GENERATED FILE — do not hand-edit. Source: components/core/icon-paths.js. These 25 glyphs are hand-drawn Hyunix stand-ins, NOT licensed Lucide geometry; no brand icon set was supplied (see readme.md, Open substitutions to resolve). Geometric essentials only: lines, rects and circles. Presentation attributes sit on each symbol so a glyph is correct wherever it is inlined; .hyx-icon only sets the box. Inline this file once per document, then reference a symbol by id from a use element inside an svg.hyx-icon. A markup example is deliberately omitted: a literal closing svg tag in this file would break any tool that slices the sprite by searching for one. aperture is six blades, echoing the mark; phone is a handheld device; move replaces move-3d. Skip to content
English 中文 Log in Book a scan
Book a scan
English 中文 +6013-289 9100 Log in

Privacy

What happens to what you send us

This notice has two parts. The first is about this website, which keeps nothing and sets no cookie. The second is about the Hyunix platform, where studios sign up, pay and publish tours. The platform keeps what it needs to run an account, and the second part says what that is.

Last updated 2026-11-04 Also in 中文 · Bahasa Melayu

This notice is given by ZYNTEIRO TECHNOLOGY SDN. BHD. (registration 202001015351 (1371671-M)), 3, Jln Permata, Taman Intan, 83000 Batu Pahat, Johor, Malaysia, under Malaysia's Personal Data Protection Act 2010, as amended in 2024. HYUNIX is a brand of ZYNTEIRO TECHNOLOGY SDN. BHD. and HENG ID SDN. BHD.; ZYNTEIRO TECHNOLOGY SDN. BHD. runs this website and the platform, and is the data controller for the personal data on this page, except the data inside your tours, explained in the second part.

This website

The contact form does not send anything to us

It has no back end. The form reads what you typed, writes it out as plain text, and hands it to WhatsApp or to your mail program — where you can read it, change it, or close it without sending. Nothing is posted to a server here. There is no list of enquiries on this site, because there is nowhere on it for one to be kept.

What reaches us when you do send it

A WhatsApp message or an email, containing whatever you chose to put in it. It sits in those accounts like any other message. We use it to answer you and to quote the work, and we do not pass it to anyone who is not working on your job.

If you would rather we did not keep it, email [email protected] and we will delete it.

Cookies

None. This site sets no cookie of any kind — not for analytics, not for preferences, and not the session cookie a site like this would normally set without thinking about it. Your browser leaves with nothing from us on it.

There is no analytics either — no Google Analytics, no tag manager, no tracking pixel. That is why there is no cookie banner: there is nothing to ask you to agree to.

What the page loads from somewhere else

Nothing. The typefaces, the photographs, the stylesheet and the one script all come from this site, so while your browser draws this page it asks no other company for anything — and no other company learns that you were here. The typefaces used to come from Google and no longer do. The tours are on tour.hyunix.asia, which is also ours, and you only go there if you choose to. What a tour page loads is in the second part.

Request logs

Like any web server, ours notes each request it answers: your IP address, the page asked for and the time. Cloudflare, which carries this site, the app and the tours, does the same. These logs are kept for a limited time, for security and to fix faults, and are then deleted on a schedule. We use them for nothing else.

The Hyunix platform

This part is about the platform: the app at app.hyunix.asia and the tours at tour.hyunix.asia. It says what personal data we collect there, why, who it goes to, and what you can ask of us.

Signing up and using the app

  • To make an account you give a studio name, an email address and a password, and tick the terms. We record when you ticked them. These are required: without them we cannot make an account. Everything else you tell us is up to you.
  • We use your email address to run your account: the signup code, password resets, and mails about your trial, your plan, your tours going offline and their deletion. We send no marketing email.
  • Your password is stored only as a hash. We never send a password by email.
  • The signup code is stored only as a hash. It works for 15 minutes and allows 5 tries.
  • A bot check, Cloudflare Turnstile, runs on the signup form. Cloudflare receives your IP address to run it.
  • The app keeps your login token in your browser's own storage, so that you stay logged in. Logging out removes it. The app has no analytics.

Buying a plan

Payment happens on Stripe's page. We send Stripe your account's email address and account number. Your card details go to Stripe; we never see the full card number. You can also keep your name, address and phone number with Stripe, on its billing page.

We receive and keep Stripe's references for your customer record and subscription, your plan, its status and its dates. We use these to run your plan and bill you. Stripe sends its own receipts and failed-payment mails.

Data inside your tours

The panoramas, text, audio and other files you put into your tours are yours. For any personal data in them, such as a person's face in a panorama, your business is the data controller and we are its data processor: we process it on your behalf, to host and serve your tours, and when you ask us to. We do not sell it.

