Privacy Policy

1. Who we are

Bluepeak OS is the online workspace Bluepeak uses with the brands it manages: clients, campaigns, tasks, the content calendar, and weekly marketplace performance. Bluepeak is the data user responsible for your personal data. You can reach us at:

• Bluepeak Consultant Sdn. Bhd.
• Registration no. 202301014439 (1508361-V)
• Email: hello@bluepeakconsultant.com
• Phone: +60 12-316 0577

2. What we collect

• Your account: your name, email address, the workspaces you belong to and your role in them. Passwords are handled by our sign-in provider and stored only in hashed form; we never see them.
• Sign-up requests: when you ask for an account, your name, brand, email, phone number (if given), the platforms you sell on and any message.
• Work in your workspace: client and campaign details, tasks, comments, files sent for approval, content plans, product costs and platform charges that you or Bluepeak add.
• Connected stores: if you connect a Shopee, Lazada or TikTok Shop store, we get read-only access to its orders, payments and fees, products and, for TikTok Shop, shop traffic. We keep order-level figures (order number, dates, amounts, fees, items) to work out weekly totals. We do not request or store buyers' names, addresses, phone numbers or emails from these platforms.
• CSV imports: some marketplace exports include buyers' details. Uploaded rows are kept only so Bluepeak can check and undo an import, are visible to Bluepeak staff only, and can be deleted at any time once the numbers are in. Please remove buyer columns before uploading where you can.
• Technical data: cookies needed to keep you signed in (see section 8) and standard server logs (such as IP address and browser type) kept by our hosting providers for security.

We don't use advertising or analytics trackers.

3. How we use it

• To run Bluepeak OS: sign you in, show each brand its own workspace, and work out sales, costs, profit and other figures.
• To send alerts and the optional daily email about your workspace.
• To answer sign-up requests and set up new accounts.
• To keep the service secure, fix problems, and meet our legal obligations.

We don't sell personal data, and we don't use marketplace data for advertising.

4. AI in Bluepeak OS

Bluepeak OS can draft a weekly note and suggestions for a brand using Claude, an AI model by Anthropic. We send only store-level numbers, such as sales, ad spend, profit, shopper counts and best-selling products, never buyer details. Each note says whether it was written automatically or checked by Bluepeak, and suggestions are always checked by Bluepeak before you see them.

"Ask the guide" answers questions about using Bluepeak OS with the same AI. Your question is sent to Anthropic to write the answer; the guide can't see your store or numbers, and Bluepeak doesn't save the chat. Please don't include personal details in your questions.

5. Who we share it with

Personal data is shared only as needed to run the service:

• Inside your workspace: Bluepeak staff who serve your brand, and the people your brand has added, according to their role.
• Service providers who process data for us: Supabase (database, sign-in and file storage), Vercel (hosting), Resend (email) and Anthropic (AI drafts and the guide). They may use it only to provide their service to us.
• Shopee, Lazada and TikTok Shop: when you connect a store you sign in and approve access on their own site, and we receive data from them as described in section 2. Their own privacy policies apply there.
• Authorities, where the law requires it.

6. Where your data is stored

Our database and servers are in Singapore. Some providers, such as our email and AI providers, may process data in other countries. Where data leaves Malaysia we use providers that protect it to a standard comparable to the PDPA.

7. How we protect it and how long we keep it

• Data is encrypted in transit, and store access keys are encrypted when stored.
• Each brand's workspace is walled off from every other at the database level, and access depends on your role.
• Files are private and opened only through short-lived links.

We keep personal data while your account or our work with your brand continues, then delete or anonymise it unless the law requires us to keep it longer. Disconnecting a store deletes its access keys and stored order lines; the weekly totals stay. Sign-up requests are kept so we can follow up with you; ask us and we'll delete yours.

8. Cookies

Bluepeak OS uses only cookies it needs to work: one set by our sign-in provider to keep you signed in, one that remembers which workspace you were viewing, and a short-lived one while you connect a store. There are no advertising or tracking cookies.

9. Your rights

Under the PDPA you may ask us to:

• give you a copy of the personal data we hold about you;
• correct personal data that is wrong or out of date;
• stop or limit using your personal data, or withdraw your consent.

Email hello@bluepeakconsultant.com and we'll reply within 21 days. If you withdraw consent we may no longer be able to provide Bluepeak OS to you.

10. Changes to this policy

If we change this policy we'll update the date at the top and let you know about important changes. See also our Terms & Conditions.