Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the KiraPOS website and cloud point-of-sale service (“Service”). We aim to align with the Malaysian Personal Data Protection Act 2010 (PDPA) and good industry practice.

2. Data we collect

• Account data: name, email, phone, business name, and credentials you provide when registering or contacting us.
• Service data: transactions, products, inventory, staff, and outlet records you enter into KiraPOS.
• Billing data: subscription and payment information processed by our payment provider (e.g. Stripe); we do not store full card numbers on our servers.
• Technical data: IP address, device/browser type, and usage logs for security, analytics, and service improvement.

3. How we use data

• To provide, operate, and support the Service.
• To authenticate users and protect accounts.
• To bill subscriptions and send service-related notices.
• To respond to enquiries and provide customer support.
• To comply with law and enforce our Terms of Service.

4. Legal bases (PDPA)

We process personal data where you have consented, where necessary to perform our contract with you, or where we have a legitimate interest (such as securing our systems), consistent with applicable law.

5. Sharing and processors

We may share data with trusted subprocessors who help us run the Service (for example: cloud hosting, database providers, email, analytics, and payment processing). They may only use data to provide services to us and under appropriate safeguards. We do not sell your personal data.

6. Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. You may request deletion subject to legal retention requirements.

7. Security

We implement reasonable technical and organisational measures to protect personal data. No method of transmission over the Internet is 100% secure.

8. Your rights

Subject to PDPA and other law, you may request access to, correction of, or further information about your personal data we hold. Contact us using the details below. We may need to verify your identity before fulfilling a request.

9. International transfers

Your data may be processed in Malaysia and in jurisdictions where our infrastructure providers operate. Where data leaves Malaysia, we take steps to ensure appropriate protection as required by law.

10. Changes

We may update this policy from time to time. The “Last updated” date will change; continued use of the Service after changes constitutes acceptance unless we require fresh consent where required by law.

11. Contact

For privacy questions or requests: contact us via the WhatsApp number on kirapos.my or email the address published on our site. Company: Sorable Sdn Bhd, Kuala Lumpur, Malaysia.