Privacy Policy

Zaps! is multi-tenant accounting software operated by Code Bit and used by authorized personnel of Code Bit and its customer companies. This policy covers personal data processed in the course of running Zaps! and in handling demo enquiries from prospective customers. It is not a consumer-facing service.

• Account data — name, work email, role, and hashed password of authorized users.
• Financial records — payment vouchers, expense claims, vendor and freelancer invoices, director allowances, and bank statement transactions.
• Payee details — names and payment references of staff, vendors, and freelancers, as needed to process payments.
• Activity logs — an audit trail of who created, approved, paid, or voided each record, with timestamps and before/after state.
• Prospects and enquiries — if you submit the request-a-demo form, your name, email, optional company name, and message. We use these only to respond to your enquiry and set up a demo, keep them for up to 12 months after our last contact, and do not use them for unrelated marketing. To have them erased sooner, contact us below.

We process this data to:

• Operate our accounting workflow — submit, approve, pay, and reconcile.
• Authenticate users and enforce role-based access.
• Generate reports, registers, and exports for financial management.
• Maintain an audit trail for accountability and compliance.

We process personal data to operate Zaps!, handle enquiries, and perform accounting functions and to meet our legal and record-keeping obligations, consistent with the Personal Data Protection Act 2010. We do not use this data for marketing.

Data is protected with technical and organizational safeguards, including:

• Bcrypt-hashed passwords and httpOnly session cookies.
• Signed, time-limited URLs for file attachments.
• Role-based access enforced server-side on every route and action.
• An immutable audit trail on all financial actions.

We do not sell personal data. Financial data is accessible only to authorized Code Bit personnel by role. We may disclose data to our banks, auditors, regulators, or professional advisers where necessary, or when required by law.

Financial records are retained for the periods required by Malaysian tax and companies legislation, and for as long as needed for our legitimate business and audit purposes. Account records are retained while access is active and for a reasonable period afterward.

Subject to the Personal Data Protection Act 2010, you may request access to, or correction of, personal data we hold about you. Because Zaps! is a system of financial record, some data cannot be deleted where retention is legally required. To make a request, contact us using the details below.

We may update this policy from time to time. The “Last updated” date above reflects the current version; continued use of the system after an update constitutes acknowledgment of the revised policy.

For any privacy question or request, contact admin@codebit.my or Code Bit Sdn Bhd (1479653-U), 02-13A, Sunway Citrine Hub, Sunway Iskandar, 79250 Iskandar Puteri, Johor.