Privacy Policy

At e-Invoice.my, we are deeply committed to protecting your privacy and treating your financial business data with the highest standard of security and confidentiality. This Privacy Policy describes how we collect, handle, and safeguard your information when you use our web applications, invoice and quotation generators, and associated billing services.

For unregistered visitors generating documents through our instant web canvas:

• Zero Financial Data Saved: All invoices, quotations, client names, pricing, and bank account numbers are processed entirely inside your local browser sandbox via JavaScript.
• Client-Side Vector PDF: PDF rendering happens locally in your browser memory. We never transmit, store, or sell your invoice payloads or client details to our backend servers.
• Local Storage Drafts: Unsaved document progress is cached strictly in your device's browser localStorage for your convenience and can be cleared by you at any time.

When you create an account, purchase a subscription, or onboard your business, we may collect:

• Account Identification: Your name, business name, email address, password hash, and profile image.
• Business Profile Settings: Business registration number (e.g., SSM), tax identification number (TIN), business address, and contact numbers.
• Document History: Invoices, quotations, client contact records, and issue/due dates saved explicitly by you in your dashboard workspace.
• Payment Gateway Tokens: Authenticated merchant tokens for Stripe Express, PayPal Commerce, or Billplz FPX. We do not store raw credit card numbers or sensitive CVV codes.

When your clients pay invoices online via embedded checkout links:

• Stripe & PayPal: Transactions are processed directly by Stripe, Inc. and PayPal Holdings, Inc. through their PCI-DSS compliant secure endpoints.
• Billplz FPX (Malaysia): Online banking FPX transactions are routed securely via Billplz Sdn Bhd.
• Platform Fees: Where applicable, platform fees or payment processor deductions are settled directly through the respective payment API webhooks.

• General Data Protection Regulation (GDPR) / UK GDPR: EU and UK users possess the right to access, rectify, export, or request permanent deletion (right to be forgotten) of all stored account information and document records.
• California Consumer Privacy Act (CCPA/CPRA): We do not sell or share personal information with third-party data brokers.
• Personal Data Protection Act 2010 (PDPA Malaysia): For users operating in Malaysia, commercial data is processed in full compliance with the statutory principles of the PDPA 2010.

We utilize minimal cookies strictly necessary to provide our service:

• Session & Security Cookies: To maintain user authentication and CSRF token protection.
• Preferences: To remember your active platform domain, preferred country preset, and currency preferences.
• We do not use intrusive third-party cross-site behavioral tracking networks.

You retain complete ownership of your data. You may delete any saved invoice, client record, or entire workspace directly from your user dashboard. Upon account closure or ticket submission, all personal records and database associations will be purged within thirty (30) business days.

If you have questions, feedback, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection & Privacy Officer
Operating Entity: Akureka SDN BHD
Domain: https://e-invoice.my
Email: [email protected]