PRIVACY POLICY

1. Introduction

Welcome to MyInvois, a middleware system developed by Swirly Technology ("we" or "our" or "us"). We are committed to safeguarding your personal data and value your right to privacy and strive to protect your personal data in accordance with applicable data protection legislation, more specifically the Personal Data Protection Act 2010 of Malaysia ("PDPA"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use MyInvois ("Platform"). Therefore, we encourage you to read this Policy very carefully. We do not ask for your consent to the processing of your personal data by means of this Policy. Nonetheless, in certain circumstances, we may require your consent for specific processing activities envisaged by us. Even if we have your consent, you may choose to withdraw it at any time.

2. Information We Collect

We generally collect the following personal data from you, and is not limited to:

• Account Information: Name, email address, phone number, company details, and billing information.
• API Credentials: Client keys and secrets for third-party integrations, stored in encrypted format to ensure maximum security.
• Transactional Data: Invoices, payment details, and transaction history.
• Technical Data: IP address, device information, and system logs for security and analytics.
• Communication Data: Any correspondence between you and our support team.

The list above is non-exhaustive and we may collect other information deemed necessary by us.

3. How We Use Your Information

We process your personal data for the following purposes:

• To provide and improve our e-invoicing middleware services.
• To authenticate and manage user accounts.
• To process payments and transactions.
• To ensure compliance with legal and regulatory requirements.
• To detect and prevent fraud or security threats.
• To communicate with users regarding support, updates, and promotional offers (where applicable).

4. Legal Basis for Processing

We process your personal data based on:

• Your consent when registering for our services.
• Contractual necessity for providing our Platform functionalities.
• Legal obligations as required by tax and financial regulations.
• Legitimate interests in ensuring security, efficiency, and fraud prevention.

5. Data Sharing and Disclosure

We do not sell your personal data. However, we may share data with:

• Service Providers: Third-party vendors supporting our operations (e.g., cloud hosting, payment processors).
• Regulatory Authorities: If required by law, court orders, or governmental requests.
• Affiliates and Partners: For business continuity and service improvement (subject to confidentiality agreements).

6. Data Security

We implement appropriate technical and organizational measures to safeguard your data, including encryption, access controls, and regular security audits. However, no system is entirely secure, and we encourage users to take personal precautions.

7. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law. Upon expiration, data is securely deleted or anonymised.

8. Your Rights Under PDPA

Under the Malaysian PDPA, you have the following rights:

• Access and request a copy of your personal data.
• Correct or update inaccurate data.
• Withdraw consent (subject to contractual or legal obligations).
• Request deletion or restriction of processing.
• Object to direct marketing communications.

To exercise your rights, contact us at [email protected]

9. Cookies and Tracking Technologies

Our Platform may use cookies and similar technologies for functionality, analytics, and marketing. You may manage cookie preferences through your browser settings.

10. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for their privacy practices, and users should review their policies separately.

11. Policy Update

We may revise this Policy from time to time without prior notice. The latest version is available at https://myinvois.io. Your continual usage of our Platform constitutes your acknowledgement and acceptance of such changes (if any).

12. Contact Information

For any questions or concerns regarding this Privacy Policy, contact us at: