Privacy Policy

Last updated: 2 May 2026

1. Introduction

Syncoe Enterprise ("we", "us", "our") operates the ISA-95 Dashboard Factory platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. This policy is issued in compliance with the Personal Data Protection Act 2010 (Act 709) of Malaysia ("PDPA").

2. Information We Collect

Personal Data:

  • Full name
  • Email address
  • WhatsApp / phone number
  • Company name and industry
  • Job title

Payment Data:

  • Payment card details are processed by Stripe (we do not store card numbers)
  • Billing address and transaction records

Usage Data:

  • Pages visited and time spent (via Plausible Analytics, cookie-free)
  • Browser type and device information
  • Referring website and search terms

3. How We Use Your Information

  • To provide and maintain the Service
  • To process subscription payments via Stripe
  • To send welcome emails, payment confirmations, and Service updates
  • To respond to support requests and inquiries
  • To improve the Service through anonymous analytics
  • To comply with legal obligations under Malaysian law

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe — for payment processing (PCI DSS compliant)
  • Supabase — for database hosting (encrypted at rest and in transit)
  • Vercel — for application hosting
  • Plausible Analytics — for privacy-first, cookie-free analytics

5. Data Security

  • All data encrypted in transit (TLS 1.3)
  • All data encrypted at rest (AES-256)
  • On-premise deployment available for Enterprise customers
  • Access controls and audit logging on all systems

6. Data Retention

  • Active subscription data: retained for the duration of the subscription
  • Billing records: retained for 7 years per Malaysian tax law requirements
  • Lead data: retained for 2 years, then deleted unless you become a customer
  • Analytics data: anonymized and aggregated, retained indefinitely

7. Your Rights Under PDPA

Under the Personal Data Protection Act 2010 (Act 709), you have the right to:

  • Access your personal data held by us
  • Request correction of inaccurate data
  • Withdraw consent for data processing (subject to contractual obligations)
  • Request deletion of your personal data (where legally permissible)

To exercise any of these rights, contact us at support@syncoe.com.

8. Cookies

Our Service uses Plausible Analytics, which is cookie-free and does not track individuals. We do not use advertising cookies or third-party tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or a notice on our website. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

Syncoe Enterprise
Penang, Malaysia
Email: support@syncoe.com
WhatsApp: +60 11-3909 1280