@digitalvibe.my

2. What Personal Data We Collect

We collect the following personal data from our subscribers (the businesses that pay for LeadZap):

• Full name and business name
• WhatsApp number (used to deliver lead notifications)
• Email address (used for billing and service communications)
• TikTok Ads Account information (account ID, for webhook configuration)
• Payment records (transaction date, amount paid — we do not store card details)
• Service usage data (lead count, last active date, subscription status)

3. How We Use Your Personal Data

We use subscriber personal data strictly for the following purposes:

• To deliver the LeadZap service (routing lead notifications to your WhatsApp)
• To manage your subscription, including activation, renewal reminders, and cancellation
• To send you monthly lead reports and service notifications via WhatsApp
• To communicate with you regarding support, service updates, or billing
• To maintain our internal subscriber management records
• To comply with our legal obligations under Malaysian law
• To inform you from time to time about other products or services from Digital Vibe Resources that may be relevant to your business. You may opt out of such communications at any time by emailing hello@digitalvibe.my

We do not sell your personal data to third parties or share it with external parties for their own marketing purposes.

4. Third-Party Services We Use

To deliver the LeadZap service, we use the following third-party platforms. By subscribing to LeadZap, you acknowledge that data passes through these services:

• TikTok Marketing API (Leads API) — Used to receive lead form submission data from your TikTok campaigns. Governed by TikTok's own Privacy Policy and Terms of Service.
• Meta WhatsApp Business API — Used to send lead notifications to your WhatsApp number. Governed by Meta's Privacy Policy and WhatsApp Business Terms.
• Google Sheets (Google LLC) — Used to store your leads in a dedicated private Google Sheet hosted by LeadZap on your behalf. Only you (the subscriber) are granted access to this sheet. Governed by Google's Privacy Policy.
• Make.com (formerly Integromat) — The automation platform that powers LeadZap's workflow. Subscriber data (webhook keys, WhatsApp numbers) is stored within Make.com's infrastructure. Governed by Make.com's Privacy Policy.

We encourage you to review the privacy policies of these third-party platforms as their data handling practices are outside our control.

5. Your Customers' Data (Roles and Responsibilities)

As a LeadZap subscriber, you collect personal data from your own customers (leads) through your TikTok Lead Generation Ads. This data is routed through LeadZap's system, delivered to your WhatsApp, and saved to a dedicated private Google Sheet hosted by LeadZap on your behalf. Only you — the subscribing business — are granted access to view and export this sheet.

LeadZap acts as a data processor in relation to your customers' personal data — we process it solely for the purpose of delivering it to you, on your instruction. You remain the data controller for your leads' personal data under Malaysia's PDPA 2010. You are responsible for:

• Ensuring your TikTok Lead Form includes a clear consent notice informing leads that their data will be collected and processed
• Using the collected lead data only for the purposes disclosed to your leads
• Responding to any data access, correction, or deletion requests from your leads
• Complying with all applicable data protection laws in your jurisdiction

LeadZap accepts no liability for a subscriber's non-compliance with PDPA or any other data protection regulation regarding their customers' personal data.

6. Data Retention

• Subscriber account data — Retained for the duration of your subscription and for up to 12 months after cancellation for record-keeping purposes, then deleted.
• Payment records — Retained for 7 years in compliance with Malaysian financial record-keeping requirements.
• Your leads' data — Stored in a dedicated private Google Sheet hosted by LeadZap, accessible only to you. We recommend exporting your leads before cancellation. Sheets are permanently deleted 30 days after account closure.

7. Data Security

We implement reasonable technical and organisational measures to protect subscriber data, including unique encrypted webhook keys for each subscriber, access controls limiting who can view subscriber information, and use of reputable third-party platforms with their own security certifications.

However, no internet-based service can guarantee 100% security. In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach, in accordance with the 2024 amendments to Malaysia's PDPA.

8. Your Rights Under PDPA

As a data subject under Malaysia's PDPA 2010, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Withdraw consent — Withdraw your consent for us to process your data (note: this may result in inability to provide the service)
• Limit processing — Request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at hello@digitalvibe.my. We will respond within 21 days as required under PDPA.

9. Cookies and Analytics

The LeadZap website (leadzap.digitalvibe.my) does not currently use tracking cookies or third-party analytics tools. If this changes, this policy will be updated and you will be notified.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active subscribers via WhatsApp and/or email of any material changes at least 14 days before they take effect. The updated policy will always be available at this URL.

11. Governing Law

This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (Act 709) and its subsequent amendments.

12. Contact Us

For any privacy-related questions, data requests, or concerns:

• Email: hello@digitalvibe.my
• Company: Digital Vibe Resources, Malaysia
• Response time: 3–5 business days