← Back to home

Privacy Policy

Last updated: 9 June 2026

This policy explains how Agilec Technology Sdn Bhd (“VynSales”, “we”, “us”) collects, uses, stores, and shares information when you use the VynSales web application and the VynSales mobile apps for iOS and Android (together, the “Service”). VynSales is business software: most data in the Service is created and controlled by the organisation (your employer or account owner) that licenses it. For that data, the organisation is the data controller and VynSales processes it on their behalf.

Information we collect

  • Account and authentication data — name, email, hashed password, organisation membership, role and permissions, and session tokens used to keep you signed in.
  • Business records you enter — customers, leads, quotations, sales orders, invoices, payments, products, price books, and the contact details (names, emails, phone numbers, addresses) contained within them.
  • Location — when you check in or out of a customer visit in the mobile app, we record the device’s location at that moment to log where the visit happened. Location is collected only at the point of check-in/check-out (foreground use); we do not track location in the background.
  • Camera and photos — when you attach a photo to a product or visit, we access the camera or your photo library to capture and upload the image you choose. We do not access photos you do not select.
  • Payment data — subscription billing is processed by Stripe. Card details are entered into Stripe and are not stored on our servers; we retain billing status, plan, and invoice metadata.
  • Device and usage data — basic technical information such as app version, device type, and error/diagnostic logs used to operate and debug the Service.

How we use information

  • Provide the Service — authenticate users and run the quote-to-cash workflow.
  • Record customer visits, including where check-in and check-out occurred.
  • Process subscription billing and manage seats and plans.
  • Maintain security, prevent abuse, and diagnose and fix problems.
  • Comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

How data is stored and protected

  • Data is transmitted over encrypted connections (HTTPS/TLS).
  • Application data is stored in a managed database hosted with our infrastructure providers (Vercel for hosting and Supabase/PostgreSQL for the database). Subscription payments are handled by Stripe.
  • Access is tenant-scoped: each organisation’s records are isolated, and access within an organisation is governed by per-user permissions.
  • Passwords are stored hashed; secrets and API keys are stored hashed or encrypted.

Sharing

We share data only with service providers that operate the Service on our behalf — hosting (Vercel), database (Supabase), and payment processing (Stripe) — under agreements that require them to protect it. We may also disclose data when required by law. We do not share your data with third parties for their own marketing.

Data retention and deletion

  • We retain organisation data for as long as the account is active and as needed to provide the Service.
  • You can request deletion of your account or your organisation’s data by contacting us at the address below. We will delete or anonymise the data within a reasonable period, except where we must retain it to meet legal or accounting obligations.
  • Uninstalling the mobile app removes locally stored session data from the device; it does not delete data held in your organisation’s account.

Your rights

Subject to applicable law (including Malaysia’s PDPA and, where relevant, the GDPR), you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. If your data is managed by your organisation, please direct the request to your organisation administrator or contact us and we will assist.

Children

VynSales is a business tool and is not directed to children under 13. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice within the Service.

Contact

Questions or data requests? Email success@agilectechnology.com. Agilec Technology Sdn Bhd, 2A-1, Jalan Puteri 2/5, Bandar Puteri, 47100 Puchong, Selangor, Malaysia.