Privacy Policy

Last updated: 13 August 2026

Resit Asia ("[Company Name], [Registration No.]", "we", "us") respects your privacy and is committed to protecting your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and this policy.

1. What we collect

Receipt data — the photos and contents of receipts you send us, plus the categories, vendors and amounts we extract from them.
Account data — your WhatsApp phone number (your account identity), name if you provide it, and subscription/plan details.
Payment data — transaction identifiers from our payment provider (NowPayments). We do not see or store your crypto wallet private keys; payments are processed by NowPayments.
Usage analytics — with your consent, Google Analytics collects anonymous visit data (pages viewed, device type, approximate location, referrer) to help us improve the site and measure marketing.

2. How we use your data

To read, organise, categorise and store your receipts for tax time.
To authenticate you via WhatsApp and provide your dashboard.
To process plan activation, billing and support requests.
To improve the service and measure our marketing (analytics, with consent).

3. Legal basis

We process your data on the basis of your consent (when you sign up and send us receipts) and as needed to perform our contract with you (delivering the service you paid for).

4. Storage & security

Your data is stored on our servers (Tencent Cloud, Singapore region). We protect it with encryption in transit (TLS) and at rest, access controls, and regular backups. Only authorised personnel can access your data, and only to operate and support the service.

5. Retention

We keep your receipts and account data for as long as your account is active, plus a reasonable period afterwards for tax and legal purposes. You can request deletion at any time (see Section 8).

6. Third parties

We share data only where necessary with: NowPayments (payment processing),WhatsApp / Meta (messaging), Google Analytics (analytics, with consent), and our hosting provider. We do not sell your data.

7. Cookies & tracking

We do not use advertising cookies by default. With your consent, Google Analytics uses cookies and storage to measure visits. You can withdraw consent at any time by clearing your browser storage for this site. Opt out of personalised Google Ads at adssettings.google.com and of Google Analytics via the browser opt-out.

8. Your rights

Under the PDPA you may request access to, correction of, or deletion of your personal data. Email support@resit.asia — we respond within 30 days. You may also close your account at any time.

9. Children

Resit Asia is intended for users aged 18 and above. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time; the "Last updated" date above will always reflect the latest version. Material changes will be notified via WhatsApp or email.

Questions? Email support@resit.asia or message us on WhatsApp — we usually reply within one business day.