Privacy Policy

1. Who we are

OGInvoice is operated by Wanzaisoft Technologies ("we", "us"). This Privacy Policy explains what personal data we collect when you use OGInvoice, how we use it, and the choices you have. We follow the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. What we collect

• Account details: your name, email address and a password (stored only as a one-way hash), your language and country.
• Sign in with Google: if you choose it, we receive your name and email from Google. We never see your Google password.
• Shop details you add: shop name, address, phone, SSM number, logo, staff names and payment methods.
• Business content you enter: invoices, sales, items, and your customers' names, phone numbers and addresses.
• Payments: Pro payments are handled by Toyyibpay or Stripe. We receive the payment status, amount and reference, but never your card or bank login details.
• Messages you send us: chat, feedback and the Contact Us form.
• Technical data: IP address, browser type, pages visited and the time you were last active, used for security and to run the service.

3. How we use your data

We do not sell your personal data.

• To provide and improve OGInvoice, including saving your invoices and showing your sales.
• To confirm your email, reset your password and send service notices.
• To process Pro payments and activate your plan.
• To answer your questions and provide support.
• To protect the service from fraud, abuse and errors.

4. Your customers' data

When you enter your own customers' details, you decide what to enter and you are responsible for having the right to use that data. We process it only to provide the service to you, and we do not use it for our own marketing.

5. Cookies and ads

We use cookies and similar storage that are needed for the site to work: to keep you logged in, remember your language and your light or dark mode choice.

Visitors and Free plan users may see ads served by Google AdSense. Google and its partners may use cookies to show and measure ads. You can manage ad personalisation in your Google Ad Settings. Pro users do not see ads.

6. Who we share data with

Only with providers that help us run OGInvoice, and only as needed: our web hosting provider, Toyyibpay and Stripe for payments, Google for sign-in and ads, and our email service for system emails. We may also disclose data if the law requires it.

7. Where data is processed

Your data is stored on our hosting provider's servers. Some providers, such as Stripe and Google, may process data outside Malaysia under their own safeguards.

8. How long we keep data

We keep your data while your account is active. If you ask us to delete your account, we remove your data from our live system, and copies in backups are removed as backups are replaced. Businesses in Malaysia may need to keep accounting records for several years, so please export what you need before deleting.

9. Security

We protect accounts with hashed passwords, secure connections (HTTPS) and access controls. No online service can be completely secure, so please use a strong, unique password and keep your passcode private.

10. Your rights

You may ask to see, correct or delete your personal data, or withdraw your consent, by emailing support@oginvoice.com. We aim to reply within 21 days. You can also edit most details yourself in Settings.

11. Children

OGInvoice is meant for business use by adults. It is not directed at anyone under 18.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If the change is important, we will tell you in the app or by email.

13. Contact

Questions about privacy? Email support@oginvoice.com or use the Contact Us page.