Privacy Notice for Aligned Early Access
Version ea-privacy-2026-10-10 · Last updated 10 October 2026
1. Who we are
Aligned is a software product and brand for homestay owners in Malaysia. It is operated by Mohd Syahrul Amirul, an individual based in Sarawak, Malaysia. Aligned is not yet a registered business. In this notice, "we", "us" and "our" mean that individual.
This notice covers the aligned.my website, the Interactive Demo and Early Access registration. The Aligned service itself is not operating yet, and this notice does not cover it.
2. What we collect
When you join Early Access, you give us your name, your WhatsApp number (Malaysian numbers only), your homestay name, how many homestays you run, and where most of your bookings come from. All five are needed to join.
We add the date and time you registered, the version of this notice you saw, whether you came from the Interactive Demo, random reference IDs, and the status of your registration (new, contacted, invited or withdrawn).
Your registration also includes the arrival details and the anonymous ID that your browser keeps (section 5). They are saved with your name and number, so we can see how you found Aligned.
When you visit any page, your browser sends your IP address, browser and device details and the page address to Cloudflare, which hosts the website (section 6). We use your IP address briefly to limit repeated attempts on the form and for the bot check. We don't store it in your Early Access record.
The Early Access form doesn't ask for email addresses, identity card numbers or payment details. The website takes no payments and no bookings, and it creates no accounts. The Interactive Demo uses sample data only.
If you email us at hello@aligned.my, we receive your email address and your message, including any details you choose to include. We use them only to reply to you and to handle your request.
3. Why we use it
To run Early Access: to contact you on WhatsApp when Aligned is ready for you, to plan onboarding waves, to check whether Aligned fits how you work today, and to understand which channels bring owners to Aligned. We also use technical details to protect the form from bots and repeated attempts, and to keep the website working and secure.
4. WhatsApp messages
We'll use your WhatsApp number for Early Access messages only, such as your invitation, onboarding steps and questions about your registration. We won't send marketing messages unless you separately agree to them. You can ask us to stop at any time by replying STOP or by contacting us. WhatsApp (Meta) also processes these messages under its own terms.
5. Analytics, cookies and browser storage
We don't use a third-party analytics service on this website at the moment. If we decide to use one, we'll update this notice before it is turned on.
While Early Access registration is open, the website sets one cookie of its own, aligned_aid. It holds a random anonymous ID and lasts 12 months from your first visit. While registration is open, the website also keeps two entries in your browser's storage, aligned_first_touch_v1 and aligned_last_touch_v1. They record how you first and most recently arrived: campaign tags or a referral or creator code in the link, the name of the website that sent you, the page you landed on, and the time. They stay until you clear your browser's storage.
The website sends these details to us only when you join Early Access, as part of your registration. Like any cookie, the anonymous ID cookie also travels with each page request to our website, but our code doesn't read or store it then.
To show icons, the website keeps copies of icon images in your browser's storage (entries named iconify-version, iconify-count, iconify0, iconify1 and so on). They hold no personal data, and copies older than 7 days are removed. The Interactive Demo keeps its sample data, and anything you type into it, in your browser's storage (for example aligned-demo-AL-DEMO-001). This stays on your device and is never sent to us.
You can delete cookies and browser storage in your browser settings at any time. The website and the Early Access form are designed to work without them.
6. Who processes your data for us
Hosting and security: Cloudflare, Inc., which runs the website on Cloudflare Workers across its global network. Database for Early Access registrations: Cloudflare D1, a service of Cloudflare, Inc., set up with an Asia-Pacific (APAC) location hint. A location hint is a preference, not a guarantee, so your registration may be stored and processed outside Malaysia.
On the Early Access form, Cloudflare Turnstile checks that a person, not a bot, is submitting. It processes your IP address and technical details about your browser and device for that check.
Cloudflare also keeps short technical logs of requests to our website. They can include your IP address, browser details and the address of the page you asked for, including any campaign tags in it. Cloudflare deletes them automatically after a few days (7 days at most). Our code never writes the details you type into the form to these logs. Separately, Cloudflare may use limited network data, such as IP addresses, to secure and run its own services, under its own privacy policy.
To show fonts and icons, your browser also requests files from Google Fonts (Google) and from Iconify's icon service (api.iconify.design and its backup servers). The Interactive Demo also loads Iconify's icon code from code.iconify.design. These providers receive your IP address and browser details with those requests. WhatsApp (Meta) carries the messages we send you. Emails sent to hello@aligned.my are handled by Google Workspace (Google), which hosts our mailbox. We may download the Early Access list to our own device to manage invitations. We don't sell your data.
7. Where your data is processed
Cloudflare runs a global network, so your requests and your registration may be handled in data centres outside Malaysia. Our database is set up with an Asia-Pacific location hint, which Cloudflare treats as a preference, not a guarantee. Google (for fonts, and for our email through Google Workspace), Iconify and WhatsApp (Meta) may also process data outside Malaysia. This means your details may be transferred to other countries and processed there.
8. How we protect your data
The website is served only over HTTPS. The Early Access form is protected by Cloudflare Turnstile and a limit on repeated attempts, and our server checks every registration before saving it. Access to the Early Access database is limited to our Cloudflare account. Downloading the Early Access list needs both a Cloudflare Access sign-in and a secret key, and each download is recorded. No online service is completely secure, so we can't promise that your details will never be lost or misused, but we take these steps to protect them.
9. How long we keep it
We keep your Early Access details for up to 12 months from the date you register, or until you ask us to delete them, whichever is sooner. If you don't become an Aligned customer, we delete your Early Access details at the end of that period. We carry out this deletion ourselves. After deletion, a copy can remain in Cloudflare's database recovery history, and in our own backup copies, for up to 30 days before it is removed. We keep emails you send us only as long as we need them to handle your request. Request logs, cookies and browser storage are kept as described in sections 5 and 6.
10. Your rights and choices
You can ask to see the details we hold about you, to correct them, to withdraw from Early Access, to have your details deleted, or to stop receiving WhatsApp messages from us. To stop WhatsApp messages, you can also reply STOP. Contact us at hello@aligned.my. To protect your details, we confirm each request with the WhatsApp number you registered. We'll answer within 21 days.
11. Changes
If we change this notice, we'll update the version and date above. Your registration records which version you saw. If a change affects how we use the details you already gave us, we'll tell you on WhatsApp first.
If the English and Bahasa Melayu versions differ, the English version applies.