Privacy Policy.

Who we are

ValoraBase is a business management (ERP) platform operated from Malaysia. When your company creates a ValoraBase account, we process data on your company's behalf so the product can work. Contact us any time on WhatsApp at +60 17-410 2015 or via valorabase.com/contact.

What we collect

• Account data — your name, email address, phone number and password (stored as a salted hash, never in plain text) when you register or are invited by your employer.
• Business data — the records your company creates in the app: products, stock, sales, invoices, job orders, attendance, payroll entries and similar. This data belongs to your company; we store and process it to provide the service.
• Device and usage data — basic technical information (app version, device type, error logs) used to keep the service reliable and secure.

We do not collect your precise location, contacts, photos or files unless a feature you actively use requires it (for example, attaching a photo to a QC record), and the camera is used only when you open the in-app scanner.

Why we use it

• To provide the service — signing you in, syncing your business records, generating documents such as invoices and payslips.
• To meet legal duties — for example, submitting e-invoices to tax authorities (such as LHDN MyInvois) when your company enables that feature.
• To keep the service safe — fraud prevention, abuse detection and debugging.
• To respond when you contact us.

What we never do

• We never sell your personal data or your company's business data.
• We never use your business records for advertising.
• We never share data with third parties except the service providers needed to run ValoraBase (hosting, payment processing, messaging) or where the law requires it.

Security

Data is encrypted in transit (HTTPS/TLS) and stored on access-controlled infrastructure. Access inside your company is governed by the roles and permissions your administrator sets.

Retention and deletion

We keep data for as long as your company's account is active, plus any period required by law (for example, tax record retention). You can request deletion of your personal account, or a company administrator can request deletion of the company workspace, by contacting us on WhatsApp at +60 17-410 2015 or via our contact page. We honour verified requests within 30 days, except records we must keep by law.

Your rights

Subject to applicable law (including Malaysia's Personal Data Protection Act 2010), you may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on consent. Use the contact details above; we may need to verify your identity first.

Children

ValoraBase is a business tool and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes

If we change this policy, we will update this page and the date above. Material changes will be announced in the app or by message to account administrators.