Privacy Policy

This Privacy Policy explains how ALKIVE ("we", "us", "our") collects, uses, and protects personal data when you use our point-of-sale, CRM, and ERP platform ("Service"), in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws.

1. Information We Collect

•Account information: name, email address, phone number, password (stored as a hash, never in plain text)

•Business information: company name, registration number, address, currency, and related details you provide during registration

•Transaction data: sales, customer records, inventory, product, membership/loyalty, and other data you input while using the Service

•End-customer data: where you use the Service to record your own customers' names, phone numbers, or purchase history (e.g. for receipts, loyalty programmes, or CRM), you act as the data controller for that information, and we process it on your behalf as described in Section 3

•Usage data: log-in times, IP address, device/browser information, collected automatically for security and diagnostics

•Audit and transaction logs: records of actions taken within the Service (such as order edits, voided payments, and shift changes), retained for security, dispute resolution, and accountability purposes

2. How We Use Your Information

We use collected information to:

•Provide, operate, and maintain the Service

•Process your subscription and billing

•Communicate with you about your account, updates, or support requests

•Improve the Service through aggregated, anonymized usage analysis

•Detect, investigate, and prevent fraud, abuse, or security incidents

•Comply with legal obligations, including tax and financial record-keeping requirements

3. Data Use Limited to ALKIVE

We use your data, and any end-customer data you input, solely to provide and support the ALKIVE Service to you. We do not sell, rent, trade, or otherwise disclose your data or your customers' data to third parties for their own marketing, advertising, or commercial purposes. Where you record data about your own customers in the Service, you are responsible for ensuring you have the appropriate legal basis (such as consent or contractual necessity) to collect and process that data, and for honouring any requests from your customers to access, correct, or delete their information.

4. Data Sharing

Beyond the limitation in Section 3, we may share data only with:

•Payment processors, to complete billing transactions for your ALKIVE subscription

•Service providers who support our infrastructure (e.g. hosting, email delivery, backups), under confidentiality obligations and only to the extent necessary to provide the Service

•Authorities, where required by law, court order, or to protect our legal rights or the safety of our users

None of these parties are permitted to use your data for their own independent purposes.

5. Data Storage & Security

Your data is stored on secure servers with industry-standard safeguards, including encryption in transit and password hashing. Access to production data is restricted to authorized personnel on a need-to-know basis. While we take reasonable measures to protect your data, no system is completely secure, and we cannot guarantee absolute security. We will notify you without undue delay if we become aware of a data breach affecting your data, in accordance with applicable law.

6. Data Retention

We retain your data for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, tax, or reporting obligations (including e-invoicing and financial audit requirements, where applicable), after which it is securely deleted or anonymized. Transaction and audit logs may be retained longer than other account data where required for compliance or dispute resolution.

7. Your Rights

Under the PDPA, you have the right to:

•Access the personal data we hold about you

•Request correction of inaccurate data

•Withdraw consent for optional data processing (this may limit certain features)

•Request deletion of your account and associated data, subject to legal retention requirements

To exercise these rights, contact us at [privacy/support email].

8. Cookies

We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage patterns. You can control cookies through your browser settings, though disabling them may affect Service functionality.

9. International Data Transfers

If your data is processed or stored on servers located outside Malaysia, we take reasonable steps to ensure it receives a comparable standard of protection, in accordance with the PDPA's requirements for cross-border data transfers.

10. Children's Privacy

The Service is not intended for use by individuals under 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice before taking effect.

12. Contact

For privacy-related questions or requests, contact us at [privacy email] or [company address].

Last updated: 29/08/2026