Privacy Policy

We collect information you provide directly to us when you create an account, use our services, or contact us for support. Account information: name, email address, company name, and password when you register for Premis. Usage data: information about how you use the platform, including features accessed, actions taken, and time spent. Device and technical data: IP address, browser type, operating system, and referring URLs collected automatically when you access our services. Payment information: billing details processed securely through our payment partners (Stripe and Billplz). We do not store full card numbers on our servers.

We use the information we collect to: • Provide, maintain, and improve the Premis platform • Process transactions and send related information including confirmations and invoices • Send technical notices, updates, security alerts, and support messages • Respond to your comments, questions, and requests • Monitor and analyse usage patterns to improve user experience • Detect, investigate, and prevent fraudulent transactions and other illegal activities • Comply with legal obligations

We do not sell, trade, or rent your personal information to third parties. We may share your information with: Service providers: third-party vendors who assist us in operating our platform (AWS for hosting, SendGrid for email, Stripe and Billplz for payments). These providers are contractually obligated to protect your data. Legal requirements: we may disclose your information if required by law, court order, or government authority. Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. With your consent: we may share your information for any other purpose with your explicit consent.

Your data is stored on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Singapore) region. We implement industry-standard security measures including: • Encryption of data in transit using TLS 1.2+ • Encryption of data at rest using AES-256 • Row-level security ensuring complete data isolation between organisations • Regular security audits and penetration testing • Access controls and audit logging for all administrative actions While we take reasonable measures to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

We retain your personal information for as long as your account is active or as needed to provide services. If you cancel your subscription, your data is preserved in read-only mode for 30 days, after which it is permanently deleted from our systems. You may request deletion of your data at any time by contacting us at privacy@premis.my. We will process deletion requests within 30 days. Some information may be retained for longer periods where required by law or for legitimate business purposes such as fraud prevention.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to: Access: request a copy of the personal data we hold about you. Correction: request correction of inaccurate or incomplete personal data. Withdrawal of consent: withdraw consent for processing of your personal data, subject to legal or contractual restrictions. To exercise these rights, contact us at privacy@premis.my. We will respond within 21 days as required by the PDPA.

We use cookies and similar tracking technologies to: • Maintain your login session • Remember your preferences • Analyse platform usage through anonymised analytics You can control cookie settings through your browser. Disabling cookies may affect the functionality of the platform. We do not use cookies for advertising or cross-site tracking.

Our platform integrates with third-party services including Stripe, Billplz, and AWS. These services have their own privacy policies governing the use of your information. We encourage you to review their policies. Links to third-party websites on our marketing pages are provided for convenience. We are not responsible for the privacy practices of those websites.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of Premis after the effective date of the revised policy constitutes your acceptance of the changes.

If you have questions about this Privacy Policy or our data practices, please contact us: Email: privacy@premis.my Address: Premis Technologies Sdn. Bhd., Kuala Lumpur, Malaysia Phone: +603 1234 5678 For data subject requests under PDPA, please email privacy@premis.my with the subject line "PDPA Data Request".