Who we are
Dleev is operated by Reach & Bridge Sdn. Bhd. ("Dleev", "we", "us"), registered in Malaysia, company number [Company registration number — add before launch], at [Registered address — add before launch]. For anything in this policy, write to hello@dleevapp.com.
Two different roles, and why it matters to you
Dleev holds two kinds of personal data, and our responsibility is different for each. Read whichever paragraph describes you.
If you are a Dleev customer
We are the controller of your account data — your name, email, login, billing details, support messages and how you use the product. We decide what happens to it, within this policy, and you exercise your rights directly with us.
If you filled in a form on a page built with Dleev
We are only the processor. The business whose page you were on is the controller — they decided to collect your details and they decide what happens next. We hold the data on their instructions and do not use it for our own purposes. To access or delete it, contact that business. If you cannot reach them, write to us and we will pass the request on and tell you who they are.
What we collect as controller
| Data | Why | Legal basis |
|---|---|---|
| Name, email, password hash | To create and secure your account | Performance of a contract |
| Billing details and payment records | To charge you and meet tax obligations | Contract, and legal obligation |
| Business and brand details you enter | To generate your pages and legal pages | Performance of a contract |
| Product usage and error logs | To keep the service working and diagnose faults | Legitimate interests |
| Support correspondence | To answer you and improve the product | Legitimate interests |
| Marketing-site analytics | To understand which pages are useful | Legitimate interests |
What we process on a customer's behalf
When a customer publishes a page with us, we handle the following for them. They set the purpose; we follow their instructions.
- Enquiry details submitted through a form — typically name, email, phone and whatever the customer chose to ask
- Conversations with the optional chat assistant on that page, including any contact details given in them
- A record of the visitor's cookie choice and when it was made
- Counts of visits and form steps, tied to a short-lived identifier that lives only for that browser session and is not a cookie
Customers are responsible for having a lawful basis to collect this data, for telling visitors what they are collecting, and for answering requests about it. Our Terms make that explicit.
Who we share data with
We use the following providers. Each is bound to process data only on our instructions, and the list is kept current — if we add one, this table changes.
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Hosts and serves published pages and stored files | Global edge network |
| Vercel | Hosts this marketing site | Global edge network |
| Google Firebase | Sign-in and account authentication | United States |
| Stripe | Payments and subscription billing | United States, Ireland |
| Resend | Sends enquiry alerts and service email | United States |
| Anthropic | Generates page copy and powers the chat assistant | United States |
| Name.com | Registers domains bought through Dleev | United States |
| Pexels | Source of stock photography we then host ourselves | United States |
Our own application database is hosted in [Primary data region — add before launch]. We may also disclose data where the law requires it, or to establish or defend a legal claim.
Sending data abroad
Several of the providers above are outside Malaysia and outside the European Economic Area. Where personal data of EEA or UK visitors is transferred, we rely on the European Commission's Standard Contractual Clauses, or on the provider's own approved transfer mechanism. You can ask us for details of the safeguards applied to a particular transfer.
How long we keep things
| Data | Kept for |
|---|---|
| Account data | While your account is open, then 30 days |
| Billing and invoices | Seven years, to satisfy tax and accounting law |
| Leads and chat transcripts | Until the customer deletes them or closes the account, then 30 days |
| Cookie-choice records | Twelve months from the choice |
| Visit and funnel counts | Twenty-five months, then aggregated |
| Error and access logs | Ninety days |
Encrypted backups may hold copies for up to a further 30 days after deletion, after which they are overwritten.
Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent you have given. Malaysia's PDPA, the UK GDPR and the EU GDPR all grant versions of these.
Write to hello@dleevapp.com and we will respond within 30 days. There is no charge. If you are unhappy with our answer you can complain to your local data protection authority — in Malaysia, the Personal Data Protection Department (JPDP).
Security
- Traffic is encrypted in transit; stored data is encrypted at rest
- Passwords are handled by our authentication provider and never stored by us in readable form
- Access to production data is limited to people who need it to run the service
- Each customer's projects, leads and domains are separate structures in the data model rather than a filter applied when reading
No system is perfectly secure. If we become aware of a breach affecting your data we will tell you and the relevant regulator as the law requires.
Cookies
Covered separately in our Cookie Policy, including the short answer: this marketing site sets no advertising cookies, and pages published through Dleev load nothing from Google or Meta until the visitor agrees.
Children
Dleev is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Changes
If we change this policy materially we will email account holders and update the date at the top. Continuing to use Dleev after a change means you accept the updated policy.