Privacy Policy

Zaps! is an internal system used only by authorized Code Bit personnel. This policy covers personal data processed in the course of running our accounting operations — it is not a consumer-facing service.

• Account data — name, work email, role, and hashed password of authorized users.
• Financial records — payment vouchers, expense claims, vendor and freelancer invoices, director allowances, and bank statement transactions.
• Payee details — names and payment references of staff, vendors, and freelancers, as needed to process payments.
• Activity logs — an audit trail of who created, approved, paid, or voided each record, with timestamps and before/after state.

We process this data to:

• Operate our accounting workflow — submit, approve, pay, and reconcile.
• Authenticate users and enforce role-based access.
• Generate reports, registers, and exports for internal financial management.
• Maintain an audit trail for accountability and compliance.

We process personal data to perform our internal business and accounting functions and to meet our legal and record-keeping obligations, consistent with the Personal Data Protection Act 2010. We do not use this data for marketing.

Data is protected with technical and organizational safeguards, including:

• Bcrypt-hashed passwords and httpOnly session cookies.
• Signed, time-limited URLs for file attachments.
• Role-based access enforced server-side on every route and action.
• An immutable audit trail on all financial actions.

We do not sell personal data. Financial data is accessible only to authorized Code Bit personnel by role. We may disclose data to our banks, auditors, regulators, or professional advisers where necessary, or when required by law.

Financial records are retained for the periods required by Malaysian tax and companies legislation, and for as long as needed for our legitimate business and audit purposes. Account records are retained while access is active and for a reasonable period afterward.

Subject to the Personal Data Protection Act 2010, you may request access to, or correction of, personal data we hold about you. Because Zaps! is a system of financial record, some data cannot be deleted where retention is legally required. To make a request, contact us using the details below.

We may update this policy from time to time. The “Last updated” date above reflects the current version; continued use of the system after an update constitutes acknowledgment of the revised policy.

For any privacy question or request, contact admin@codebit.my or Code Bit Sdn Bhd (1479653-U), 02-13A, Sunway Citrine Hub, Sunway Iskandar, 79250 Iskandar Puteri, Johor.