1. Introduction
KAPA Technologies Sdn. Bhd. ("KAPA", "we", "us" or "our") operates the KAPA ONE platform and related services. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you use our services.
By using KAPA ONE, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection regulations.
2. Information We Collect
Business Information: Company name, business registration number, industry, company size and billing information provided during onboarding.
User Information: Names, WhatsApp numbers, email addresses, job titles and designations of users registered on KAPA ONE.
Operational Data: Attendance records, location data (GPS coordinates for check-in/check-out), task records, payroll data, leave records and other business operational data generated through KAPA ONE.
Technical Data: IP addresses, browser type, device information and usage analytics to improve our services.
3. How We Use Your Information
- ✓ Providing and operating the KAPA ONE platform
- ✓ Processing payroll, attendance and operational records
- ✓ Sending WhatsApp notifications and system alerts
- ✓ Providing customer support and technical assistance
- ✓ Improving our products and services
- ✓ Complying with legal obligations
4. Data Security
We implement enterprise-grade security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, daily automated backups and continuous security monitoring. We conduct regular security audits and penetration testing.
5. Payment Information
When you subscribe to a paid plan, payment card and billing details are collected and processed directly by Razorpay, our PCI-DSS compliant payment processor. KAPA Technologies does not store your full card number, CVV or payment credentials on our own servers. Razorpay's use of your data is governed by Razorpay's own privacy policy.
6. Data Sharing
We do not sell your personal data to third parties. We may share data with trusted service providers who assist in operating our platform (cloud hosting, payment processing, communication services) under strict confidentiality agreements. All sub-processors are PDPA/GDPR compliant.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account termination, we retain data for 90 days before deletion unless legally required to retain it longer. You may request earlier deletion by contacting us.
8. Your Rights
Under PDPA and applicable laws, you have the right to access, correct, delete and port your personal data. To exercise these rights, contact us at privacy@kapa.my or via WhatsApp at +91 73057 37508.
9. Cookies
Our website uses essential cookies for functionality and analytics cookies to improve user experience. You may disable cookies in your browser settings, though this may affect website functionality.
10. Contact Us
For privacy questions or data requests:
KAPA Technologies Sdn. Bhd.
Email: privacy@kapa.my
WhatsApp: +91 73057 37508
Website: www.kapa.my