Maco Privacy Policy

Privacy Policy

Effective Date: July 10, 2026

This is the Privacy Policy of PT HAO LIN TRADE ("we," "us," or "our"), the operator of the Maco mobile application and related services (collectively, the "App" or "Service"). This Privacy Policy is incorporated into and subject to our Terms of Service.

We respect your privacy and are committed to protecting the personal data you share with us. This Policy explains what information we collect, how we use it, and the rights you have regarding your data. By accessing or using the Maco App or any of our Services, you signify your agreement to the terms of this Privacy Policy. If you do not agree with these terms, please do not use the Service.

1.Personal Data We Collect

We are committed to minimizing data collection and only process what is reasonably necessary to deliver, maintain, and improve our Services. The types of data we collect depend on how you interact with Maco and which features you choose to use.

1.1 Account and Profile Data
When you register for or use our Services, we may collect the following information you voluntarily provide:

• Account Information: Including account ID, login credentials, phone number, email address, or third-party account information (e.g., Google), where applicable.

• Profile Information: Including nickname, profile picture, gender, date of birth, personal signature, and other profile details you choose to share.

• Third-Party Account Data: If you sign in through a third-party platform, we may access basic public profile information or other data you authorize through that platform.

1.2 Device and Technical Data
When you access or use the Services, we may automatically collect limited technical data about your device, including:

• Device Information: Including device ID or identifiers, device type, brand and model, operating system, app version, country or region code, language settings, and mobile network operator.

• Network Information:Including IP address, network type (Wi-Fi or mobile data), connection status, and access network state information, used to ensure service stability, optimize performance, and prevent abuse or fraud.

• System and Usage Data: Including login history, basic usage patterns, interaction frequency, and feature usage data, used solely for analytics and service improvement.

1.3 Permissions and Feature-Related Data Access
Depending on your use of specific features, Maco may request access to certain device permissions. These permissions are used only when necessary and only for the intended functionality:

• Internet & Network State: To enable core app functionality and optimize network performance.

• Camera & Microphone: To support video calls, voice messages and audio-related features.

• Storage & Media Access: Access to photos or media files is requested only when you actively choose to upload, select, or share media content within the App, such as setting a profile picture or sending media in chats. On Android 10 or below, external storage access is requested only if you choose to save images or media files to your device.

• Notifications: To deliver service-related alerts and updates. You may disable notifications at any time through device settings.

• Bluetooth: To connect and use Bluetooth audio devices during voice or video interactions.

1.4 User Content and Interaction Data
When you use interactive features of the Services, we may process:

• User-Generated Content: Including text messages, comments, images, audio, and video content you choose to create or share.

• Behavior and Interaction Data: Including browsing or interaction history within the app and audio-video streaming activity, processed only to provide the requested features and comply with applicable laws.

1.5 Virtual Currency and Payment Information
If you make purchases within the Services:

• Payment details are processed directly by authorized third-party payment providers and are not stored by us.

• We may retain limited transaction records, such as order ID, transaction date, purchase amount, and virtual currency balance, for accounting, fraud prevention, and compliance purposes.

1.6 Communication and Support Data
If you contact us via email or in-app support, we may collect the information you provide, such as your name, email address, and the content of your communication, in order to respond to your request and provide support
1.7 Additional Feature-Specific Data

• Third-Party App Detection: We may detect whether certain third-party applications (such as WhatsApp or Google Play) are installed, solely to enable related features, provide compatibility support, or guide user actions. No content or personal data from those apps is accessed.

• Clipboard Access: Clipboard data is accessed only when you actively perform a copy or paste action within the app, and is not accessed in the background, stored, or shared.

2.The Way We Process Your Personal Data

We process your personal data only for specific, legitimate purposes and in accordance with applicable laws. The following describes the ways in which we use your personal data.

2.1 Service delivery and Customer Support

We use your Personal Data - such as your name and email address - to deliver our services and assist you with customer support. This includes facilitating account login, managing your account, and responding to your inquiries.

2.2 Payment Processing

We receive limited payment-related information from our third-party payment processors to maintain orderly records, link your payment method to your account, and handle billing and invoicing. We do not store full payment details.

