Privacy Notice

Information we handle

We handle account identity, business profile details, chart-of-account records, transactions, journal entries, payments, and audit activity needed to operate Kasikira.

When you upload a receipt, invoice, or bill, we handle the file and the accounting fields extracted from it. Do not upload identity documents or unrelated personal documents.

How documents are processed

Uploaded documents are stored privately and processed by an AI provider to propose accounting details.

You review the proposed accounting details before posting. The proposal is not treated as a final record until you confirm it.

Provider categories and international processing

Kasikira uses authentication, AI processing, cloud hosting, private object storage, and database providers. These providers may process data in countries outside Malaysia under their service and security terms. This international processing is limited to operating the service.

Security and access

Access is scoped to the signed-in business. Uploaded files use private storage and authenticated content routes. Security controls reduce risk, but no online service can promise absolute security.

Trash, retention, and deletion

Items moved to Trash can be restored for 30 days. An authenticated owner can request account deletion in the app, but a request does not immediately erase accounting records, audit history, backups, uploaded files, or the authentication identity. Retention and deletion require operator review under an approved policy.

Accessing your data

The owner can download a structured accounting-data export from Data and privacy settings. Uploaded source files remain available individually through their authenticated document routes and are not embedded in the JSON export.

Stakeholder-review status

This notice describes the current stakeholder-review build. It is not a claim of legal certification or a substitute for an approved retention, incident-response, or privacy programme.

Privacy and support contact

Before public registration opens, the operator will publish a monitored privacy and support contact. Invited reviewers should use the contact supplied with their invitation.