Privacy Policy

Last updated: 27 October 2026

1. Who is responsible

PeachAsk is operated by Samson Chew, Singapore, who decides how your data is used. Contact (including our data protection contact): keizo.nanase@gmail.com. We follow the principles of Singapore's Personal Data Protection Act (PDPA).

2. What we collect and why

Data	Why
Your email address	To sign you in with a one-time link, send receipts/service messages, and prevent abuse (including the once-per-person launch offer).
What you put in a page: the recipient's nickname, date/time, place, food options, your letter, your signature, theme and language	To create, host and display your page. Please use a nickname for the recipient and do not include sensitive details.
Orders: PayPal order and capture IDs, amount, date, the country PayPal reports for the payer	To deliver credits, handle refunds, apply our regional restriction, and keep accounting records. We do not receive your card or PayPal login details.
Technical data: your IP address (kept only as a salted hash for abuse limits, plus your approximate country from Cloudflare), security logs, one session cookie	To keep the service secure, apply rate limits, block unavailable regions, and keep you signed in.
Abuse reports about a page (page ID, time, hashed IP of the reporter)	To review and act on reports.

We do not use advertising or analytics cookies, and we do not sell your data. The only cookie we set is a sign-in session cookie. PayPal may set its own cookies when you use its checkout.

3. Who we share data with (processors)

Cloudflare (hosting, database, network security).
PayPal (payments and refunds).
Google (Gmail, used to send the sign-in emails).
Authorities or advisers, only where the law requires or to protect people from serious harm.

These providers may process data outside Singapore (for example in the United States or Europe). We rely on their contractual and security commitments.

4. Who can see your page

Your page is not listed or indexed, but anyone who has the link can open it. The Report link on each page lets a viewer flag it to us.

5. How long we keep data

Pages: until the expiry date you chose (default 30 days), then deleted automatically; or immediately when you delete them.
Sign-in links: expire after 30 minutes and are purged soon after. Sessions last up to 30 days.
Account (email, credits): until you delete your account, or after a long period of inactivity.
Order records (IDs, amount, date, country): kept as needed for tax and accounting, normally up to 5 years, even after you delete your account.
Abuse reports and rate-limit records: reports up to 12 months; rate-limit records a few days.

6. Your choices and rights

You can ask us to access, correct or delete your personal data, or withdraw consent, by emailing keizo.nanase@gmail.com. You can also delete your pages and your whole account from the dashboard ("Delete my account & data"). We aim to respond within 30 days. Deleting your account removes your email, pages and sessions; order records we must keep are retained as described above.

7. Security

We use encrypted connections (HTTPS), store sign-in tokens only as hashes, keep payment details with PayPal, and limit access to the database. No system is perfectly secure; if a breach affecting you occurs, we will notify you and the authorities as the law requires.

8. Children

PeachAsk is for people aged 18 and over. We do not knowingly collect data from children. Contact us if you believe a child has used the service.

9. Changes

If we change this policy we will update the date above and, for material changes, notify you by email or on the site.