Privacy Policy

RONDA (“Ronda”) processes personal data in line with Malaysia’s Personal Data Protection Act 2010.

Provider: RONDA.

Bahasa Malaysia translation pending.

What we collect

• Account data: name, email, password (stored only as a salted hash), role and outlet access.
• Operational data your team enters: checklist and audit results, notes, photos, fixes, rosters.
• Business billing details: company name, billing email/phone/address, invoices and payments.
• Basic technical logs needed to run and secure the service.

How we use it

To provide the service, bill for it, send service and billing emails, keep it secure, and support you.

Who processes it for us

• Vercel (application hosting).
• Supabase (database and photo storage; Singapore region).
• Resend (transactional email).
• Stripe (card and online-banking payments), once online payments are enabled.

Some of these providers store or process data outside Malaysia, including in Singapore. We use them under contractual terms that require them to protect your data.

Retention

We keep your data while your account is active. If your account ends and you have not asked us to delete your data, we may keep it for a limited period so you can come back or export it.

Deleting your data

A contact channel for data requests will be published here soon. Billing and tax records are kept for 7 years because the law requires it.

Your rights

You may request access to or correction of your personal data, or withdraw consent. A contact channel for data requests will be published here soon.

Security

Data is encrypted in transit; evidence photos are in a private bucket served by short-lived signed links.

Contact

A contact channel will be published here soon.