Privacy Policy

Last updated: 24 August 2026

This policy explains, in plain language, what Mengira collects, why we collect it, and what you can ask us to do with it.

1. Who we are

Mengira is operated by Art Byte Creative Agency (Sole Proprietorship), registered with SSM under registration number 202503150630 (CT0151075-H).

Our registered business address is 52-1-C, Jalan Pusat Perniagaan Raja Uda 1, Raja Uda Industrial Estate, 12300 Butterworth, Pulau Pinang, Malaysia.

For anything about your data or this policy, email mengira.privacy@gmail.com.

2. What we collect

Account details: your email address and password. Passwords are handled by our authentication provider and are stored hashed — we never see them.

Business profile: your company name, logo, business address and phone number, so your documents look like yours.

Client records you add: name, company, email, phone, WhatsApp number and address of the clients you invoice.

Document content: the quotations and invoices you create, including line items, amounts, SST settings, dates and statuses.

3. How we use it

We use your data only to run the service: generating your quotations and invoices, creating shareable links, building WhatsApp messages, and keeping your account signed in.

If you sign in with Google, Apple or Microsoft, we only receive a confirmation that they verified you plus your email address. We never see or store those passwords.

We do not sell your data. We do not use it for advertising or ad targeting, and we do not share it with anyone for marketing.

4. Third parties we rely on

Supabase provides our database, authentication and file storage. Lovable provides the platform that hosts and builds the app.

They are infrastructure providers — they process data on our behalf so the app can run. They are not data buyers and they do not use your information for their own marketing.

5. How long we keep it

We keep your data for as long as your account is active, because your quotations, invoices and client records are the service itself.

If you ask us to delete your account, we delete your data. Email mengira.privacy@gmail.com and we will confirm once it is done.

6. Your rights under the PDPA

Under Malaysia's Personal Data Protection Act 2010 you have the right to access the personal data we hold about you, to correct anything inaccurate, and to request its deletion. You may also withdraw your consent to our processing.

To exercise any of these, email mengira.privacy@gmail.com from the address on your account and tell us what you need.

7. Cookies and local storage

We keep it minimal. Your browser stores a login session so you stay signed in, and your language preference so the app opens in English or Bahasa Malaysia as you chose.

There are no advertising or tracking cookies.

8. Children

Mengira is a business tool and is not directed at children. We do not knowingly collect personal data from minors. If you believe a minor has given us data, email us and we will remove it.

9. Changes to this policy

If we change this policy, we will publish the new version on this page and update the "last updated" date at the top. Significant changes will be highlighted in the app.

10. Contact

Questions, requests or complaints about privacy: mengira.privacy@gmail.com.