Bookkeeper

Privacy Policy

Last updated 15 Oct 2026

1. Who we are

Bookkeeper is provided by JS Technology Enterprise ("we", "us"). This Privacy Policy explains how we collect, use and protect personal data when businesses and their staff use Bookkeeper, in line with the Personal Data Protection Act 2010 of Malaysia (PDPA).

2. Our two roles

For the people who sign in to Bookkeeper or message its WhatsApp assistant, we decide how their account data is used, and this policy applies to it directly.

For the records a business keeps in Bookkeeper about its own customers, suppliers and staff, the business decides what is collected and why; we store and process those records on its behalf and on its instructions. A business using Bookkeeper is responsible for telling those people how their data is used.

3. What we collect

  • Account details: name, phone number, email address, role, the companies you belong to, your password (stored only as a one-way hash) and any second sign-in factor;
  • Business records: customers, products, orders, quotations, invoices, deposits, payments, expenses, receipts and other documents you upload, bank statements you import, and the reports made from them. Customer records may include names, phone numbers, email and billing addresses, and tax or identification numbers;
  • Messages: the WhatsApp messages and attachments you send to the assistant, and its replies;
  • Usage and security data: sign-in times, IP addresses, browser details, and an audit trail of changes made in the portal;
  • Preferences: your chosen language and theme.

4. How we use it

  • to provide the service: keeping your books, producing documents and reports, and answering requests sent to the assistant;
  • to secure accounts and the service, investigate misuse, and keep an audit trail of changes;
  • to send messages about your account and the service, such as password resets and reminders you have set up;
  • to meet our legal obligations.

We do not sell personal data, and we do not use your business records for advertising.

5. Who we share it with

We share personal data only as needed to run the service, with service providers who act for us under confidentiality obligations:

  • hosting and storage providers, where the service and its backups run;
  • WhatsApp (Meta Platforms), to deliver messages to and from the assistant;
  • providers of the AI models that read messages and documents sent to the assistant, used only to produce its replies;
  • LHDN (the Inland Revenue Board of Malaysia), for documents you choose to submit as e-invoices.

We may also disclose data where the law requires it, or to protect the rights and safety of our users or the public. Some providers may process data outside Malaysia; where they do, we take steps to ensure it is protected to a comparable standard.

6. Cookies

We use only the cookies the service needs: a session cookie that keeps you signed in, a security token for forms, and cookies that remember your language and theme. We do not use advertising or third-party tracking cookies.

7. How long we keep it

We keep account and business records while the business uses Bookkeeper. Malaysian law requires businesses to keep accounting records for at least seven years, so records may be kept for that period after the service ends unless the business asks us to return or delete them, subject to our own legal obligations. Security logs are kept for a shorter period.

8. How we protect it

Each business's records are kept separate from every other's. We use encrypted connections, hashed passwords, an optional second sign-in factor, role-based access, audit logs and regular backups. No system is perfectly secure, but we work to protect your data and will tell affected users and the authorities about a breach as the law requires.

9. Your rights

Under the PDPA you may ask to access the personal data we hold about you, ask us to correct it, and withdraw consent to its use or limit how it is used, though some of the service may then no longer be available to you. If your data is held in the records of a business using Bookkeeper, please contact that business first; we will help it respond.

To make a request, contact us at admin@jstechnology.my. We may need to confirm your identity before acting on it.

10. Changes to this policy

We may update this policy. The date of the latest version is shown at the top of this page, and we will tell you about significant changes.

11. Contact

Questions about this policy or about your personal data can be sent to us at admin@jstechnology.my.