Privacy Policy

ADP Brand is the data user responsible for the personal data processed through the InvoiceLabs service. If you have any questions about this policy or your personal data, contact us at asydanial0@gmail.com.

Depending on how you use InvoiceLabs, we may collect and process:

• Account data — your name, email address, password (stored only as a secure hash) and the business you create or are invited to.
• Business profile — company name, registration number, SST/tax number, address, phone, email, website, bank details, logo, signature and stamp that you enter to appear on your documents.
• Records you create — clients and contacts, catalog items, invoices, receipts, quotations and other documents, accounting entries, and files you upload to your vault (e.g. bank statements, SSM and tax papers).
• Technical data — information needed to operate the service securely, such as authentication tokens and basic log data.

Some records you enter — such as a client’s name and contact details — are the personal data of third parties. Where you provide such data, you confirm you are entitled to do so and to have us process it on your behalf.

We process personal data for the following purposes:

• to create and administer your account and workspace;
• to provide the service — generating documents, keeping your books, storing your files and producing reports;
• to enable team access and enforce the roles and permissions you configure;
• to secure the service, prevent abuse and maintain an audit trail;
• to respond to your enquiries and provide support;
• to comply with legal and regulatory obligations.

Providing account and business data is necessary to use InvoiceLabs; without it we cannot deliver the service. We do not use your business records for advertising.

We do not sell your personal data. We disclose it only where necessary and to the following categories of recipients:

• Within your workspace — to other members of your business, according to the roles and permissions you assign.
• Service providers — trusted infrastructure partners who host and secure the service (for example, our cloud database and file-storage provider) and process data on our instructions.
• Legal & regulatory — where required by law, court order, or a lawful request from a regulator or enforcement agency.

Each workspace is logically isolated, and access is enforced by database row-level security so your data is visible only to your own team. We apply reasonable technical and organisational measures — including encryption in transit, hashed passwords and private, per-business file storage — to protect personal data against loss, misuse and unauthorised access.

Your data may be stored or processed on servers located outside Malaysia by our infrastructure providers. Where personal data is transferred outside Malaysia, we take steps to ensure it continues to receive an adequate level of protection.

We keep personal data for as long as your account is active and as needed to provide the service. After you delete data or close your account, we remove or anonymise personal data within a reasonable period, except where we must retain it to meet legal, tax or accounting obligations, or to resolve disputes. You are responsible for exporting any records you wish to keep before deletion.

Under the PDPA, you may:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• withdraw consent to processing, or limit how we process your data;
• ask us to delete personal data, subject to our legal retention needs.

Much of your data can be viewed and edited directly in the app. For other requests, contact us at asydanial0@gmail.com. We may need to verify your identity before acting on a request, and reasonable fees may apply for access requests as permitted by the PDPA.

We rely on you to keep the information in your workspace accurate and up to date. Please update your profile and records, or let us know, if anything changes.

InvoiceLabs is intended for businesses and is not directed at individuals under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above, and where appropriate we will notify you in the app or by email.

For any privacy questions or to exercise your rights, contact ADP Brand:

• Email: asydanial0@gmail.com
• Phone: +60 19-855 0302
• Address: Block B-16-19, i-SOVO, Persiaran Multimedia, Seksyen 7, 40000 Shah Alam, Selangor, Malaysia

You can also reach us through our contact page.