Privacy notice
This notice explains how Robostrikeforce Sdn. Bhd. handles personal data when you use Accountants.com.my, including our website at malaysia.accountants.com.my and the client workspace at accountants.com.my, as required by Malaysia’s Personal Data Protection Act 2010 (as amended in 2024).
Who we are
Robostrikeforce Sdn. Bhd. (company number 202601021273 (1683370-U)), J-3A-16, Block J, Solaris Mont Kiara (SOHO KL), Jalan Solaris, Mont Kiara, 50480 Kuala Lumpur, Malaysia, operates Accountants.com.my and is responsible for your personal data. Contact us about your personal data at hello@accountants.com.my or +60 11-2619 3593.
What we collect
- Website fee estimates: the figures you enter in the fee calculator on our website. The calculator does not ask for your name or email and does not create a client record.
- Account details: your email address, a display name taken from it, your role in each company, and any referral code you arrived with.
- Company details: company name, SSM registration number, financial year dates and, if you give them for invoicing, tax identification and SST numbers.
- Documents you upload: bank statements, accounts, invoices, receipts, payment receipts and anything else you add. These often contain personal data about directors, shareholders, staff, customers and suppliers.
- Your answers and messages: answers to our questions, messages to our team, feedback and questions you ask the Genie assistant.
- Payment records: invoices, amounts, references and the confirmations our payment processors send us. Card details are entered only on the payment processor’s secure page. Our website has no card fields, so we do not collect your full card number or security code (CVV). We may keep limited card details the processor sends us, such as the issuing country, card type and last four digits.
- Customer billing (only if you use it): your business address, contact and bank details, and the names, emails and addresses of the customers you bill.
- Security records: sign-in events and an activity log for each engagement. When you confirm a declaration we record your IP address and browser details with it. Your IP address is also used, in hashed form, to limit repeated requests.
- Emails we send you: a copy of each service email, including sign-in codes (codes are kept only in hashed form for checking).
You can upload documents before you sign in. They are kept in a temporary draft linked to your browser until you verify your email.
Why we use it
- To sign you in and keep your account and companies secure.
- To give you fee estimates and your quotation, and to generate the financial statements, tax return figures and related documents you ask the platform for.
- To ask you the platform’s questions about your documents and deal with your messages and requests.
- To invoice you, take payment and keep payment records.
- To send you service emails, such as sign-in codes, quotations and status updates. We send only service emails. We do not send marketing emails.
- To prevent abuse, investigate problems and keep an audit trail of the work.
- To meet our legal, accounting and record-keeping obligations.
Who processes it for us
We use the following classes of service providers. They process personal data for us to provide their service.
- Cloud hosting and storage providers: host our website and the workspace, and store its database and your documents. They also check that requests come from a person, which involves your IP address.
- Email delivery providers: deliver our service emails, including sign-in codes.
- Payment processors: process online payments. They receive the amount, an invoice reference and, depending on the processor, your name and email.
- Technology and AI processing providers that power the platform: the platform uses them to read your documents, generate draft accounts, tax figures and quotations, and answer questions in the Genie assistant. Document contents, your answers and company details are sent to them for this purpose.
- Our own processing computer in Malaysia: copies of your documents are transferred to a computer operated by us in Malaysia, where they are scanned for malware and processed by the platform’s software.
Our support team can see your information to run the platform, handle payments and answer your messages. They do not prepare or review your accounts. People you invite to your company can see that company’s records. We also disclose information where the law requires it.
Transfers outside Malaysia
Your personal data is processed in Malaysia and abroad. Some of our service providers are located outside Malaysia, including in the United States. We use them because the service depends on them, and we transfer personal data only as permitted by the Act.
How long we keep it
- Documents uploaded without signing in are deleted after 30 days if no one verifies an email for them.
- Sign-in codes expire after 10 minutes and are deleted within a day. Your signed-in session lasts up to 30 days.
- We keep other personal data for as long as needed to provide the service and to meet legal, accounting and record-keeping obligations. Removing a document from a draft hides it from the work, but the stored copy stays with the engagement record.
Cookies, browser storage and analytics
We use one essential cookie, aw_session, to keep you signed in and secure. It lasts up to 30 days. The workspace also keeps drafts and your place in your browser’s session storage, which is cleared when you close the tab.
Our hosting provider’s cookieless web analytics counts page visits and measures page performance. It does not set cookies. We do not use advertising cookies or advertising trackers.
Your choices and rights
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to correct data that is inaccurate, incomplete or out of date. You can edit company details yourself until a quote is issued.
- Withdraw consent or limit processing: you can withdraw consent or ask us to limit how we process your data. We may then be unable to continue the service, and we will still keep records the law requires.
- Portability: ask us to transmit your personal data to another data controller, where the Act allows it.
Email hello@accountants.com.my or call +60 11-2619 3593 to make a request. We respond within the time the Act requires.
Your email address is needed to sign in, and your company details and documents are needed to generate your accounts. If you do not provide them, we cannot provide the service.
Security and changes
Access to each company’s records is controlled by sign-in and company permissions. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as the Act requires. We will update this notice if our practices change.
Last updated 14 October 2026.