Privacy Policy

Last Updated: 21 July 2026

1. Introduction

This Privacy Policy explains how the KiraPRO Sopi Seller Profit Calculator (MY) ("the Service", "we", "us") handles information when you use the website. We aim to collect the minimum information needed to operate the Service, and to be transparent about what happens to the numbers you enter.

2. Information We Collect

a) Email address (PRO login only). The Service does not require account registration. If you choose to access PRO features, you provide an email address so we can send you a one-time password (OTP). Your email address is used solely for authentication and OTP delivery.

b) Calculation inputs (transient, not stored). When you submit a calculation, the values you enter (such as selling price, product cost, quantity, weight, or package details) are transmitted over an encrypted (HTTPS) connection to our cloud server, where the calculation is performed. These inputs and their results are processed in server memory only and are not saved to any database, written to disk, or retained after the response is returned to your browser.

c) Technical and security records. To keep the Service secure and prevent abuse, we retain limited technical metadata, such as OTP session records and request counts used for rate limiting. These records do not contain the figures you calculate.

d) Browser-side storage. The Service stores small items on your own device via your browser's local storage — for example your login session token, your acceptance of the Terms of Use, your cookie consent choice, and display preferences. These items stay on your device and can be cleared at any time through your browser settings.

3. Information We Do Not Collect

  • We do not store your calculation inputs, product data, prices, costs, or results.
  • We do not collect names, passwords, or account profiles — there is no registration.
  • We do not use your email address for marketing, newsletters, or promotional messages.
  • We do not sell, rent, or trade any information to third parties.

4. How We Use Information

  • To authenticate you for PRO access via OTP
  • To perform the calculations you request and return results
  • To enforce rate limits and protect the Service from spam, bots, and abuse
  • To maintain and improve the reliability and security of the Service

5. Where Your Data Is Processed

The Service runs on third-party cloud infrastructure. Calculation requests are processed on cloud servers which may be located outside Malaysia. All communication between your browser and the server is encrypted using HTTPS. Limited authentication and security records (such as OTP sessions) are stored in a cloud database with restricted access.

6. Third-Party Services

  • Cloud hosting and database provider — runs the server-side calculation and stores limited authentication/security records.
  • Email delivery provider — sends OTP codes to your email address.
  • Google reCAPTCHA — helps us distinguish genuine users from bots. reCAPTCHA collects hardware and software information (such as device and browser data) and sends it to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

7. Cookies and Analytics

When you first visit the site, a cookie banner asks for your consent. Your choice is stored in your browser's local storage.

We may use Google Analytics to understand how visitors use the site. This may include anonymised IP address, browser and device type, pages visited, and time spent. This data is used solely to improve the site and is not sold or shared for advertising. You can opt out using the Google Analytics Opt-out Browser Add-on.

You can manage or disable cookies through your browser settings. Core functionality (calculation and login) does not depend on analytics cookies.

8. Data Retention

  • Calculation inputs and results: never retained — they exist only for the duration of your request.
  • OTP codes: expire within minutes of being issued.
  • Login/OTP session records and rate-limit metrics: retained for a limited period (up to 12 months) for security and audit purposes, then automatically deleted.
  • Browser-side items: remain on your device until you clear them.

9. Data Security

We use HTTPS encryption in transit, time-limited OTP codes instead of passwords, and restricted-access cloud infrastructure. Because calculation figures are never stored, there is no database of your business numbers to breach. No method of transmission over the internet is 100% secure, but we take reasonable measures to protect the limited information we handle.

10. Your Rights (PDPA)

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

  • Be informed about how your personal data is processed
  • Request access to personal data we hold about you (essentially, your email address )
  • Request correction of inaccurate personal data
  • Request deletion of your email address from our records

To exercise any of these rights, contact us using the details below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes are published constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us using the contact form.

Version: 2026.07.21-v1