Revoluzion Automotive ("Revoluzion", "we", "us", "our") operates the automotive community and commerce platform at revoluzion.my, including its feed, marketplace, stores, online shop, services directory, events, car clubs, garage, dealer programme and related features (together, the "Platform").

We are committed to protecting your personal data and to complying with the Personal Data Protection Act 2010 ("PDPA"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices and rights you have. It applies to all users of the Platform.

We collect the following categories of information:

• Account information: name, email address, username, display name, profile photo, password (stored only in hashed form) and verification status.
• Content you create: posts, reels, comments, photos, videos, build logs, garage entries, marketplace listings, store and product details, forum posts, club content and chat messages. Content you post publicly may be visible to, and copied, saved or shared by, other users and third parties.
• Transaction information: orders, invoices, delivery addresses, phone numbers, purchase history, coupons used and Points balances.
• Dealer & business information: company name, business registration details, tax identification number and application documents (for dealers and stores).
• Communications: messages sent through Platform chat, support enquiries, reports and email correspondence.
• Usage data: pages visited, features used, searches, interactions, likes, follows and viewing activity, used to operate and improve the Platform.
• Device & technical data: browser type, device type, operating system, IP address, referral pages and approximate location.
• Media access: camera and microphone, only when you actively choose to record or upload a photo or video (for example, reels or DIY tutorials).
• Sign-in data from Google: when you sign in with Google, we receive your name, email address and profile picture from Google.

• Directly from you: when you register, complete your profile, post content, place orders, apply to the dealer programme or contact us.
• Automatically: through cookies and similar technologies as you use the Platform (see our Cookie Policy).
• From third parties: Google when you sign in with Google, and payment providers when you complete a transaction.

We use your information to:

• Create and manage your account and provide the features of the Platform
• Process orders, payments, deliveries, invoices and refunds
• Connect buyers and sellers, and event organisers and attendees
• Personalise your feed, recommendations and notifications
• Operate rewards such as coupons, vouchers, Points and referrals
• Promote community content (photos, videos and listings) on the Platform and in Revoluzion marketing
• Send service, security, order and account notices (email, in-app and push)
• Moderate content, detect and prevent fraud and abuse, and keep the community safe
• Analyse usage to improve performance, features and user experience
• Respond to your enquiries and support requests
• Comply with legal, tax and regulatory obligations and respond to lawful requests

We do not sell your personal data. We share information only as necessary with trusted service providers, including:

• Supabase — database, authentication and file storage
• Cloudflare R2 — image and video storage
• Stripe — payment processing (card, FPX, GrabPay)
• Google — sign-in, Maps and analytics
• Vercel — hosting and content delivery
• Email delivery service — transactional and marketing email delivery (SMTP)
• WhatsApp / Instagram — where you choose to use their integrations
• Other users and the public — content you post publicly is visible to other users and visitors of the Platform

These providers process data under their own security and privacy practices and only to the extent needed to deliver their services. We may also disclose information where required by law, court order or a government authority, or to protect the rights, property or safety of Revoluzion, our users or the public.

Online shop payments are processed entirely by Stripe, a PCI-DSS compliant payment provider. We never receive or store your full card number or payment credentials. Store purchases completed via WhatsApp are handled directly between you and the seller, outside our systems, and are not processed by Revoluzion.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform and understand how it is used. We may use anonymised analytics to measure performance and improve the Platform. Full details, including how to control cookies, are in our Cookie Policy.

Camera and microphone access is requested only when you actively record or upload media (for example, reels, DIY videos or photos) and is never used in the background. Location data is used to display maps, store and event locations and delivery estimates. Where required, we ask for your permission first, and you can revoke it in your browser or device settings at any time.

With your permission, we may send browser push notifications (for example, event reminders, order updates, messages and community activity). You can enable or disable push notifications at any time in your notification settings or browser settings.

We may send you optional marketing communications (newsletters, offers and updates) by email. You can opt out at any time using the unsubscribe link in any marketing email, or by contacting us. Opting out does not affect service messages we need to send you.

We retain your personal data while your account is active and for as long as necessary to provide the Platform and meet legal, tax and accounting obligations. When you close your account (from your profile settings), we delete or anonymise your personal data within a reasonable period, subject to any legal retention requirements. Some content you posted may remain in an anonymised form.

We use industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, least-privilege policies and secure infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You also play a part: keep your password strong and confidential and enable verification of your email.

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where consent is the legal basis)
• Request deletion of your account and personal data
• Limit processing, including opting out of marketing

To exercise any of these rights, contact us at support@revoluzion.my. We will respond within a reasonable time and may need to verify your identity first.

The Platform is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Some of our service providers may process data on servers outside Malaysia. Where this occurs, we take reasonable steps to ensure your data receives a level of protection consistent with the PDPA, for example through contractual safeguards with those providers.

The Platform contains links to third-party websites and services (for example, WhatsApp, Google Maps and social media). This Privacy Policy does not apply to those third parties. We encourage you to read their privacy policies before providing them with your information.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision, and material changes will be communicated on the Platform or by email where appropriate.

Questions, requests or complaints about this Privacy Policy or our data practices? Contact us at support@revoluzion.my.