A published tour is public: anyone with its link can open it. We may show a published tour as an example of our work, as the terms allow, and we stop if you ask. Your original panoramas are kept in a private storage bucket, and visitors are not served them.

If you appear in a tour, or you are a customer of a business that uses Hyunix, ask that business about your data first. We help it answer. To report a tour, email [email protected] with the tour's address.

Opening a tour

  • Tours are delivered through Cloudflare and our web server, which receive your IP address and the pages you request. We use those records only to run the tours and protect them from attacks.
  • We add no analytics of our own to a tour. A tour's owner can add their own Google Analytics ID in the app. Google then receives the visit, for that tour's owner.
  • A tour page also loads files from other companies: icons from Font Awesome, scripts from jQuery's site, and YouTube's player script. Your browser gives those companies your IP address when it asks for them.
  • A tour page sets one cookie of its own, language, to remember the language you chose.

Who we share it with

  • Stripe, for payments and billing.
  • Resend, which sends the platform's automatic mail from [email protected]. It receives your email address and the text of each mail.
  • Cloudflare, for four things. R2 stores your files and our backups. Its network delivers and protects the app, the tours and their media. Turnstile is the bot check at signup. Email Routing forwards mail sent to [email protected] to the inbox we read.
  • WhatsApp (Meta), which carries the messages you send us.
  • The company that hosts our server, where the app and the tour databases run, and the provider of the inbox we read.
  • HENG ID SDN. BHD., our related company and the other company behind the HYUNIX brand. Its staff may see account data to help run Hyunix.
  • Authorities, where the law requires it.

We do not sell personal data. Our providers for hosting, storage and delivery, payments, email and messaging work partly outside Malaysia. So your data is transferred, stored and processed outside Malaysia as well as in it.

How long we keep it

  • Your tours and files: while your account is live. When a paid plan ends, your tours stay online for 60 days, then go offline, and are kept for 60 more days. When a trial ends unpaid, they go offline at once and are kept for 60 days. A mail goes out 7 days before deletion. Then your tours and files are deleted: the files on R2 and the tour databases. See when a trial or a plan ends.
  • Your account record and billing history: until we delete them by hand. Nothing deletes them on a timer, so they stay after your tours are deleted. This covers your studio name, email address, password hash, plan, its dates and Stripe's references.
  • Stripe's records: Stripe holds its own copy of your payments and invoices. Deleting your tours does not touch them.
  • Nightly database backups: each night we copy the account database and every tour database to a private bucket. Each copy is deleted after 30 days, so a deleted tour can stay in the copies for up to 30 days.
  • Temporary upload files: deleted from our server when processing ends.
  • Unfinished signups: a signup code stops working after 15 minutes. A signup that is never finished, with its studio name, email address and password hash, is deleted after 30 days.
  • Enquiries and support messages: for as long as they are useful for dealing with you, and deleted when you ask, unless the law makes us keep them.
  • Request logs: for a limited time, for security and to fix faults, then deleted on a schedule.

What can outlast deletion

  • Cloudflare's cache. Tiles and media never change, so Cloudflare keeps copies of them close to visitors. When a file is deleted, we ask Cloudflare to clear it from the cache, which takes minutes. Until then, anyone who has its address can still open it. A browser that has already opened a tour can keep its own copy for up to a year.
  • While a tour is offline. The tour page is gone, but its files stay where they are, and a media address still works for anyone who already has it. The addresses are random.
  • Backups. See nightly database backups above.

How we protect it

Each account can reach only its own tours. Access to customer accounts and tours is limited to the people who run the platform. Passwords and signup codes are stored only as hashes, and card details never reach us. If a breach of personal data is likely to cause significant harm, we notify the Personal Data Protection Commissioner and the people affected, as the Act requires.

What you can ask of us

  • A copy of the personal data we hold about you.
  • Correction of data that is wrong, incomplete or out of date.
  • That we stop or limit processing your data, where you withdraw your consent. We may then be unable to provide a plan.
  • Your data sent to you or to another organisation, where that is technically possible. There is no download of original panoramas at launch.

Ask by WhatsApp +6013-289 9100 or email [email protected]. Use the same contacts for any question or complaint about your personal data. You can write to us in English, Malay or Chinese. We reply within 21 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner.

Changes to this notice

When this notice changes, the date at the top changes with it. If a change affects customers, we tell them by email.

This notice is published in English, Malay and Chinese. If the versions differ, the English one applies.

Asking us about any of this

Email [email protected], or send a WhatsApp message to +6013-289 9100. HYUNIX is a brand of ZYNTEIRO TECHNOLOGY SDN. BHD. and HENG ID SDN. BHD.; write to 3, Jln Permata, Taman Intan, 83000 Batu Pahat, Johor.