Privacy Policy
Effective Date: March 9, 2026
1. Introduction
MY Swift Audit ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our audit report generation platform. We operate in compliance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.
2. Information We Collect
We collect the following types of information:
- Account Data: Your email address and password hash when you create an account.
- Firm Details: Company information, financial statements, and audit data you enter during report generation.
- Usage Data: Information about how you interact with our platform, including pages visited, features used, and time spent on the service.
- Cookies and Analytics: We use cookies to maintain your session and analyze platform performance. See Section 8 for more details.
3. How We Use Your Information
We use your information to:
- Provide and maintain our audit report generation service
- Process your subscription and manage billing
- Improve our product features and user experience
- Send transactional emails (e.g., account confirmations, payment receipts)
- Respond to your support requests and inquiries
We do not use your information for marketing purposes without your explicit consent.
4. Data Storage & Security
Your data is stored securely on Supabase, a trusted cloud infrastructure provider. We implement industry-standard security measures including:
- AES-256 encryption for data at rest
- TLS/SSL encryption for data in transit
- Secure authentication protocols
- Regular security audits and monitoring
While we take all reasonable precautions to protect your data, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
5. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share limited information with:
- Service Providers: Supabase (database hosting), Stripe (payment processing), and other essential service providers who operate under strict data processing agreements.
- Legal Requirements: When required by law, court order, or governmental regulation.
All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.
6. Your Rights Under PDPA 2010
Under the Personal Data Protection Act 2010 of Malaysia, you have the right to:
- Access your personal data we hold
- Request correction of inaccurate or incomplete data
- Withdraw consent for data processing (subject to contractual obligations)
- Request deletion of your account and associated data
- Limit the processing of your personal data in certain circumstances
To exercise any of these rights, please contact us at privacy@myswiftaudit.com. We will respond to your request within 21 days as required by PDPA 2010.
7. Data Retention
We retain your account data and associated information for as long as your account remains active. If you choose to close your account, your data will be deleted within 30 days of your request, except where we are required to retain certain information for legal or regulatory purposes.
Your data will be kept indefinitely for as long as your account remains active, regardless of your subscription plan. All data will only be permanently deleted when your account is terminated or deleted.
8. Cookies
We use cookies for the following purposes:
- Essential Cookies: Required for authentication and core platform functionality. These cannot be disabled.
- Analytics Cookies: Help us understand how users interact with our platform to improve the service. You may opt out of analytics cookies through your browser settings.
We do not use third-party advertising cookies or tracking pixels.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes via email or through an in-app notice. Your continued use of the platform after such notification constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: