Privacy Policy

1. Who We Are

SewaManager is a rental management platform operated from Kuala Lumpur, Malaysia. We help landlords and tenants manage rental agreements, invoices, maintenance, and communication.

For privacy enquiries, contact us at: privacy@sewamanager.my

2. Data We Collect

We collect the following personal data when you use SewaManager:

• Phone number — for authentication and WhatsApp notifications
• Full name — to identify you on the platform
• Email address — optional, for account communications
• Payment records — invoices, rent amounts, payment dates, and proof of payment screenshots
• Tenancy documents — tenancy agreements and related documents you upload
• Maintenance details — maintenance requests, descriptions, and photos
• Property details — addresses and property information entered by landlords

3. How We Use Your Data

• To authenticate you and manage your account
• To generate and track rental invoices
• To send rent reminders and payment notifications via WhatsApp
• To manage maintenance requests between landlords and tenants
• To store and provide access to your tenancy documents
• To comply with legal and regulatory requirements in Malaysia

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Sharing

Your data may be shared with:

• Supabase — our database and storage provider (data hosted in Southeast Asia)
• Meta (WhatsApp Business API) — for sending notifications
• Your landlord or tenant — as required to manage your tenancy (e.g. landlords see tenant payment proofs)

5. Data Retention

We retain your personal data for the duration of your tenancy plus 6 years after the tenancy ends, in accordance with Malaysian record-keeping requirements under the Limitation Act 1953.

After this period, your data will be securely deleted or anonymised.

6. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request corrections to inaccurate or incomplete data
• Withdrawal of consent — withdraw consent to processing, where applicable
• Data deletion — request deletion of your data (see Section 7)
• Limit processing — object to certain uses of your data

To exercise any of these rights, contact us at privacy@sewamanager.my. We will respond within 21 days as required by PDPA 2010.

7. Data Deletion Requests

You may request deletion of your account and associated data by visiting our Data Deletion Request page or emailing privacy@sewamanager.my.

We will process your request within 30 days. Note that some data may be retained for legal compliance purposes (e.g. financial records).

8. Security

We use industry-standard security measures including encrypted connections (TLS), Supabase Row Level Security (RLS), and secure authentication via OTP. Your files are stored in private buckets accessible only to you and your landlord/tenant.

9. Contact Us

For any privacy-related concerns:

• 📧 privacy@sewamanager.my
• 📍 Kuala Lumpur, Malaysia