Privacy Policy

Effective Date: March 2026

At Verkspay, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

What Data We Collect

Account Information:

  • Your name and email address
  • Business name and logo (optional)
  • Payment details (bank account, DuitNow ID)

Business Data:

  • Invoices you create (amounts, descriptions, dates)
  • Client information (name, email, payment history)
  • Line items and project descriptions

Usage Data:

  • How you interact with Verkspay (features used, login times)
  • Device information (browser type, IP address)

How We Use Your Data

We use your data to:

  • Provide invoicing and payment tracking services
  • Send payment reminders to your clients
  • Process payments through our payment providers
  • Authenticate your account and prevent fraud
  • Improve Verkspay's features and performance
  • Communicate with you about your account and service updates

Who We Share Your Data With

We only share your data with:

Stripe

For processing credit card payments. Your card details are never stored on our servers.

Resend

For sending payment reminder emails to your clients.

Supabase

For secure database storage and authentication.

These providers are contractually obligated to protect your data and use it only for the purposes we've specified.

How Long We Keep Your Data

We keep your data for as long as your account is active. When you delete your account:

  • Your personal information is permanently deleted
  • Your invoices and client data are retained for 7 years (for legal/tax compliance)
  • Backup copies are retained for 30 days for disaster recovery

Your Privacy Rights

Under Malaysian PDPA and GDPR, you have the right to:

  • Access: Request a copy of all data we hold about you
  • Correction: Update or correct any inaccurate information
  • Deletion: Request permanent deletion of your account and associated data
  • Portability: Export your data in a standard format
  • Opt-out: Unsubscribe from marketing emails anytime

To exercise any of these rights, email us at support@verkspay.com with "Privacy Request" in the subject line.

Contact & Governing Law

This Privacy Policy is governed by Malaysian law and complies with the PDPA (Personal Data Protection Act) and GDPR where applicable.

For privacy questions or concerns:

support@verkspay.com

Last updated: March 2026

This policy may be updated periodically. We'll notify you of significant changes via email.