Privacy Policy
Last updated 16 July 2026
This Privacy Policy explains how Mercavia (“Mercavia”, “we”, “us”) collects, uses, discloses and safeguards information when you use our websites, mobile web app, mall directories and AI concierge (together, the “Service”). By using the Service you agree to this Policy.
1. Information we collect
- Information you provide. Your email address when you sign in (we use passwordless sign-in), information you submit to claim or manage a mall, content you publish, and messages you send through the Service.
- Information collected automatically. Usage and interaction data (searches, pages viewed, navigation requests), approximate location if you grant permission, device and browser information, and cookies or similar technologies used to operate and improve the Service.
- Information from public and third-party sources. Mall and shop directory data, business information, photos and related content compiled from publicly available sources and third parties, including Google Places and OpenStreetMap contributors. See our Terms and the source attribution in the footer.
2. How we use information
- To operate, maintain and improve the Service, including the directory, search, navigation and AI concierge.
- To authenticate you, respond to enquiries, and enable communication between visitors and malls or shops.
- To personalise content, measure engagement, and understand how the Service is used.
- To protect the Service, prevent abuse, and comply with legal obligations.
3. AI processing
Some features (such as the AI concierge and content generation) send your query and relevant mall context to third-party AI providers to generate a response. Do not include sensitive personal information in your messages. AI responses may be inaccurate — see the Terms.
4. How we share information
- Service providers who host, secure and operate the Service on our behalf (for example cloud hosting, database, email delivery and AI processing), under appropriate confidentiality obligations.
- Malls and shops where you contact them, register for an event, or interact with their content.
- Legal and safety where required by law or to protect rights, safety and the integrity of the Service.
We do not sell your personal information.
5. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences and measure usage. You can control cookies through your browser settings; some features may not function without them.
6. Data retention
We retain information for as long as needed to provide the Service and for legitimate business or legal purposes, after which it is deleted or anonymised.
7. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and object to or restrict certain processing. To make a request, contact us at privacy@mercavia.co. If a directory listing about your business or mall is inaccurate, contact us and we will review it.
8. International transfers & storage
The Service operates across South-East Asia and uses cloud infrastructure that may store or process data in different countries. We take reasonable steps to protect information wherever it is processed.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above.
11. Contact
Questions about this Policy: privacy@mercavia.co.