Who we are
HeroVend is a vending machine business in Malaysia. This policy is published by HEROVEND PLT (202604000880), Block J-8-9, Solaris Mont Kiara, 50480 Kuala Lumpur, Malaysia. “We”, “us” and “our” mean that company.
For anything to do with privacy, email admin@herovend.com.
The HeroVend Comment Auto-DM app
We run a Meta app called HeroVend Comment Auto-DM. It is connected to our Facebook Page, Vending.Herovend, and our Instagram account, @vending.herovend. It works only on our own posts and reels.
What it does
When someone comments “dm” on one of our posts or reels, the app automatically:
- sends that person one private message containing HeroVend's contact details (our WhatsApp number and link), and
- posts a public reply, “Check your DM”, under their comment.
That is all it does. It does not send follow-up messages, it does not add you to a mailing list, and it does not read your profile, your friends or followers, or your other posts, comments or messages.
What the app receives from Meta
When you comment on one of our posts, Meta sends our app:
- your public name or username,
- your Meta-scoped user ID (a number Meta creates for our app; it is not your login and cannot be used to sign in as you),
- the text of your comment and the comment's ID, and
- the ID of the post or reel you commented on.
We do not receive your email address, phone number, password, location or private messages from Meta.
How we use it
Only to do the two things above: check whether the comment says “dm”, send the private message to the person who wrote it, and reply under that comment. We do not use it for advertising, profiling or building a contact list.
Where it is processed
The app runs on an automation server that we host and operate ourselves (using the open-source tool n8n). The information is not passed to any other company. Meta, of course, already holds it, because the comment was made on Facebook or Instagram.
What we keep, and for how long
| Information | Do we keep it? |
|---|---|
| Comment IDs | Yes. We keep a short list of recent comment IDs so the same comment is never answered twice. A comment ID is a number that points to a comment on Facebook or Instagram; on its own it does not say who you are. |
| Your name or username | Not stored long-term. |
| Your comment text | Not stored long-term. |
| The message we sent you | Not stored by our app. The conversation does appear in our Facebook Page and Instagram inbox, the same as any other message, and is held there by Meta. |
Like most software, our server may keep short-lived technical logs of each run so that we can fix problems. These can briefly include the details listed above. They are not used for anything else and are not kept long-term.
Sharing
We do not sell this information, and we do not share it with third parties. The only exception would be if Malaysian law required us to hand something over, and as described above there is very little to hand over.
Meta's own rules
Your use of Facebook and Instagram is covered by Meta's terms and the Meta Privacy Policy. Our app is bound by the Meta Platform Terms. Meta handles your comments, messages and profile under its own policies, which we do not control.
If you don't want the message
Don't comment “dm”, and the app will never contact you. If you have already received the message, you can delete the conversation, block our account, or simply ignore it; no further automated messages will follow. To have stored comment IDs removed, see our data deletion instructions.
This website
herovend.com is a static website. There are no accounts, no forms and no online payments, so we do not collect your name, email or phone number through the site itself.
Analytics and cookies
The main pages of the site (the homepage in English, Malay and Chinese) load two analytics tools so we can see how the site is used and improve it:
- Google Analytics 4. Counts visits and shows us which sections people read, roughly where visitors are (country and city level), and what kind of device and browser they use. It sets cookies in your browser (such as
_ga) to tell one visitor from another. See how Google uses this information. - Microsoft Clarity. Records how visitors interact with the page, such as clicks, scrolling and mouse movement, and lets us replay those sessions and view heatmaps. It also sets cookies (such as
_clckand_clsk). See the Microsoft Privacy Statement.
Both tools are run by Google and Microsoft, who receive this usage information, including your IP address, under their own privacy policies. We only look at the results to improve the site. We do not use them to identify individual visitors, and since the site has no forms, neither tool sees anything you type.
You can block these cookies in your browser settings, use a content blocker, or install Google's opt-out add-on. The site works the same without them. This page, the Terms of Service and the data deletion instructions do not load either analytics tool.
Fonts
Our fonts are loaded from Google Fonts, so your browser contacts Google's servers when a page loads, and Google sees your IP address as part of that request.
Links to other services
The site links to WhatsApp, Instagram, Google Maps and our HeroCloud dashboard. Once you follow a link, that service's own privacy policy applies.
When you contact us
If you message us on WhatsApp, Facebook or Instagram, or email us, we receive whatever you send, along with your phone number, account name or email address. We use it to reply to you and, if you become a customer, to do business with you. We keep those conversations for as long as they are useful for that purpose, and you can ask us to delete them.
Your choices
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Malaysia's Personal Data Protection Act 2010 gives you rights of access and correction, and we will honour deletion requests too. Email admin@herovend.com and we will reply within 30 days. For the Comment Auto-DM app specifically, follow the data deletion instructions.
Children
Our business is selling vending machines to adults. We do not knowingly collect information from children.
Changes to this policy
If we change what we collect or how we use it, we will update this page.
Contact
HEROVEND PLT (202604000880), Block J-8-9, Solaris Mont Kiara, 50480 Kuala Lumpur, Malaysia
Email: admin@herovend.com
