Privacy Policy

Last updated: 3 May 2026

This Privacy Policy describes how Naderie ("we", "us", or "our") collects, uses, and shares information about you when you use Archonary, our Shopee seller management platform (the "Service") accessible at archonary.naderie.com or archonary.vercel.app. We are committed to protecting your privacy and complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection laws.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, business name, contact details when you sign up.
• Shopee shop data: when you connect your Shopee shop to Archonary, we receive and store data from Shopee Open Platform including your shop ID, product listings, orders, inventory levels, buyer information (names, shipping addresses, contact details necessary for fulfillment), order amounts, commissions, marketing campaign data, voucher data, and ads performance metrics.
• Payment information: billing details processed by our payment provider (Stripe). We do not store full payment card details on our servers.
• Usage data: log data including IP address, browser type, pages visited, actions taken in the Service, and timestamps.
• Cookies: session cookies for authentication and basic functionality. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including order syncing, inventory management, and marketing tools;
• Process subscription payments and manage your account;
• Generate shipping labels, picklists, and other operational documents;
• Send transactional emails (account confirmations, password resets, billing receipts);
• Send operational notifications via email or WhatsApp where you have opted in;
• Improve and develop the Service;
• Detect and prevent fraud, security incidents, or abuse;
• Comply with legal obligations.

3. Buyer Information

When you connect your Shopee shop, we receive buyer-related information (names, addresses, phone numbers) solely to enable order fulfillment functions like generating shipping labels and picklists. We do not market to buyers, sell their information, or use it for any purpose other than supporting your fulfillment operations as a Shopee seller. You remain the data controller for your buyers' data; we act as a data processor on your behalf.

4. How We Share Information

We share information with the following categories of third parties:

• Shopee: we exchange data with Shopee Open Platform APIs to perform the Service.
• Service providers: infrastructure providers (Supabase for database hosting, Railway for backend hosting, Vercel for frontend hosting), email delivery (SMTP provider), and payment processing (Stripe). These parties access your data only to perform their services on our behalf.
• Legal requests: we may disclose information if required by law, court order, or government request.

We do not sell your personal information to third parties.

5. Data Retention

We retain account and shop data for as long as your account is active. After cancellation, we retain data for up to 90 days to facilitate reactivation, after which it is permanently deleted unless we are required to retain it by law (for example, for tax records). You may request earlier deletion by emailing us.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS), encrypted database storage, restricted access controls, and signed authentication tokens. No method of transmission over the internet is 100% secure, but we work continuously to protect your information.

7. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data;
• Object to certain processing of your data;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Personal Data Protection Department of Malaysia.

To exercise any of these rights, email us at enquiry@naderie.com.

8. International Data Transfers

Our service providers may process data in countries outside Malaysia (including the United States and Singapore). We ensure adequate safeguards are in place for such transfers in compliance with applicable laws.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy questions or to exercise your rights, contact us:

Naderie
Email: enquiry@naderie.com
Website: naderie.com