Privacy Policy

Last updated: 19 October 2026 · Effective: 19 October 2026

This policy explains what personal data BlissPOP collects, why, and the choices you have. We aim to handle the photos and wishes you share with care.

1. Who we are

BlissPOP ("BlissPOP", "we", "us") is a service operated by Century Ventures, SSM Registration No. 200703038215 (JM0479702-P), a business registered in Malaysia. We are the data controller responsible for the personal data described in this policy.

2. What personal data we collect

We collect the following, depending on how you use BlissPOP:

If you create a Host Account

• Account data — your email address and password. Passwords are stored only as a one-way hash, so we never see them in plain text.
• Usage data — the Bliss Moments you create, their titles, occasions, validity dates, and credit balance.
• Payment data — top-up amount, date and payment status. Card, online banking and e-wallet details are entered on our payment provider's (HitPay) checkout and are not stored by us.
• Invitation data — if you sign up through a friend's invitation link, we record which account invited you so that invitation credits can be given.

If you are a guest sending a wish

• Your name (as you type it), a selfie photo you choose to upload, and your wish message and selected vibe.
• Your email address, only if you choose to be notified when the reveal or the celebrant's thank-you is ready. We use it for those notifications only, not for marketing.

If you are the Celebrant

• An optional thank-you message and group photo, shown to the guests or publicly according to the visibility you choose.

Automatically

• Basic technical data such as device and browser type, and approximate timing of actions, used to keep the service working and secure.
• On the homepage, signup page and Host Dashboard, first-party analytics records campaign labels, visit times and selected button actions using a random visit identifier in your session. When you register, we link that visit to your account so we can measure which campaigns lead to verified accounts, Moments and paid top-ups. These analytics records do not include your photos, wish messages, email address or full page URL. This tracking respects browser Do Not Track and Global Privacy Control signals.
• Settings in your browser — your language choice, and an occasion you picked on our homepage before signing up, are saved in your browser's local storage on your device.

3. How we use your data

• To create and run your Bliss Moments and show wishes in the final reveal.
• To manage your account, credits, top-ups and invitation rewards.
• To send emails you need or ask for, such as account verification, password resets and reveal notifications.
• To provide support and respond to your messages.
• To understand which campaigns bring new creators to BlissPOP and improve the signup and creation experience.
• To keep the service secure and prevent misuse.
• To meet legal and accounting obligations.

We do not sell your personal data, and we do not use guest photos for advertising. We will only feature a Bliss Moment, photo or reaction in our own marketing with the explicit permission of the people shown in it.

4. Guest photos & wishes

When a guest submits a selfie and wish through a Moment link, that content is shown to the people who open that Bliss Moment (the Host and others who have the link). By submitting, the guest agrees to their photo, name and message being displayed within that Bliss Moment.

If you are a guest and want your submission removed, contact the Host who shared the link, or email us at support@blisspop.app and we will help remove it.

5. Who we share data with

We share data only with service providers that help us run BlissPOP, under agreements that require them to protect it:

• Hosting & database / file storage — our backend and image storage provider, used to store accounts, Bliss Moments and uploaded photos.
• Payment processing — HitPay, used to process top-ups. They handle your payment details under their own privacy terms.
• Email delivery — used to send verification, password reset and notification emails.

Some providers may process data outside Malaysia. Where that happens, we take steps intended to keep your data protected to a comparable standard. We may also disclose data if required by law.

6. How long we keep it

• Account data — kept while your account is active. You can ask us to delete your account.
• Bliss Moments and guest content — a Bliss Moment is active for 30 days after creation and can be extended up to 120 days in total. We email the Host 7 days before it ends, and again at least 7 days before its content is deleted. 30 days after a Bliss Moment ends, its photos, names, wishes, thank-you message and guests' notification emails are permanently deleted. We keep only non-identifying records (package, occasion and dates) for accounting and statistics.
• Deleted Bliss Moments — if a Host deletes a Bliss Moment, its content is removed straight away and the photo files are cleared from storage within 7 days.
• Payment records — kept for up to 7 years for accounting and tax obligations.

Copies held in routine server backups are removed as those backups are replaced.

7. Your rights

Under the Personal Data Protection Act 2010 (Malaysia), you may, subject to conditions:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Withdraw consent or limit how we process your data.
• Request deletion of your account and associated data.

To exercise any of these, email support@blisspop.app. We may need to verify your identity first.

8. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No online service can be completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any issues.

9. Children

BlissPOP is intended for users aged 18 and over. If you believe a child has provided us personal data without appropriate consent, contact us and we will take appropriate steps.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Significant changes may be communicated to account holders.

11. Contact us

Questions about this policy or your data? Email support@blisspop.app or see our contact page.