Privacy Policy

1. Who we are

iSalesAI operates this billing platform for quotations, invoices, cash bills and receipts. This policy explains what personal data we handle and why. For data you enter about your own customers, you are the data controller and we act as your processor.

2. Data we collect

• Account data: name, email, phone, company name, password (stored hashed by our authentication provider).
• Workspace content: company profiles and logos, customers, products, and the documents you create.
• Billing data: plan, subscription status and payment records. Card details are handled by our payment processor and never stored on our servers.
• Technical data: log and usage information needed to operate, secure and troubleshoot the Service.

3. How we use it

• to provide your workspace and generate your documents;
• to authenticate users and enforce plan limits and seats;
• to process subscriptions and send billing notices;
• to provide support and respond to your enquiries;
• to keep the Service secure and to meet legal obligations.

We do not sell your data and we do not use your workspace content for advertising.

4. Legal basis

We process data to perform our contract with you, to meet legal obligations such as record keeping and tax, and on the basis of our legitimate interest in keeping the Service secure and improving it.

5. Service providers

We share data only with providers that help us run the Service: our cloud database and authentication provider, our hosting provider, and our payment processor. They process data under contract and only on our instructions.

6. Data separation and security

Each workspace is isolated using row-level security so one workspace cannot read another's data. Data is encrypted in transit. Access to production systems is restricted to authorised personnel. No system is perfectly secure, so please use a strong, unique password.

7. Retention

We keep your workspace data for as long as your account is active. Documents you delete move to the recycle bin and can be restored until you purge them. After account closure we delete or anonymise data within a reasonable period, except where we must retain records for legal, tax or accounting purposes.

8. Your rights

You may access, correct, export or request deletion of your personal data, and object to or restrict certain processing. Most data can be edited directly in the app; for anything else, email hello@isalesai.com.my. Under Malaysia's Personal Data Protection Act you may also withdraw consent where processing relies on it.

9. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and remember preferences such as your theme. We do not use advertising cookies.

10. International transfers

Our providers may store or process data on servers outside Malaysia. Where that happens we rely on providers that offer appropriate safeguards.

11. Children

The Service is for businesses and is not directed at children under 18.

12. Changes

We may update this policy. Material changes will be announced in the app or by email, and the "last updated" date above will change.

13. Contact

For privacy questions or requests, email hello@isalesai.com.my.