Publisher: Isomeq Technology Sdn Bhd (the “Company”, “we”, “us”) · Product: Aturix — business-documents software at app.aturix.co
Effective date: 9 August 2026 · Last updated: 9 August 2026
This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you use Aturix. It is written to comply with Malaysia's Personal Data Protection Act 2010 (as amended 2024) (“PDPA”) and, where applicable, Indonesia's Personal Data Protection Law No. 27 of 2022 (“PDP Law”).
Isomeq Technology Sdn Bhd ([Registration No.]) is the data controller for personal data of Aturix account holders and the data processor for the business data our customers store in Aturix.
You provide directly:
Collected automatically:
We do NOT collect: payment card numbers, banking passwords, or government-portal credentials. Aturix records amounts; it does not process payments.
We do not sell personal data and do not use it for third-party advertising.
We process personal data on the basis of your consent (given when you accept this policy and the in-app data-processing notice), to perform our contract with you, and to meet our legal obligations. You may withdraw consent (see §10), though some processing is necessary to provide the service.
We share personal data only with service providers who help us run Aturix, under contract and confidentiality:
| Provider | Purpose |
|---|---|
| Supabase | Database hosting and authentication |
| Vercel | Application hosting / content delivery |
| Resend | Sending transactional emails |
| OpenAI / Anthropic | Optional AI wording — only if you enable it with your own key; only the document's text prompt is sent |
We may also disclose data where required by law, regulator or court order.
Our infrastructure providers may store or process data outside Malaysia/Indonesia (e.g. in Singapore). Where we transfer personal data across borders we take reasonable steps to ensure a comparable level of protection, consistent with the PDPA and PDP Law.
We retain personal and business data for as long as your account is active and thereafter for the period required to meet legal and tax obligations — by default seven (7) years, matching Malaysian record-keeping requirements — after which it is deleted or anonymised. You can request earlier deletion (see §10), subject to those legal minimums.
We protect data with encryption in transit (TLS/HTTPS) and at rest, workspace-level isolation (row-level security so one company can never access another's data), hashed passwords, an append-only audit log, and role-based access controls. No system is perfectly secure; we will notify affected users and regulators of a material breach as required by law.
Subject to law, you may: access your personal data, request correction, request deletion/erasure, withdraw consent, and request a copy/export of your data. Account users can edit their own profile in-app; owners can manage members. To exercise any right, contact privacy@aturix.co. We will respond within the timeframe required by the PDPA/PDP Law.
To request account and data deletion, email privacy@aturix.co or use the account-deletion process; we will delete your workspace data except records we must retain by law.
Aturix is a business tool intended for users aged 18 and over. We do not knowingly collect data from children.
Aturix uses essential browser storage to keep you signed in and to enable offline/app functionality. We do not use advertising or cross-site tracking cookies.
We may update this policy; we will post the new version with a revised “Last updated” date and, for material changes, notify you in-app or by email.
Questions or requests: privacy@aturix.co · Isomeq Technology Sdn Bhd.
