Privacy Policy
Last updated: 24 August 2026
This policy explains, in plain language, what Mengira collects, why we collect it, and what you can ask us to do with it.
1. Who we are
Mengira is operated by Art Byte Creative Agency (Sole Proprietorship), registered with SSM under registration number 202503150630 (CT0151075-H).
Our registered business address is 52-1-C, Jalan Pusat Perniagaan Raja Uda 1, Raja Uda Industrial Estate, 12300 Butterworth, Pulau Pinang, Malaysia.
For anything about your data or this policy, email mengira.privacy@gmail.com.
2. What we collect
Account details: your email address and password. Passwords are handled by our authentication provider and are stored hashed — we never see them.
Business profile: your company name, logo, business address and phone number, so your documents look like yours.
Client records you add: name, company, email, phone, WhatsApp number and address of the clients you invoice.
Document content: the quotations and invoices you create, including line items, amounts, SST settings, dates and statuses.
3. How we use it
We use your data only to run the service: generating your quotations and invoices, creating shareable links, building WhatsApp messages, and keeping your account signed in.
If you sign in with Google, Apple or Microsoft, we only receive a confirmation that they verified you plus your email address. We never see or store those passwords.
We do not sell your data. We do not use it for advertising or ad targeting, and we do not share it with anyone for marketing.
4. Third parties we rely on
Supabase provides our database, authentication and file storage. Lovable provides the platform that hosts and builds the app.
They are infrastructure providers — they process data on our behalf so the app can run. They are not data buyers and they do not use your information for their own marketing.
5. How long we keep it
We keep your data for as long as your account is active, because your quotations, invoices and client records are the service itself.
If you ask us to delete your account, we delete your data. Email mengira.privacy@gmail.com and we will confirm once it is done.
6. Your rights under the PDPA
Under Malaysia's Personal Data Protection Act 2010 you have the right to access the personal data we hold about you, to correct anything inaccurate, and to request its deletion. You may also withdraw your consent to our processing.
To exercise any of these, email mengira.privacy@gmail.com from the address on your account and tell us what you need.
7. Cookies and local storage
We keep it minimal. Your browser stores a login session so you stay signed in, and your language preference so the app opens in English or Bahasa Malaysia as you chose.
There are no advertising or tracking cookies.
8. Children
Mengira is a business tool and is not directed at children. We do not knowingly collect personal data from minors. If you believe a minor has given us data, email us and we will remove it.
9. Changes to this policy
If we change this policy, we will publish the new version on this page and update the "last updated" date at the top. Significant changes will be highlighted in the app.
10. Contact
Questions, requests or complaints about privacy: mengira.privacy@gmail.com.