Privacy Policy

1.Our Commitment to Privacy

At InvoiceMY ("we", "us", "our"), protecting the integrity and confidentiality of your commercial and personal data is our primary commitment. This Privacy Policy details how we collect, process, retain, and safeguard personal information in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA 2010").

2.Information We Collect

We collect information strictly necessary to provide our invoicing software services:

• Account Details: Full name, email address, and encrypted credentials managed via Supabase Auth.
• Business Profile: Trading/company name, SSM registration number, SST/TIN tax numbers, phone, and local bank account numbers for invoice payment display.
• Customer & Billing Data: Customer names, email addresses, billing addresses, line item descriptions, and pricing figures for PDF document rendering.
• Payment Information: Payment transactions are handled directly by Stripe Inc. We NEVER retain or store complete credit card numbers or CVV codes on our servers.

3.Zero-Leak Security & AI Privacy

4.Sub-Processors & Infrastructure

We rely on enterprise cloud infrastructure providers strictly complying with SOC 2 and ISO 27001 security standards:

• CHIP In Sdn. Bhd. (CHIP Asia) & Stripe: FPX online banking, DuitNow QR & subscription card payment processing
• Supabase: PostgreSQL database with Row Level Security (RLS) & Auth
• Vercel: Secure global edge serverless deployment

5.Your Rights Under Malaysian PDPA 2010

As a data subject, you enjoy enforceable statutory rights under Malaysian law:

• The right to request access to and receive a copy of your personal data.
• The right to request correction of inaccurate or incomplete information.
• The right to withdraw processing consent or request permanent account erasure.