2.3 Service Improvement and Development

To improve usability, quality, functionality, and performance, we collect and analyze data about how you interact with our Services. This includes debugging to identify and resolve errors, and conducting internal research to support technological advancement and product development.

2.4 Marketing and Advertising

We use tracking technologies to serve advertisements when you visit our Services. This may include both personalized and non-personalized ads, which are displayed during your current session with us. Your Personal Data will not be shared with third parties or used to create a profile about you.

2.5 Integrity and Security

We process certain information regarding you and your usage of our Services to maintain platform integrity and security, prevent fraudulent activity, verify your identity, and enforce our policies.

2.6 Legal Compliance and Law Enforcement Assistance

We may process your personal data to comply with legal obligations under applicable laws, and to cooperate with lawful requests from regulatory or law enforcement authorities.

3.The Way We Share Your Personal Data

We do not sell or rent your personal data to any third parties. We only share your information in limited circumstances where it is necessary to provide, maintain, and improve our Services, or where required by law.

3.1. Authorized Service Providers

We engage trusted third-party vendors to help us operate and improve our Services—such as cloud hosting, customer support, analytics, and fraud detection. These providers are granted access only to the information necessary to perform their specific functions, and are contractually bound to protect your data.

3.2. Payment Processors

We engage third-party processors to securely handle transactions. They may access billing information and transaction data required to complete your purchases.

3.3. Third-party Integrations

You may choose to link your account with third-party services (e.g., Google, or other platform). These integrations may share your user ID, profile information, or authentication tokens, subject to your consent and the privacy settings you have selected on those platforms.

3.4. Legal Requirements and Enforcement

We may disclose your data when required by law, court order, or in response to valid legal processes. Additionally, we may share data to prevent fraud, enforce our Terms of Services, or protect the rights and safety of others.

3.5. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of the transaction. We will take reasonable steps to ensure your data remains protected.

4.The Way We Protect Your Personal Data

We prioritize your privacy and are dedicated to safeguarding your Personal Data. To mitigate the risk of unauthorized access, use, or disclosure of your information, we have established a range of administrative, technical, and physical safeguards, which may include:

• Encryption during data transmission (e.g., using HTTPS/TLS).

• Strict access controls and authentication measures.

• Regular system monitoring and vulnerability assessments;.

• Ongoing staff training on data protection policies and security practices.

That said, no system or method of online transmission is completely infallible. While we do everything we reasonably can to defend your information, we cannot guarantee absolute security against every possible threat—including fraud, identity theft, or unauthorized access. We also encourage you to play an active role in protecting your own data. Be mindful of what you choose to share, especially in public areas of our Services, and keep your login credentials confidential. If you believe your account or information has been compromised, or if you notice any misuse of the Services, please contact us immediately at [email protected] or reach out through customer support

5.Storage and Processing of Your Personal Data
5.1 Information Storage

Your personal data may be processed and stored in countries where we or our service providers maintain facilities. When we transfer your information across borders, we do so in compliance with applicable data protection laws and implement appropriate safeguards to ensure your data remains secure throughout the process.

5.2 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law.

• Active account holders: We keep your data while your account remains active, or for as long as needed to provide our Services.

• Visitors or temporary users: Your data is retained for a limited period following your last interaction, in line with legal requirements.

We may also retain specific information to meet legal obligations, resolve disputes, and enforce our Terms of Services. Once data is no longer needed, we will either securely delete it or anonymize it. Backup copies may be retained temporarily for recovery and auditing purposes, in accordance with our retention policies.

5.3 International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, solely for the purposes described in this Privacy Policy. We ensure that all cross-border transfers are carried out in accordance with applicable legal and regulatory standards.

Where required, we rely on recognized safeguards—such as Standard Contractual Clauses—to protect your data during international transfers.

In cases where the GDPR or UK GDPR applies, we will only transfer or share your Personal Data with recipients who are: located in the EEA or the UK; situated in non-EEA countries or the UK that have been deemed to offer an adequate level of data protection; or who have established legal agreements ensuring an adequate level of data protection.

