Privacy Policy

Last updated: September 2026

This Privacy Policy explains how myoffo ("myoffo", "we", "us") collects, uses, stores, and protects information when a business ("Customer", "you", "your company") and its staff use the myoffo platform at myoffo.com and its related mobile/desktop apps (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Who this applies to

myoffo is used by a business ("Customer") to manage its own staff, attendance, invoicing and related records. The Customer is the data controller for the personal data of its own staff and clients that it enters into myoffo (for example, staff names, attendance records, and invoice details). myoffo acts as the data processor that stores and processes that data on the Customer's behalf, in line with this policy and applicable law, including Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Information we collect

a) Account information

• Name, email address, and phone number provided at signup or by an admin when creating a staff account.
• Password (stored in encrypted/hashed form), or, if you choose "Continue with Google", your Google account's name, email address, and profile photo as shared by Google.
• One-time passcodes (OTP) sent to your email or phone number to verify your identity.

b) Attendance and location data

• Clock-in/clock-out timestamps.
• GPS location at the time of clock-in/clock-out, and, where a Customer enables geofencing, your device location used to confirm you are within an approved work area.
• Where a Customer enables face verification for attendance, a facial image or facial-recognition template captured at clock-in/clock-out, used only to confirm the identity of the person clocking in.

c) Work records

• Leave/cuti applications and approval status.
• Invoices, quotations, and related financial documents your company creates in myoffo.
• Payment status and amounts shown on invoices, where your company has connected its own payment gateway (such as Billplz or SenangPay) to myoffo. myoffo does not hold or process the funds itself. Payments are handled directly between your customer and your own connected payment gateway account. myoffo only stores the resulting payment status/receipt information for your records.

d) Technical information

• Device type, browser/app version, IP address, and log data, used for security, troubleshooting, and service improvement.

3. How we use information

• To provide, operate, and maintain the Service (accounts, attendance tracking, invoicing, calendar, and related features).
• To verify identity at login and at attendance clock-in (including OTP and, where enabled, face verification).
• To send account, OTP, billing, and service-related notifications by email (from noreply@myoffo.com) or SMS.
• To detect and prevent fraud or abuse, for example, limiting free-trial signups to one trial per phone number.
• To maintain the security, integrity, and reliability of the Service.
• To comply with legal obligations.

We do not sell personal data to third parties, and we do not use staff attendance, location, or face-verification data for advertising.

4. How information is shared

• Within your company: data staff enter (attendance, leave, documents) is visible to authorised admins/managers within the same company account, as configured by your company.
• Service providers: we use third-party providers to operate the Service, such as our hosting provider, email delivery (for OTP and notifications), and SMS/OTP providers. These providers only process data as needed to provide their service to us.
• Sign-in with Google: if you sign in with Google, Google shares your name, email, and profile photo with myoffo as permitted by your Google Account settings. This is governed also by Google's Privacy Policy.
• Payment gateways: if your company connects its own Billplz/SenangPay (or similar) account, payments are processed directly by that gateway under its own privacy policy and terms. myoffo does not receive or store your customers' payment card or banking credentials.
• Legal requirements: we may disclose information if required by law, regulation, or a valid legal process.

5. Data retention

We retain personal data for as long as your company's account is active, and for a reasonable period afterward as needed for legal, accounting, or legitimate business purposes. GPS location history collected for attendance purposes is retained only for the period needed for attendance and payroll verification, after which it is periodically purged. A Customer may request deletion of its company's data by contacting us as set out below.

6. Data security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), password hashing, and access controls, to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Subject to applicable law (including the PDPA), you may have the right to access, correct, or request deletion of your personal data, or to withdraw consent for optional features such as face verification or GPS tracking (note that disabling these may limit certain attendance features). Staff members should first raise such requests with their own company admin, since the company controls its own staff data; company admins or account owners can contact us directly at the email below.

8. Children's privacy

The Service is intended for business use by adults (staff and business owners) and is not directed at children. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact us

Questions about this Privacy Policy or your data can be sent to support@myoffo.com.