Privacy Policy

This Privacy Policy explains how the operator of Assetify collects, uses, stores, and discloses personal data in connection with the 14-day trial. We act as the data controller for account and service-administration data. Your organization may separately act as the data controller for personal data it enters into the service.

1. Data we collect

• Account and profile data: name, email address, employee ID, phone number, role, position, department, employment dates, account status, and password hash.
• Organization and asset data: company settings, departments, users, asset records, categories, assignments, transactions, maintenance schedules and logs, documents, and related descriptions.
• Files: company logos and documents uploaded by authorized users, including their file names, types, sizes, and associated records.
• Security and technical data: session identifiers, login and activity timestamps, IP address, browser user agent, password-reset request details, and diagnostic information.
• Communications: information sent when requesting password resets or contacting us.

2. How data is collected

We collect data directly from users and organization administrators, automatically from browsers and servers when the service is used, and from records created through normal use of the application.

3. Why we process data

• Provide authentication and operate the asset-management trial.
• Maintain users, assets, documents, maintenance, departments, and transaction records.
• Send security messages such as password-reset emails.
• Prevent abuse, secure accounts, troubleshoot faults, and maintain service integrity.
• Comply with legal obligations and enforce our Terms and Conditions.
• Generate aggregated or de-identified operational information that does not reasonably identify an individual.

4. Whether providing data is required

Account credentials and required application fields are necessary to provide the service. If you do not provide them, you may be unable to create records, sign in, or use relevant features. Optional fields may be left blank where the interface permits.

5. Disclosure

We do not sell personal data. We may disclose only the information reasonably necessary to:

• hosting, infrastructure, email, database, security, and technical service providers acting on our instructions;
• your organization's authorized administrators and users according to their access;
• professional advisers or a successor in connection with a legitimate corporate transaction; or
• public authorities or other parties when required by law, necessary to protect rights and security, or needed to investigate misuse.

6. International processing

Service providers may process information outside Malaysia. Where cross-border processing occurs, we take reasonable steps to use appropriate safeguards and providers capable of protecting personal data consistently with applicable requirements.

7. Security

We use reasonable administrative and technical safeguards, including hashed passwords, hashed reset tokens, limited token lifetimes, session controls, access checks, and file validation. No internet service, transmission, or storage method is completely secure, and we cannot guarantee that loss, corruption, unauthorized access, or disclosure will never occur. Users remain responsible for account security and independent backups.

8. Retention and trial expiry

We retain personal data only for as long as reasonably needed for the trial, security, legal compliance, dispute handling, and service administration. Password-reset links expire after 60 minutes, although security records may remain for a limited period. Access may end after the trial, and trial data may later be deleted or anonymized. Do not use the trial as the only copy of important data.

9. Cookies and sessions

The service uses essential session cookies to authenticate users, protect forms, and maintain security. These cookies are required for the application to function. The current trial does not use advertising cookies.

10. Your choices and rights

Subject to applicable law and appropriate identity verification, you may request access to or correction of your personal data, ask questions about processing, withdraw consent where processing depends on consent, or request deletion where retention is no longer required. Organization-managed records may need to be handled through your organization's administrator.

Send requests to contactus@coder.my. We may retain information where required for security, legal obligations, or legitimate dispute records.

11. Children's data

The service is intended for workplace and organizational use and is not directed to children. Do not submit children's personal data unless your organization has a lawful basis and all required permissions.

12. Changes

We may update this Policy to reflect changes in the service, processing practices, or law. The revised effective date will appear above, and material changes may require renewed acknowledgement.

13. Contact and complaints

Privacy questions, access or correction requests, and complaints may be sent to contactus@coder.my. You may also have the right to contact the Malaysian Personal Data Protection Commissioner.