What we collect
We collect the following:
- Account details, such as your name, email address and business name
- Business records you enter or upload, such as invoices, receipts, bank statements and the details of your customers and suppliers
- Messages you send us through the contact page or by email
- Basic technical information, such as device type and how the service is used, to keep it working and secure
Why we use it
We use personal data to:
- provide Faas and keep your books working
- look after your account and answer your messages
- keep the service safe and fix problems
- improve the product
- meet legal duties
Records about your own customers
When you put information about your customers or suppliers into Faas, that information is part of your business records. We handle it to provide the service to you, and you stay responsible for having a proper basis to hold it.
Who we share it with
We do not sell personal data. We share it only with:
- service providers that help us run Faas, such as hosting, email and payments
- people you invite into your books, such as your accountant
- authorities, where the law requires it
The providers we use today:
- DigitalOcean, for hosting and storage, in Singapore
- Zoho ZeptoMail, for sending email such as invoices, sign in links and reminders
- Anthropic, to read receipts and documents you choose to scan; files are sent only when you scan them
- CHIP, which processes the payments for your Faas subscription (FPX online banking, cards, e-wallets and DuitNow QR); your card or bank details go to CHIP and your bank and never to us
- The payment gateway you connect (Chip or Stripe), for payments your own customers make through your pay link
How long we keep it
We keep your data while your account is active. After an account is closed, we keep it for 90 days so it can be reopened or exported, then delete it; copies in our encrypted backups expire within a further 60 days. Records we must keep by law, such as our own invoices to you, are kept for as long as the law requires. Malaysian law generally requires businesses to keep their own accounting records for 7 years, so export your records before you close an account.
Security
We use technical and organisational measures designed to protect personal data. No system is perfectly secure. You can read more on the security page.
Your rights under the Personal Data Protection Act
Malaysia's Personal Data Protection Act gives people rights over their personal data. In general terms, you can ask to see the personal data we hold about you, ask us to correct it, and in some cases withdraw your consent or limit how we use it. To make a request, write to us through the contact page.
The law may changeThis is a general description, not legal advice. The exact rights and how they apply depend on the law as it stands, and on your situation.
Cookies and similar tools
The app uses only the cookies it needs to work: one to keep you signed in, one to protect forms against forgery, and an optional one to remember you when you tick Remember me. The website and the app do not use advertising or tracking cookies.
Changes to this notice
We may update this notice. If a change matters, we will tell you before it applies.
Contact
Questions about privacy can be sent through the contact page or to hello@faas.my.
Questions about your data?
Write to us and a real person will reply.