Last updated: 21 June 2026
This Privacy Policy explains how Evend (“we”, “us”) collects, uses, and protects your personal data when you use the Evend app and services. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
By using Evend, you consent to the collection and use of your information as described here.
Account & profile: name, username, email, password (stored hashed), phone number, profile photo, and bio.
Transactions: orders, listings, bids, vouchers, wallet/credit activity, shipping addresses, and messages with other users.
Seller & verification: information you submit to become a seller, including identity/business and payout (bank) details.
Payments: handled by Stripe. We receive limited payment metadata (such as status and the last digits/brand of a card) but do not store full card numbers.
Technical & usage: device and app information, log data, and analytics about how you use the Service.
To provide and operate the Service: create your account, show listings, process orders and payments, hold and release escrow, enable messaging, and deliver notifications.
To keep Evend safe: verify users, prevent fraud and abuse, enforce our Terms, and resolve disputes.
To improve the Service and understand usage through analytics.
To communicate with you about your account, transactions, and support requests, and (where permitted) updates about Evend.
With other users, as needed for a transaction (for example, a buyer's shipping name and address are shared with the seller of that order, and your public profile/listings are visible to others).
With service providers who process data on our behalf, including Stripe (payments), Supabase (database, authentication, storage, and hosting), and analytics and content-moderation providers.
For legal reasons: to comply with the law, enforce our Terms, or protect the rights, safety, and property of Evend, our users, or others.
We do not sell your personal data.
Your data is stored using our infrastructure providers and protected with measures such as encryption in transit, access controls, and row-level security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Some providers may process or store data outside Malaysia. Where this happens, we take steps to ensure your data remains protected to a comparable standard.
We keep your personal data for as long as your account is active and as needed to provide the Service. We may retain certain records (for example, transaction, payout, and dispute records) for longer where required for legal, tax, accounting, or fraud-prevention purposes.
Subject to applicable law, you may access or correct your personal data, withdraw consent, or request deletion of your account and associated data. You can edit much of your profile in the app, and you can request account deletion from Settings.
To exercise your rights, contact us at support@evend.my. We may need to verify your identity and may retain limited data where the law requires.
Evend is not intended for anyone under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps.
We may update this Privacy Policy from time to time. We will update the “last updated” date and, for material changes, notify you in the app where appropriate.
If you have questions about this Privacy Policy or how we handle your data, contact us at support@evend.my.