Legal

Privacy Policy

Last updated: 14 September 2026

This policy explains how Squaduler, operated by Strateefy Sdn. Bhd. (“Squaduler”, “we”, “us”), collects, uses, stores and protects information when you use squaduler.com and the Squaduler platform. It is governed by the Personal Data Protection Act 2010 of Malaysia (PDPA).

1. Who we are

Squaduler is a scheduling and booking platform for service businesses with a team — salons, beauty studios, fitness studios, clinics and spas. The data controller is Strateefy Sdn. Bhd., registered in Malaysia. For any privacy matter, contact support@squaduler.com.

Where a business uses Squaduler to manage its own customers, that business is the controller of its customer data and Squaduler acts as a data processor on its instructions.

2. Information we collect

Account information

Name, email address, phone number, password credentials, business name, business address and role within the business.

Booking and operational data

Services, appointments, customer records you create, talent profiles and skills, shift and leave records, invoices, payment records and other data you enter into your workspace.

WhatsApp Business data

If you choose to connect your WhatsApp Business Account, we access data made available through Meta's WhatsApp Business API — your WhatsApp Business Account ID, connected phone number, business profile details, and the content and metadata of messages sent to or from your number.

Technical data

IP address, device and browser type, log data, and cookies or similar technologies used to keep you signed in and to measure product usage.

3. WhatsApp Business API and Meta

Squaduler is a Tech Provider for Meta's WhatsApp Business Platform. Businesses connect their own WhatsApp Business Account to Squaduler through Meta's official Embedded Signup flow, and grant Squaduler permission to send and receive messages on that account's behalf.

We use WhatsApp data solely to deliver the messaging features of the platform to the business that connected the account: sending booking confirmations and appointment reminders that business has configured, displaying incoming customer replies in that business's inbox, and linking conversations to customer records in its workspace. We do not sell WhatsApp data, do not use it for advertising, and do not share it with other Squaduler customers.

Message content is processed in accordance with Meta's Platform Terms and the WhatsApp Business Messaging Policy. A business may disconnect its WhatsApp Business Account at any time from Squaduler settings, or revoke access from its Meta Business Manager; message data is then deleted from active systems within 30 days.

4. How we use information

To provide, operate and maintain the Squaduler platform and its features.

To authenticate users, secure accounts and prevent fraud or abuse.

To process subscription payments and issue invoices.

To provide customer support and respond to enquiries.

To send service and product notices; marketing email only with consent, with an opt-out in every message.

To comply with legal obligations under Malaysian law.

5. Data storage and security

Data is stored on managed cloud infrastructure with encryption in transit over TLS and encryption at rest. Access is restricted to authorised personnel on a need-to-know basis, with workspace-level isolation so each business sees only its own data. Data may be processed outside Malaysia by our infrastructure providers; where this happens we require safeguards consistent with the PDPA.

We retain personal data for as long as your account is active, and thereafter only as required for legal, tax or accounting purposes.

6. Sharing with third parties

We share data only with service providers necessary to run the platform — cloud hosting and database, Meta (for WhatsApp messaging), payment processors, email delivery and analytics providers — each bound to process data on our instructions. We may disclose data where required by law or valid legal process. We do not sell personal data.

7. Your rights

Under the PDPA 2010 you may request access to the personal data we hold about you, request correction of inaccurate data, withdraw consent to processing, limit the processing of your data for marketing purposes, and request deletion of your data subject to our legal retention obligations. Send requests to support@squaduler.com; we respond within 21 days.

If you are a customer of a business that uses Squaduler, please direct your request to that business, which controls your record. We will assist them in fulfilling it.

8. Children

Squaduler is a business tool and is not directed to children under 18. We do not knowingly collect personal data from children except where a business records a minor as a customer with parental consent.

9. Changes to this policy

We may update this policy as the platform evolves. Material changes will be notified by email or in-product notice before they take effect, and the revision date above will be updated.

10. Governing law and contact

This policy and your use of Squaduler are governed by the laws of Malaysia, including the Personal Data Protection Act 2010. Disputes are subject to the jurisdiction of the Malaysian courts.

Strateefy Sdn. Bhd. (Squaduler)

Email support@squaduler.com · squaduler.com