6.Third-Party Services and Websites

Our Services may contain links to third-party websites or services that are not operated or controlled by us. This Privacy Policy does not apply to the data practices of any third-party organizations, nor to individuals we do not employ or manage—including any external parties with whom we may share information as described in this Policy.

When you link your account to a third-party service or connect with an external platform, you authorize us to share certain information with that party on your behalf. This may include your username, indication that the connection originated from our Services, and other relevant usage or diagnostic data. We may also share information about the content or activities you engage with on our platform, in accordance with your privacy settings and applicable laws.

We encourage you to review the privacy policies of any third-party websites or services you visit, so you can fully understand how they handle your data.

Please be aware that your use of third-party services is entirely at your own risk. We are not responsible for the content, functionality, or privacy practices of any third-party services, nor for any losses or damages arising from your interactions with them.

7.Children’s Privacy

Our Services are not intended for individuals under the age of 18, or for those who do not meet the age of digital consent ("Age of Consent") as defined by applicable laws in your jurisdiction

We do not knowingly collect, use, or disclose personal data from children below the Age of Consent. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete

the information from our records and deactivate the associated account.If you are a parent or legal guardian and believe your child has provided us with personal data, please contact us at [email protected] to request the deletion of your child's account and any related information.

In jurisdictions where explicit consent is required for processing a minor's personal data, we will not process such data without obtaining valid consent from a parent or legal guardian. We comply with all applicable child privacy laws, including but not limited to COPPA, GDPR, and other relevant local regulations.

For more information on our approach to child safety, please refer to our Child Safety Policy.

8.Your Rights and Choices
Depending on your jurisdiction and applicable data protection laws (such as GDPR, CCPA, or other local regulations), you may have some or all of the following rights regarding your personal data:

• Right of Access: You may inquire whether we process your personal data and request a copy of that data along with related information.

• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format, which can be provided to you or transmitted to another service provider.

• Right to Deletion: You may request the deletion of your personal data, subject to certain legal exceptions.

• Right to Rectification: You may request that we correct or update any inaccurate, incomplete, or outdated information we hold about you.

• Right to Restrict or Object to Processing: You may ask us to limit or stop processing specific types of your personal data under certain circumstances.

• Right to Limit Use of Sensitive Data: You may request that we restrict the collection and use of your sensitive personal data to what is strictly necessary for providing our Services.

• Right to Withdraw Consent: If our processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Right to Opt Out of Sale or Sharing: Where applicable, you have the right to opt out of the sale or sharing of your personal data for targeted advertising purposes.

• Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a lower quality of service simply because you have exercised any of your privacy rights.

Please note that these rights may not be absolute and are subject to applicable legal exceptions. We may retain certain information where required for legal, security, or operational reasons. If you have no idea how to exercise any of these rights, please contact us at [email protected].

9.Deleting Your Account and Data
You may request the deletion of your account and associated personal data at any time. To do so:

• Log in to your account.

• Go to "Settings" and select "Account Cancellation."

• Confirm your request for permanent deletion.

Once confirmed, your account will be deleted immediately. This action will remove all content you have created, posted, or streamed, along with any assets linked to your account. Please be aware that after deletion, your account cannot be restored or reused. Please note:

• Certain data may be retained as required by our retention policy and legal obligations—including for fraud prevention, dispute resolution, or regulatory compliance.

We may also keep backup copies of specific information for a limited period to support business continuity and disaster recovery, in accordance with applicable laws

If you have any questions or need assistance with the deletion process, please contact us at [email protected]

10.Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws, technology, or our operations. When we make material changes, we will notify you through the App, via email, or by other appropriate means before they take effect, and revise the "Effective Date" at the top of this Policy accordingly. Your continued use of our Services after the updated Policy takes effect constitutes your acceptance of the revised terms, and we encourage you to review this Policy periodically to stay informed about how we protect your information.

13.Contact Us

If you have any questions about this Privacy Policy, our data practices, or your personal information, please reach out to us at [email protected]. For app-related inquiries, you can also contact us through the in-app customer support feature. We aim to respond to all inquiries within a reasonable timeframe.