1. Who we are
Nature Biozyme Sdn Bhd (“BilNow”, “we”, “us”), a company registered in Malaysia, operates the BilNow service at sum.my and bilnow.my. For data you enter about your own business and your customers, you are the data user under the PDPA and we are your data processor. For your own account details, we are the data user. Contact for anything in this policy: the contact page.
2. What we collect
- Account details: your name, email, password (stored as a hash only), role, and the WhatsApp number you pair with BilNow.
- Company details: company name, SSM and SST numbers, address, phone, logo, bank details and payment QR, which appear on your Documents.
- Business records you enter: customers (name, phone, address, email, contact person, language, price list), products and prices, Documents, payments, approvals and settings.
- WhatsApp messages: the text, voice notes, photos and files you send to the BilNow number, and the replies we send you. We only receive messages sent to the BilNow number, never your other chats.
- Usage and technical data: an activity log of actions in your account (who issued or changed what, and when), server logs with IP address and browser type, and counts of AI requests for billing and abuse prevention.
- Payment data: when you subscribe, our payment provider (Billplz) handles your bank or card details. We receive only the amount, status and a reference.
3. How we use it
- To run the service: understand your instructions, prepare and send Documents, record payments, produce reports and reminders.
- To secure the service: sign you in, verify your WhatsApp number, enforce PINs and approvals, detect abuse.
- To support you: answer questions and investigate problems you report.
- To bill you and to send service notices (for example a plan expiring or a WhatsApp number disconnecting). We do not send marketing email without your consent.
- To improve BilNow, using aggregated statistics that do not identify any person.
We do not sell personal data and we do not use your business records to train AI models.
4. Your customers' personal data
Names, phone numbers and addresses of your customers are entered by you. You are responsible for having the right to use them, for example because they are your trading counterparties. We process them only on your instructions: to put them on Documents, to send Documents and reminders you ask for, and to produce your statements and reports. If a customer asks us about their data we will refer them to you unless the law requires otherwise.
6. Storage and security
- Your data is stored on servers under our control. Some providers above process data outside Malaysia. By using BilNow you consent to that transfer for the purposes in this policy.
- Connections use HTTPS. Passwords are hashed. Access to the database is restricted to the operators of the service. Each company’s data is separated by account, and salespeople see only what their role allows.
- If we become aware of a breach affecting your data we will tell you without undue delay and explain what happened and what we did.
7. How long we keep data
- Business records and Documents: for as long as your account is open. Issued Documents are kept for seven years to match Malaysian record-keeping rules, even if a customer or product is later removed.
- After you close your account: 90 days so you can still request an export, then deleted, except Documents kept under the seven-year rule and records we must keep for tax or legal reasons.
- WhatsApp message content: the text of each message is kept in your activity history. Voice notes and photos are processed and then deleted; only the transcription or the extracted result is kept.
- Server logs: up to 90 days.
8. Your rights
Under the PDPA you can:
- access the personal data we hold about you, most of which you can see and edit in the dashboard;
- correct it;
- withdraw consent and close your account;
- ask us to stop processing for direct marketing (we do none without consent);
- export your business data from the Accounting page at any time.
Write to us through the contact page for anything you cannot do yourself. We respond within 21 days as the PDPA requires. We may ask you to confirm your identity first.
10. Changes
We will post changes here and update the date at the top. For material changes we will tell you on the dashboard or by email. See also the Terms of Service.
Notis Privasi (Bahasa Malaysia)
Notis ini dikeluarkan menurut Akta Perlindungan Data Peribadi 2010. Jika terdapat percanggahan, versi Bahasa Inggeris di atas akan diguna pakai.
- Data yang dikumpul: butiran akaun (nama, e-mel, kata laluan yang disulitkan, nombor WhatsApp), butiran syarikat, rekod perniagaan yang anda masukkan (pelanggan, produk, dokumen, bayaran), mesej WhatsApp yang dihantar ke nombor BilNow, log aktiviti dan data teknikal.
- Tujuan: menyediakan perkhidmatan, mengesahkan identiti dan keselamatan, sokongan pelanggan, pengebilan dan notis perkhidmatan, serta penambahbaikan menggunakan statistik agregat. Kami tidak menjual data peribadi dan tidak menggunakan rekod anda untuk melatih model AI.
- Pendedahan: kepada pembekal yang diperlukan sahaja, iaitu pengehosan, WhatsApp (Meta), pembekal AI (OpenAI), pembayaran (Billplz), pembekal e-mel, dan perisian perakaunan yang anda pilih untuk disambungkan. Sesetengah pembekal memproses data di luar Malaysia.
- Data pelanggan anda: anda bertanggungjawab mempunyai hak untuk menggunakannya. Kami memprosesnya hanya atas arahan anda.
- Tempoh simpanan: selagi akaun aktif; dokumen yang dikeluarkan disimpan tujuh tahun; 90 hari selepas akaun ditutup; log pelayan sehingga 90 hari.
- Hak anda: mengakses dan membetulkan data, menarik balik persetujuan dan menutup akaun, serta mengeksport data perniagaan pada bila-bila masa. Hubungi kami melalui halaman hubungi kami. Kami akan menjawab dalam masa 21 hari.
- Pilihan: memberikan data adalah pilihan anda, tetapi tanpa butiran akaun dan syarikat kami tidak dapat menyediakan perkhidmatan.