Privacy Policy

1. Introduction

KodPintar LLP ("Company", "we", "us", or "our"), a limited liability partnership registered in Malaysia, operates FSpend ("Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the Personal Data Protection Act 2010 (PDPA) for users in Malaysia.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and password (or magic link authentication data)
• Organization data: Organization name, team member details, and roles
• Financial data: Expense records, invoices, categories, and financial reports that you create within the Service
• Payment data: Billing information processed by Paddle (we do not store credit card numbers directly)
• Usage data: Log data, device information, and how you interact with the Service

3. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send transactional emails (e.g., magic links, invoices, account notifications)
• Respond to support requests
• Ensure security and prevent fraud
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your financial data for advertising or marketing purposes.

4. Legal Basis for Processing (GDPR)

For users in the EEA, we process your data based on:

• Contract performance: Processing necessary to provide the Service you subscribed to
• Legitimate interests: Improving the Service, ensuring security, and preventing fraud
• Legal obligations: Compliance with applicable laws and regulations
• Consent: Where required, such as for optional analytics

5. Data Storage and Security

Your data is stored on servers hosted by Hetzner Online GmbH in Germany (European Union). This means your data is stored within the EU and is subject to EU data protection standards.

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

6. Third-Party Processors

We share your data with the following third-party service providers who process data on our behalf:

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account or your subscription is terminated, we will delete your data within 90 days, except where we are required to retain it for legal or regulatory purposes.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a portable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at support@fspend.com. We will respond within 30 days.

9. Cookies

We use essential cookies required for the Service to function (e.g., session management and authentication). We do not use advertising or tracking cookies. If we introduce optional analytics cookies, we will obtain your consent before setting them.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: