Privacy Policy

Effective date: 4 July 2026 · Version 1.0

This Privacy Policy explains how Maraley International Sdn Bhd (“Unifystock”, “we”, “us”), a company registered in Malaysia (SSM Reg. No. 1259693-P) at B-1-10, Megan Ambassy, 50450 Kuala Lumpur, Malaysia, collects, uses, stores, protects, shares, and deletes personal data when you use unifystock.com and the Unifystock application. It also explains the rights you have over your data and how to exercise them.

If you have any question about this policy or your data, contact us at [email protected].

1. Who is responsible for your data

Maraley International Sdn Bhd is the data controller for the personal data of Unifystock account holders. For the marketplace and store data you connect to Unifystock (your products, inventory, and orders on Amazon, eBay, and other channels), you are the controller and Unifystock acts as your processor, handling that data only on your instructions to operate the service.

2. What data we collect

Account and contact data. Your name, email address, and account settings. For the account owner of a workspace, we also store the business contact details you provide (contact email, phone, name, and address).

Authentication data. Credentials and security records needed to sign you in and protect your account, including two-factor-authentication status and session and refresh tokens. Secret values (passwords, one-time codes, backup codes) are never stored in readable form and are never included in any data export.

Billing data. When you subscribe, our payment processor (Stripe) handles your card details directly; we store the resulting customer, checkout, and subscription references needed to manage your plan. We do not store full card numbers.

Connected marketplace and store data. When you connect a channel, you authorize Unifystock, on your own marketplace or store account, to access the data required to run the service, such as product listings, inventory levels, and orders. We access this data only through the channel’s official API and only to provide the features you use.

Content you create. Data you enter into the platform, and, where applicable, product reviews, which may include a reviewer name, text, rating, and IP address.

Usage and technical data. Log data needed to operate and secure the service, including IP address, user agent, and request identifiers.

3. How we use your data

We use personal data to: provide and operate the service (sync inventory, manage listings, track orders, produce analytics); authenticate you and secure your account; process subscriptions and payments; provide support; send transactional and service messages; comply with legal obligations (such as tax and accounting retention); and detect, prevent, and investigate abuse or security incidents.

Our legal bases are: performance of our contract with you; our legitimate interests in operating and securing the service; your consent (for example, non-essential cookies); and compliance with legal obligations.

4. How we share data

We do not sell your data, and we do not share it with any outside party for their own purposes. We share personal data only with the service providers (subprocessors) required to run the platform, each bound to protect it and use it only to provide their service to us:

• Stripe: payment processing.
• Our transactional email provider: delivering account and service emails.
• Cloudflare: content delivery, security, and DDoS protection.
• Our cloud hosting provider (located in the European Union): running the application and databases.
• The marketplaces and stores you connect (Amazon, eBay, Shopify, WooCommerce, and others): your own data flows to and from these on your authorization.

We may also disclose data where required by law, or to protect our rights, users, or the security of the service.

Amazon data

Where you connect Amazon, we access your Amazon Information solely through Amazon’s official Selling Partner API, on your own seller account. That information is processed securely within our environment, made available only to your authorized account, and is never shared with any outside party. We retain and delete Amazon Information in line with Amazon’s Data Protection Policy and this policy.

5. Where your data is stored

The application and its databases are hosted in the European Union. Personal data is encrypted in transit using HTTPS, and sensitive credentials for your connected channels are encrypted at rest. Access to production systems is restricted and logged.

6. How long we keep data

We keep personal data only as long as needed for the purpose it was collected, and delete or anonymize it on account erasure or on request. Business records kept under a legal basis are retained for the periods below:

Personal data tied to your account is removed when you erase your account, regardless of the schedule above; the schedule governs business records retained beyond an individual account’s lifetime under a legal basis.

7. Your rights

Depending on your location (including under the EU/UK GDPR and Malaysia’s PDPA), you have the right to:

• Access and export your personal data. We provide your data as a single structured file on request, and account owners can export the data of users in their workspace.
• Rectify inaccurate data.
• Erase your personal data (“right to be forgotten”), which we action across the same data surface as the export.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to your local data-protection authority.

To exercise any right, contact [email protected]. We respond within the timeframes required by applicable law.

8. Cookies

We use essential cookies to run the site and application, and non-essential cookies for analytics to understand how the site is used. You can block or delete cookies at any time through your browser settings; blocking non-essential cookies will not affect the core functionality of the application.

9. Children

Unifystock is a business tool and is not intended for children. We do not knowingly collect data from anyone under the age required to run a business in their jurisdiction.

10. Changes to this policy

We may update this policy. When we make a material change, we will update the version and effective date above and, where appropriate, notify you. Continued use of the service after a change means you accept the updated policy.

11. Contact

Maraley International Sdn Bhd · B-1-10, Megan Ambassy, 50450 Kuala Lumpur, Malaysia · [email protected]